last executing test programs: 5.110055587s ago: executing program 1 (id=1629): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[], 0x6c) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r2, &(0x7f0000000340)=ANY=[@ANYBLOB='exec :'], 0x1e0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb49f35c25d456591f0c15a08769bcd5107053ea1f85250ac10e50c14ffda0a7a98740f8cb9694c01f2babb95936415d219753d982b3e6ab52070adabe6f61dce71ee97249cf86cdd7b9a6b4b3d24ddebcf8ea9f1ae197c9a9cd65f1521018", 0x66) write$qrtrtun(r0, &(0x7f0000000dc0)="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", 0x38b) r4 = syz_open_dev$video(&(0x7f0000000000), 0x9, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VIDIOC_G_INPUT(r4, 0x80045626, &(0x7f0000000040)) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)=0x20) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000015c0)={0x2, 0x2, 0x0, 0x3, 0x30, 0x0, 0x0, 0x0, [@sadb_key={0x25, 0x9, 0x8f8, 0x0, "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"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x60000000}, @sadb_x_sa2={0x2, 0x9}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e23}, @sadb_lifetime={0x4, 0x2, 0x1e06c, 0xc, 0x7, 0x7fffffffffffffff}]}, 0x180}}, 0x0) stat(&(0x7f0000000c40)='./file0\x00', &(0x7f0000002bc0)) ioctl$UI_END_FF_UPLOAD(r3, 0x406055c9, &(0x7f0000000c80)={0x5, 0x1000, {0x57, 0x76, 0x1, {0xff00, 0x200}, {0x8, 0x40}, @period={0x5b, 0x1, 0x7fff, 0x0, 0x74, {0x0, 0x8, 0x9, 0xb}, 0x0, &(0x7f0000000c80)}}, {0x53, 0x2, 0x1, {0x1f8a, 0xffb}, {0x7, 0x53a}, @rumble={0x5, 0x4}}}) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r8, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x1, 0xab, &(0x7f0000001180)=ANY=[@ANYBLOB="12015002020000082505a1a440000102030109029900020106a0150904000001020d0000052406000105240008000d240f01070000000b0402000606241a0b000c0c241b4000f8ff0903000008072414040008001524120800a317a88b0403000000000000007e392a152412fd49a317a88b045e4f01a607c0ffcb7e392a090581030002050105090401a241ab411a3ccd90a20000020d00000904010102020d0000090582022000920103f26bd5f01d82b0256b87074c0ade68595b5e9f68f773467630ebeb3882aca1e92a5737be03f7a16c00e20b0664106cadd4a1274346ddfe51262cdf695541947996"], &(0x7f0000000500)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x6, 0x8, 0x1, 0x10, 0xd}, 0x16, &(0x7f0000000180)={0x5, 0xf, 0x16, 0x1, [@generic={0x11, 0x10, 0xb, "717fa2e1c8cf8fa5485f78d31d10"}]}, 0x8, [{0xe4, &(0x7f0000000200)=@string={0xe4, 0x3, "74a7f2f0c59bbbc7aede9957626a01754999d34103d02f556dfeed8ec60719fcf5ea593a33f4ddec68435a1a15c5eac9db30bd2db09477d77b76bde3f401d359a17fd44c9b43291b8b163ca92a178883df9857fc4fd843cf1363da18c555db1ebb534c9b61644ae882dd1031a96acd6edd5e066253e76e1231eb26a14eccbbcee9ca58510fb457d8a2bef98f9282207ef68f0dd2977ebe2e9b91b98677fbe44466452b4c09eda1661a07bc83d176b9cfad75f6063f4f6211c8670efefc7d03e268a1cc61fbc102753b3a4a0be39025b7e5e8000e281b8398880ed343c27d703aa551"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x820}}, {0xa, &(0x7f0000000380)=ANY=[@ANYBLOB="0c032eccb8dc9f83301a"]}, {0x5a, &(0x7f0000000680)=ANY=[@ANYBLOB="5a03c741f2d651c6df89d8670db051eacaebc0d3fec0952cc182b33e0ddeb98c163a304eac74da6bb3479085e8ec007c31b7ac5242aedd55ebf9b7c05eec4027fc4a57cf20678144b0bebd00000000bfbcfcc2be85287d15b1f6a9b360e9a7a6cc4fc08af138081f98312103da719d"]}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x3401}}, {0xf6, &(0x7f0000000580)=@string={0xf6, 0x3, "082a77211b12c337c01e5aa4bd2aad1639cd9f0bfba9fb4c00b263d43fdfe3b998616d6e474530f842115a9001bccbaa8dfb078b3d4b57ad95e9978447e60422f6e686b576409e564c855e58d8f1ce7db9dd9100350e4ad7fe32cb80e5e154e8e992be36055500c858f8094e8552c126bf36ec14290079082988ca00236bff478b1f5df7ccc2875003349fa0cf68680ecf2bcf6c063365d1366ede7b83aba058dd8be81627404286c0760942de2d1a283769c6ac11478e4f0f111c5f77c2aa9df9656ff53b1a7192a0e8449f3ec807d17703cdc3895363a4864afd1e7b5edb672cb9fead9df3d513ae6cc4c55477c5fdbd52797b"}}, {0x40, &(0x7f00000004c0)=@string={0x40, 0x3, "dd27828b5a6642df50aa0a723e41d57337b027664c9113930fccef2fb2e4cf3aafb9f45fd3c42a828fe7251a133dbbb21ceb8285636223a58c24a0c3760f"}}]}) close_range(r7, 0xffffffffffffffff, 0x0) 3.740040756s ago: executing program 3 (id=1637): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='net/ip_vs\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000) 3.68091891s ago: executing program 3 (id=1638): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f90925090987f70e06d038e7ff7fc6e5539b3243078b089b3b33386d090890e0878f0e1ac6e7049b334c959b4a9a240f5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d076d0936cd3b78130daa61d8e809ea02b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18809a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dce61a0b29aa328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x39}}}}, 0x104) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000004) lseek(r0, 0x6, 0x1) unshare(0x60000000) mprotect(&(0x7f0000003000/0xe000)=nil, 0xe000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) 3.62058044s ago: executing program 0 (id=1639): socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) geteuid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 3.560691456s ago: executing program 3 (id=1640): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000007c0)=ANY=[@ANYRESOCT, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb70200", @ANYRES64=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = dup(r2) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000380)={0x28, 0x5, r5, 0x0, &(0x7f0000000280)="7af00b0d08346fd182a037bd79242b5b4564aa5eb26924646ce19f41e9f8984a0196dd4f36151abc720f699a0cbbde662fb95c027309875d0b525ba7bf5136bc37feea29ebc0328469b5e98dedf86d714314e441b178c2d9802a4263e905e17c480b0a3934e2eb53c3731823fc8a22b55a3c3650db39291fcf6a37ef2d18e43fe8f68de8f03ea6d130534ed81242d2fc0d8115e5f0a1c1b68dcf2713b43d0d52153317b998bfa794539287451a906e145768a73fce4509323f5f922b25329140d1838a62", 0xc4, 0x4}) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './file0'}, 0xfffffffffffffcf3) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305828, &(0x7f00000000c0)={0xfffffdfd, 0xffffffffffffffff, 0x0, 0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) r6 = epoll_create1(0x0) r7 = socket$inet(0xa, 0x801, 0x84) setsockopt$sock_int(r7, 0x1, 0x25, &(0x7f00000003c0)=0xb4e, 0x4) listen(r7, 0x100000001) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xe) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r9, &(0x7f00000001c0)={0x60000015}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r9, &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x600000, 0x0) 3.329845292s ago: executing program 3 (id=1641): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x5, 0xb, [], 0x0, 0x0, 0x1}}) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder1\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x951) r3 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24008004) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES16=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000001480)}], 0x2) sendmsg$NFT_BATCH(r4, 0x0, 0x200548d0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) write$binfmt_misc(r4, &(0x7f00000000c0)="87d34d64adcfba62ebda02365be94a453bb40914e7c0e48bea", 0x19) close(r5) connect$bt_sco(r0, &(0x7f0000000040), 0x8) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000300)={0x2f8, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x84, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x50000000}, @TIPC_NLA_NODE_ID={0x2a, 0x3, "34c58ce89d23f657ff7ca0877f1c759cdf5b93460fdb97d0925fbefb887252d0be23a56ed450"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "6d7507ae09f243ea70259adf9e66b95e0c126b81f596aee1"}}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffe00}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2c}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x42}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6225}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd2}]}, @TIPC_NLA_NODE={0x130, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "2bd527adc611869fe913e8fc80b15ca83a033e330cf842c279fb4a0e49ecf18b760fb7"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "863a6590bdef0f0f13e1449c8fca6b33d8cd09c40cbbae3858101be89c"}}, @TIPC_NLA_NODE_ID={0x6e, 0x3, "dc00000100552703006dde90dd09461f3513c2ff19d2daf190b20b8e8839bc844c19af80d768730433645c51e2994fa56d8537e35b4012ef906f392f901cd655d801e13374d05e7e03376dde7b4f676d6f30e5777807e66722c39275551380b95b2a2a6958917133f4c5"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x34e88000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffff81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x18, 0x3, "3fe2f7a96805950fec840577d3978d4b37abed16"}]}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x8000}, 0x4) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000040), 0x141000, 0x0) write$dsp(r6, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 3.329365775s ago: executing program 1 (id=1642): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e24, 0x3cf9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x80000000}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}], 0x58) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) shmget$private(0x0, 0x3000, 0x100, &(0x7f000099e000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000080000000b20000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400008000000000000000001000"/28], 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) readv(0xffffffffffffffff, &(0x7f00000018c0)=[{0x0}], 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x5) (async) ioctl$TCFLSH(r2, 0x8926, 0x20001100) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)={0x6, [0x8, 0x3, 0x4, 0x874, 0x9, 0x2]}, &(0x7f00000001c0)=0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) (async) dup(r1) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x8000000, 0x0, 0x28000}, &(0x7f0000000240)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) open_by_handle_at(r3, &(0x7f0000000280)=@isofs={0x14, 0x1, {0x80, 0x0, 0x3, 0xd43b, 0xffff, 0x1}}, 0x604802) (async) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='numa_maps\x00') read$FUSE(r5, &(0x7f0000003480)={0x2020}, 0x2020) 3.249956838s ago: executing program 1 (id=1643): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500090001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x8, [@struct={0xa, 0x3, 0x0, 0x4, 0x0, 0x1, [{0x2, 0x1, 0x8}, {0x6, 0x1, 0x4}, {0xe, 0x0, 0xc}]}, @ptr={0x9, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x61, 0x30, 0x0, 0x5f, 0x61, 0x2e]}}, &(0x7f00000004c0)=""/94, 0x5c, 0x5e, 0x0, 0xd, 0x10000, @value=r3}, 0x28) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)='\x00'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) close_range(r3, r1, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) 3.130818955s ago: executing program 1 (id=1644): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) nanosleep(&(0x7f0000000080), 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x100800001) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x900, 0x12) 3.070473868s ago: executing program 1 (id=1645): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) io_setup(0xeb0, &(0x7f0000000140)=0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000004000000", 0xfe60) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, 0x0, &(0x7f0000000040)) io_submit(r0, 0x1, &(0x7f0000001980)=[&(0x7f00000001c0)={0x0, 0x0, 0x40000000, 0x1, 0x0, r1, 0x0, 0x0, 0x3fffffffffffd, 0x0, 0x2}]) r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x0) keyctl$describe(0x6, r3, 0x0, 0x0) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000d80)="0000000000000004ff6943b80000000800000028f20000000086070000", 0x4000, r4) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000003c0), 0x0, r5) keyctl$KEYCTL_MOVE(0x1e, r3, r4, r5, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r6) 2.828727911s ago: executing program 2 (id=1647): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mknod$loop(&(0x7f0000000080)='./file0/bus\x00', 0x6210, 0x0) creat(&(0x7f0000000040)='./file0/bus\x00', 0x0) chdir(&(0x7f0000000140)='./file0/bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17c) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x8040001) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000001c0)) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000180)={[0x5, 0xb, 0x4, 0x2d, 0x4, 0x1cc3, 0x7ff, 0x7, 0x5, 0x7fff, 0x100, 0x5, 0xfffffffffffffff9, 0x6, 0x9, 0x3], 0x100000, 0x800}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000005c0)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/62, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/73, &(0x7f0000000880)=""/72}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) write$P9_RREAD(r0, 0x0, 0xb) 2.700142367s ago: executing program 0 (id=1648): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={0x0, &(0x7f0000000280), 0x0, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x401, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000200), &(0x7f0000000300)=[0x0], &(0x7f0000000580)}) 2.640321762s ago: executing program 0 (id=1649): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000040)="363c8f3fca5d66571e583e", 0xb, 0x4810, &(0x7f0000000200)={0x11, 0x9, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.638438281s ago: executing program 0 (id=1650): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[], 0x6c) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r2, &(0x7f0000000340)=ANY=[@ANYBLOB='exec :'], 0x1e0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb49f35c25d456591f0c15a08769bcd5107053ea1f85250ac10e50c14ffda0a7a98740f8cb9694c01f2babb95936415d219753d982b3e6ab52070adabe6f61dce71ee97249cf86cdd7b9a6b4b3d24ddebcf8ea9f1ae197c9a9cd65f1521018", 0x66) write$qrtrtun(r0, &(0x7f0000000dc0)="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", 0x38b) r4 = syz_open_dev$video(&(0x7f0000000000), 0x9, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VIDIOC_G_INPUT(r4, 0x80045626, &(0x7f0000000040)) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)=0x20) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000015c0)={0x2, 0x2, 0x0, 0x3, 0x30, 0x0, 0x0, 0x0, [@sadb_key={0x25, 0x9, 0x8f8, 0x0, "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"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x60000000}, @sadb_x_sa2={0x2, 0x9}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e23}, @sadb_lifetime={0x4, 0x2, 0x1e06c, 0xc, 0x7, 0x7fffffffffffffff}]}, 0x180}}, 0x0) stat(&(0x7f0000000c40)='./file0\x00', &(0x7f0000002bc0)) ioctl$UI_END_FF_UPLOAD(r3, 0x406055c9, &(0x7f0000000c80)={0x5, 0x1000, {0x57, 0x76, 0x1, {0xff00, 0x200}, {0x8, 0x40}, @period={0x5b, 0x1, 0x7fff, 0x0, 0x74, {0x0, 0x8, 0x9, 0xb}, 0x0, &(0x7f0000000c80)}}, {0x53, 0x2, 0x1, {0x1f8a, 0xffb}, {0x7, 0x53a}, @rumble={0x5, 0x4}}}) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r8, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x1, 0xab, &(0x7f0000001180)=ANY=[@ANYBLOB="12015002020000082505a1a440000102030109029900020106a0150904000001020d0000052406000105240008000d240f01070000000b0402000606241a0b000c0c241b4000f8ff0903000008072414040008001524120800a317a88b0403000000000000007e392a152412fd49a317a88b045e4f01a607c0ffcb7e392a090581030002050105090401a241ab411a3ccd90a20000020d00000904010102020d0000090582022000920103f26bd5f01d82b0256b87074c0ade68595b5e9f68f773467630ebeb3882aca1e92a5737be03f7a16c00e20b0664106cadd4a1274346ddfe51262cdf695541947996"], &(0x7f0000000500)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x6, 0x8, 0x1, 0x10, 0xd}, 0x16, &(0x7f0000000180)={0x5, 0xf, 0x16, 0x1, [@generic={0x11, 0x10, 0xb, "717fa2e1c8cf8fa5485f78d31d10"}]}, 0x8, [{0xe4, &(0x7f0000000200)=@string={0xe4, 0x3, "74a7f2f0c59bbbc7aede9957626a01754999d34103d02f556dfeed8ec60719fcf5ea593a33f4ddec68435a1a15c5eac9db30bd2db09477d77b76bde3f401d359a17fd44c9b43291b8b163ca92a178883df9857fc4fd843cf1363da18c555db1ebb534c9b61644ae882dd1031a96acd6edd5e066253e76e1231eb26a14eccbbcee9ca58510fb457d8a2bef98f9282207ef68f0dd2977ebe2e9b91b98677fbe44466452b4c09eda1661a07bc83d176b9cfad75f6063f4f6211c8670efefc7d03e268a1cc61fbc102753b3a4a0be39025b7e5e8000e281b8398880ed343c27d703aa551"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x820}}, {0xa, &(0x7f0000000380)=ANY=[@ANYBLOB="0c032eccb8dc9f83301a"]}, {0x5a, &(0x7f0000000680)=ANY=[@ANYBLOB="5a03c741f2d651c6df89d8670db051eacaebc0d3fec0952cc182b33e0ddeb98c163a304eac74da6bb3479085e8ec007c31b7ac5242aedd55ebf9b7c05eec4027fc4a57cf20678144b0bebd00000000bfbcfcc2be85287d15b1f6a9b360e9a7a6cc4fc08af138081f98312103da719d"]}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x3401}}, {0xf6, &(0x7f0000000580)=@string={0xf6, 0x3, "082a77211b12c337c01e5aa4bd2aad1639cd9f0bfba9fb4c00b263d43fdfe3b998616d6e474530f842115a9001bccbaa8dfb078b3d4b57ad95e9978447e60422f6e686b576409e564c855e58d8f1ce7db9dd9100350e4ad7fe32cb80e5e154e8e992be36055500c858f8094e8552c126bf36ec14290079082988ca00236bff478b1f5df7ccc2875003349fa0cf68680ecf2bcf6c063365d1366ede7b83aba058dd8be81627404286c0760942de2d1a283769c6ac11478e4f0f111c5f77c2aa9df9656ff53b1a7192a0e8449f3ec807d17703cdc3895363a4864afd1e7b5edb672cb9fead9df3d513ae6cc4c55477c5fdbd52797b"}}, {0x40, &(0x7f00000004c0)=@string={0x40, 0x3, "dd27828b5a6642df50aa0a723e41d57337b027664c9113930fccef2fb2e4cf3aafb9f45fd3c42a828fe7251a133dbbb21ceb8285636223a58c24a0c3760f"}}]}) close_range(r7, 0xffffffffffffffff, 0x0) 2.030595696s ago: executing program 1 (id=1651): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x18d1, 0x503c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x90, 0xff, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x81, {0x9, 0x21, 0x1, 0x7, 0x1, {0x22, 0xb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xe, 0xc5, 0xc}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x5, 0x9, 0xc0, 0xb7, 0x3}, 0x157, &(0x7f0000000240)={0x5, 0xf, 0x157, 0x4, [@generic={0xe6, 0x10, 0xa, "adda84fcc96c64a6443c58ed8ca09afb2902b8aed198f4f6cb63d800e59a4923b0591739e5c72e1a6e34a5aa830182a4bca65d7a3ea702e9b2ed926ff3a3c56c600a8059be5e919264376566aff7731178b4fba293f8d6e0f758de6a45339d915652a4c36f6baf61b896da0c420a4cfa86348a84b6344f804ddbb6561fc36a0b0a18429253777812c59abc57230445ba4a7e637de664bb9c5e0bb0c461d51a2bf1ff9e88d8f2cf6c5e87dab9411853ab1bf8e4b20018916c3b03042b1e23a5f5b77ecd84e5a980b7807a38a030ba00d1a495e9895c3c235d5f52c3bce34b51755b0662"}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x5, 0xf00, 0x6, [0xc000, 0xc000, 0xffc00f, 0xc0c0, 0xc0, 0xff003f]}, @ssp_cap={0x24, 0x10, 0xa, 0xe, 0x6, 0x4, 0x0, 0x8, [0xc0, 0xbe00, 0x6000, 0x0, 0xcf, 0xf]}, @ssp_cap={0x24, 0x10, 0xa, 0x81, 0x6, 0x7fff, 0x0, 0x0, [0xff0000, 0xffc0e8, 0x30, 0xff00, 0x0, 0x0]}]}, 0x1, [{0xd3, &(0x7f0000000100)=@string={0xd3, 0x3, "eb096f64647d8c0608c5ccec861327afd6ba1c18cf681b252ff7dfb756f599d64e750ebcf3f2a11bff6445877805f0c6d556b75421e3685fdeb0ba3f3206bde7b9d71dcb53aebe645e97616f224707df7c000aec071b48b30cfcba979af4ce91d3986a01a63c980306ce566e3b75895a731e7aa47532f8d277fd787291059f1e9abf80c096213e84a4a45f7db7380b3c5a9a8c038d32c72cb3401c93b3523b5d9abbd14a94252015425c749574b057ea1523808ff88c23556def2a9bcc17952b8fe7508b8e95cd739900455338bdb1a9d3"}}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0x8, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x80, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1ff}, 0x11) 1.692627321s ago: executing program 2 (id=1652): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setresuid(0xee01, 0xee00, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x29, &(0x7f0000000440)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x15, 0x0, 0x0, 0x76}}, @snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYBLOB="000000000700000000000000ae"], 0x20000078}}, 0x0) 1.610374624s ago: executing program 2 (id=1653): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000000c0)={0x6, 0x1}) syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) timer_create(0x6, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) syz_io_uring_setup(0x607e, &(0x7f0000000000)={0x0, 0x0, 0x100}, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x0, [{}, {}, {}, {0x1}, {}, {0xfffffffa, 0x6}], 0x0, 0x0, 0x8, 0x0, 0x1}}) socket$inet6_mptcp(0xa, 0x1, 0x106) fstat(r1, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f00000003c0)={{}, 0x100, './file0\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0xa00000000000000}, 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) 1.310740406s ago: executing program 0 (id=1654): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000380001800c000100636f756e74657200040002800800034000000110140000001000010000000a00000000000000000055b12766dee3bfa53fa83fd019201a5a897567297676521e22831c925e3a1789f9446742f4b99765cf24b1b5a76ad91040c0e189bfe9c6c5a952ca93ad90e2e92e260530409cfa28bc4d80d8108a683a93f36cf5f2ca27f834b9963d3e236e383eba7424c14891698cb022d1aede7be587d78bb516fc1f055931e3b7b2cb3d6ecc18d37bca75146fc61460074eab5fd269d7e9a17d2c1595304cd5ad7d82e85fc96318e61e8375ab8c96c980cf8e8a34110cefa0a21d112620acb8a2921b4f6e916bf372a13585"], 0xc8}}, 0x20050800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000200"/24], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = syz_open_dev$radio(&(0x7f0000000280), 0x1, 0x2) ioctl$VIDIOC_DQEVENT(r4, 0x80805659, &(0x7f0000000080)={0x0, @frame_sync}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x2}) syz_io_uring_setup(0xd3, &(0x7f0000000480)={0x0, 0x3, 0x0, 0x1}, &(0x7f0000000040), &(0x7f0000000080)) syz_open_dev$tty20(0xc, 0x4, 0x0) unshare(0x62040200) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) 870.633005ms ago: executing program 2 (id=1655): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000001c0)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x380000, @mcast2}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000140), 0x8) sendmmsg$alg(r0, &(0x7f00000000c0)=[{0x20000000, 0xff00, 0x0}], 0x1, 0x0) r1 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000080)=ANY=[]) ioctl$KVM_GET_VCPU_EVENTS(r4, 0xc048aeca, &(0x7f0000000080)) r5 = dup2(r1, r1) ioctl$CDROMVOLREAD(r5, 0x5313, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source', &(0x7f0000000f80)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9bMQ9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8}, @TCA_CT_MARK_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x10000) r5 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0cc5640, &(0x7f0000000540)={0x1, @sliced={0x0, [0x12a9, 0x400, 0xea, 0x8, 0xffff, 0x3, 0x6, 0x8, 0x83, 0x1, 0xe3c7, 0x5, 0x6, 0x8, 0x9, 0x200, 0x7, 0x9, 0x5, 0x3, 0x1ff, 0xad3f, 0x5, 0x4, 0x0, 0x7, 0x6, 0x8, 0x101, 0x515, 0x7, 0x2, 0x5, 0x9, 0x2, 0xfc00, 0x10, 0xfff, 0x9, 0x23, 0x38, 0x4, 0xfff4, 0x675, 0xa, 0x6, 0x800, 0x8], 0x3}}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmsg(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)=""/101, 0x65}], 0x1}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_ENUMINPUT(r9, 0xc050561a, &(0x7f0000000200)={0x1, "94a246be445c947bccfb632ec629e361f43a16d680ec57dcceaa2e5ad4b41542"}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) 71.619569ms ago: executing program 3 (id=1658): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000040)="363c8f3fca5d66571e583e", 0xb, 0x4810, &(0x7f0000000200)={0x11, 0x9, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 319.175µs ago: executing program 3 (id=1659): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x20e5, &(0x7f0000000400)={0x0, 0xddb, 0x10, 0x3, 0x1bd, 0x0, r1}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet(0x2, 0x3, 0x2) r6 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r6) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x2, 0x1, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, 0x40, 0x20, 0x8, 0xf7c4}}) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000006c00000426bd7000fddbdf2500000000", @ANYRES32=r10, @ANYBLOB="14060500001100000800040077c920a200"/28, @ANYRES32=r10, @ANYBLOB="08001c00", @ANYRES32, @ANYBLOB], 0x88}, 0x1, 0x0, 0x0, 0x8880}, 0x8000) sendto$packet(r7, &(0x7f0000000000)='1', 0x26, 0x0, &(0x7f0000000200)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @local}, 0x14) r12 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x181) fcntl$setlease(r12, 0x400, 0x2) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r13, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r14, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=1660): bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @any, 0x3}, 0xfffffffffffffcc1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000c80)=[{0x20, 0xfc, 0x0, 0xfffff00c}]}, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) cachestat(r1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0xf3, &(0x7f0000000480)={@random="44567cdf97f0", @local, @void, {@x25={0x805, {0x2, 0x2, 0x5, "93c3323b1d8669a5b9fcb262697278f73b44e14c327bcdae26a612190913a93daf3fa51a3498a51a35c38c89ed8f4d38619f7955ca01472e2d25312e811e5e3af9d88039b3b445e344901141194a00bd47cd87228cbf0ddf9eb1f07d90c246fde47e925f25df3b262c44a8278efb1e02dac42bf2ea4e62c7100323dbdadc18250bb934f810207467f55f4674e80437a3263ab5fa381b290b6721c5222c91c5d2dcabe6f6b95a90303a6d3e4a9300023d64e7467957f60847e4d100be374b40dbf0eb94dd894c6e62e7e8b3b0b29564540e5ef68a59e6e8673e0a68feaddfbe5f9909"}}}}, &(0x7f00000000c0)={0x1, 0x2, [0x5d2, 0x354, 0x4ee, 0x9bb]}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r5 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r5, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r5, 0xab00, r3) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) r6 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x20, 0x961c0) r7 = dup(r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}}, 0xc000) syz_emit_ethernet(0x66, &(0x7f0000000c80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428dd00308000000000000000000000000000aaff0200000000000000000000000000010200907800000003605f07d200000000ff01000000000000000000000000000114770a1643e5ef97963db6a103fc0000"], 0x0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$usbfs(&(0x7f0000000100), 0x10, 0xb0601) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000200)='2', 0x1}, {&(0x7f0000000340)="9b06ec6121374673ef413bb94af9a1180928755867c3e661cf83c41b6d9ba9b92496764b100d967c0f0b7b3042", 0x2d}, {&(0x7f0000000380)="26df5e9f340cb9f90054f9b7aa9db3b0a6228f2320c8b5634f842feceeafebb749f14ec30752a9d7035b3ac42c7fcc2a3ea8e2601da3791b5273baf08ec5d9dc0cfdbf0ba2df129114fad630a482fbdb05498eae9d072262fab917c55a75be40acf09cf3557c5101699b7a457f98aeb15633a260e6f08c72a77c6664863f2ff3be17089095b401ef7095c301af4d033a", 0x90}], 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): on available [ 211.785742][ T831] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 211.793811][ T831] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 211.795989][ T831] [drm:udl_init] *ERROR* Selecting channel failed [ 211.807204][ T831] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 3 [ 211.808937][ T831] [drm] Initialized udl on minor 3 [ 211.810957][ T831] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 211.813065][ T831] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 211.814871][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 211.821501][ T6000] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 211.826093][ T831] usb 5-1: USB disconnect, device number 24 [ 211.839228][ T6000] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 211.842175][ T6000] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 211.906216][T10430] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 211.908195][T10430] overlayfs: failed to set xattr on upper [ 211.909772][T10430] overlayfs: ...falling back to redirect_dir=nofollow. [ 211.911625][T10430] overlayfs: ...falling back to index=off. [ 211.913220][T10430] overlayfs: ...falling back to uuid=null. [ 212.113534][T10432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.128744][T10432] bond0: (slave rose0): Enslaving as an active interface with an up link [ 212.533721][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 212.853704][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 212.987202][T10468] tipc: Enabling of bearer rejected, already enabled [ 213.104630][T10478] bridge0: port 3(syz_tun) entered blocking state [ 213.106380][T10478] bridge0: port 3(syz_tun) entered disabled state [ 213.108115][T10478] syz_tun: entered allmulticast mode [ 213.110770][T10478] syz_tun: entered promiscuous mode [ 213.113418][T10478] bridge0: port 3(syz_tun) entered blocking state [ 213.115197][T10478] bridge0: port 3(syz_tun) entered forwarding state [ 213.186628][T10482] tipc: Enabling of bearer rejected, already enabled [ 213.231035][T10488] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 213.315841][T10497] IPVS: stopping backup sync thread 10499 ... [ 213.317458][T10495] lo speed is unknown, defaulting to 1000 [ 213.333736][ T6419] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 213.338516][T10497] loop8: detected capacity change from 0 to 15 [ 213.344478][T10497] Dev loop8: unable to read RDB block 15 [ 213.346027][T10497] loop8: unable to read partition table [ 213.347540][T10497] loop8: partition table beyond EOD, truncated [ 213.349123][T10497] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 213.349123][T10497] ) failed (rc=-5) [ 213.573709][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 213.616960][ T6419] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 213.620216][ T6419] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 213.625160][ T6419] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 213.627870][ T6419] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 213.631027][ T6419] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 213.636379][ T6419] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 213.638938][ T6419] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 213.641040][ T6419] usb 8-1: Product: syz [ 213.642371][ T6419] usb 8-1: Manufacturer: syz [ 213.652905][ T6419] cdc_wdm 8-1:1.0: skipping garbage [ 213.654568][ T6419] cdc_wdm 8-1:1.0: skipping garbage [ 213.657100][ T6419] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 213.659101][ T6419] cdc_wdm 8-1:1.0: Unknown control protocol [ 213.683722][ T1450] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 213.836905][ T1450] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 213.845446][ T1450] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.857464][ T1450] usb 7-1: config 0 descriptor?? [ 213.903707][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 213.905606][T10508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.908459][T10508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.911989][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 213.912248][ T8634] usb 8-1: USB disconnect, device number 17 [ 213.913740][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 213.913751][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 214.261322][T10515] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1165'. [ 214.274245][T10518] input: syz0 as /devices/virtual/input/input13 [ 214.294043][T10522] overlayfs: missing 'lowerdir' [ 214.337359][T10525] input: syz0 as /devices/virtual/input/input14 [ 214.343424][T10525] FAULT_INJECTION: forcing a failure. [ 214.343424][T10525] name failslab, interval 1, probability 0, space 0, times 0 [ 214.348399][T10525] CPU: 1 UID: 0 PID: 10525 Comm: syz.1.1168 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 214.348451][T10527] input: syz0 as /devices/virtual/input/input15 [ 214.351664][T10525] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 214.351679][T10525] Call Trace: [ 214.351684][T10525] [ 214.351688][T10525] dump_stack_lvl+0x16c/0x1f0 [ 214.358779][T10525] should_fail_ex+0x497/0x5b0 [ 214.359999][T10525] ? fs_reclaim_acquire+0xae/0x150 [ 214.361264][T10525] should_failslab+0xc2/0x120 [ 214.362454][T10525] __kmalloc_noprof+0xce/0x4f0 [ 214.363642][T10525] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 214.365029][T10525] ? tomoyo_realpath_from_path+0xbf/0x710 [ 214.366502][T10525] tomoyo_realpath_from_path+0xbf/0x710 [ 214.367914][T10525] ? tomoyo_path_number_perm+0x235/0x5b0 [ 214.369303][T10525] tomoyo_path_number_perm+0x248/0x5b0 [ 214.370664][T10525] ? tomoyo_path_number_perm+0x235/0x5b0 [ 214.372120][T10525] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 214.373624][T10525] ? __pfx_lock_release+0x10/0x10 [ 214.375070][T10525] ? trace_lock_acquire+0x14e/0x1f0 [ 214.376383][T10525] ? lock_acquire+0x2f/0xb0 [ 214.377503][T10525] ? __fget_files+0x40/0x3a0 [ 214.378638][T10525] ? __fget_files+0x206/0x3a0 [ 214.379846][T10525] security_file_ioctl_compat+0x9b/0x240 [ 214.381242][T10525] __do_compat_sys_ioctl+0x4e/0x2c0 [ 214.382534][T10525] __do_fast_syscall_32+0x73/0x120 [ 214.383793][T10525] do_fast_syscall_32+0x32/0x80 [ 214.385085][T10525] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 214.386728][T10525] RIP: 0023:0xf7fa7579 [ 214.387786][T10525] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 214.392741][T10525] RSP: 002b:00000000f50f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 214.394899][T10525] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000004b30 [ 214.396956][T10525] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000000 [ 214.398991][T10525] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 214.401032][T10525] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 214.403072][T10525] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 214.405099][T10525] [ 214.408057][T10525] ERROR: Out of memory at tomoyo_realpath_from_path. [ 214.410235][ T1450] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 214.414328][ T1450] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 214.424339][ T1450] [drm:udl_init] *ERROR* Selecting channel failed [ 214.429609][ T1450] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 3 [ 214.431310][ T1450] [drm] Initialized udl on minor 3 [ 214.433182][ T1450] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 214.436962][ T1450] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 214.439689][ T1450] usb 7-1: USB disconnect, device number 23 [ 214.441315][ T6419] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 214.444123][ T6419] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 214.446191][ T6419] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 214.613737][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 214.634032][T10533] nbd1: detected capacity change from 0 to 22 [ 214.646795][T10540] block nbd1: shutting down sockets [ 214.652100][ C1] blk_print_req_error: 95 callbacks suppressed [ 214.652140][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 214.657241][ C1] buffer_io_error: 95 callbacks suppressed [ 214.657248][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 214.663027][ T54] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 214.665526][ T54] Buffer I/O error on dev nbd1, logical block 0, async page read [ 214.667631][ T5954] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 214.669994][ T5954] Buffer I/O error on dev nbd1, logical block 0, async page read [ 214.672032][ T5954] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 214.674727][ T5954] Buffer I/O error on dev nbd1, logical block 0, async page read [ 214.675934][T10543] mkiss: ax0: crc mode is auto. [ 214.676942][ T5954] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 214.680434][ T5954] Buffer I/O error on dev nbd1, logical block 0, async page read [ 214.682536][ T5954] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 214.686012][ T5954] Buffer I/O error on dev nbd1, logical block 0, async page read [ 214.688242][ T5954] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 214.690571][ T5954] Buffer I/O error on dev nbd1, logical block 0, async page read [ 214.692613][ T5954] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 214.695581][ T5954] Buffer I/O error on dev nbd1, logical block 0, async page read [ 214.697774][ T5954] ldm_validate_partition_table(): Disk read failed. [ 214.699560][ T5954] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 214.701910][ T5954] Buffer I/O error on dev nbd1, logical block 0, async page read [ 214.704521][ T5954] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 214.706913][ T5954] Buffer I/O error on dev nbd1, logical block 0, async page read [ 214.709291][ T5954] Dev nbd1: unable to read RDB block 0 [ 214.710993][ T5954] nbd1: unable to read partition table [ 214.712609][ T5954] nbd1: partition table beyond EOD, truncated [ 214.721751][ T5954] ldm_validate_partition_table(): Disk read failed. [ 214.726957][T10544] lo speed is unknown, defaulting to 1000 [ 214.729599][ T5954] Dev nbd1: unable to read RDB block 0 [ 214.731179][ T5954] nbd1: unable to read partition table [ 214.732735][ T5954] nbd1: partition table beyond EOD, truncated [ 214.943695][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 215.237261][T10558] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 215.510329][T10568] netem: change failed [ 215.653724][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 215.837448][ T831] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 215.983836][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 215.986762][ T831] usb 6-1: Using ep0 maxpacket: 8 [ 215.990185][ T831] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 215.993615][ T831] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 215.997111][ T831] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 216.000626][ T831] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.005360][ T831] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 216.008586][ T831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.013766][ T5939] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 216.148714][T10591] lo speed is unknown, defaulting to 1000 [ 216.184854][ T5939] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 216.186955][ T5939] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 216.189587][ T5939] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 216.191922][ T5939] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 216.194886][ T5939] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 216.198909][ T5939] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 216.201292][ T5939] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 216.203513][ T5939] usb 8-1: Product: syz [ 216.204723][ T5939] usb 8-1: Manufacturer: syz [ 216.207936][ T5939] cdc_wdm 8-1:1.0: skipping garbage [ 216.209318][ T5939] cdc_wdm 8-1:1.0: skipping garbage [ 216.211931][ T5939] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 216.213314][ T5939] cdc_wdm 8-1:1.0: Unknown control protocol [ 216.223751][ T831] usb 6-1: GET_CAPABILITIES returned 0 [ 216.225374][ T831] usbtmc 6-1:16.0: can't read capabilities [ 216.424745][ T831] usb 6-1: USB disconnect, device number 13 [ 216.460865][T10593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.463163][T10593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.466048][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 216.467786][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 216.469525][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 216.471257][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 216.473020][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 216.474751][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 216.476528][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 216.478242][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 216.479986][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 216.481712][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 216.483486][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 216.485213][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 216.487033][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 216.488755][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 216.490352][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 216.492737][ T6000] usb 8-1: USB disconnect, device number 18 [ 216.693747][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 216.816876][T10597] tipc: Enabling of bearer rejected, already enabled [ 216.856325][T10606] ptrace attach of "/syz-executor exec"[5946] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8J] [ 217.013742][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 217.253741][ T5951] Bluetooth: hci0: command tx timeout [ 217.293691][T10627] nbd3: detected capacity change from 0 to 22 [ 217.297788][T10628] block nbd3: shutting down sockets [ 217.298258][ T5954] ldm_validate_partition_table(): Disk read failed. [ 217.304093][ T5954] Dev nbd3: unable to read RDB block 0 [ 217.305656][ T5954] nbd3: unable to read partition table [ 217.307141][ T5954] nbd3: partition table beyond EOD, truncated [ 217.313997][ T5954] ldm_validate_partition_table(): Disk read failed. [ 217.317177][ T5954] Dev nbd3: unable to read RDB block 0 [ 217.318932][ T5954] nbd3: unable to read partition table [ 217.320549][ T5954] nbd3: partition table beyond EOD, truncated [ 217.625638][T10639] lo speed is unknown, defaulting to 1000 [ 217.743772][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 217.985402][ T831] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 218.017754][T10660] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 218.019829][T10660] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 218.022052][T10660] vhci_hcd vhci_hcd.0: Device attached [ 218.053735][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 218.152419][ T831] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 218.186056][ T831] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 218.192247][ T831] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 218.195726][ T831] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 218.198626][ T831] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 218.214006][ T6000] vhci_hcd: vhci_device speed not set [ 218.223500][ T831] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 218.226116][ T831] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 218.228177][ T831] usb 5-1: Product: syz [ 218.229562][ T831] usb 5-1: Manufacturer: syz [ 218.238066][ T831] cdc_wdm 5-1:1.0: skipping garbage [ 218.239486][ T831] cdc_wdm 5-1:1.0: skipping garbage [ 218.243403][T10667] validate_nla: 1 callbacks suppressed [ 218.243411][T10667] netlink: 'syz.1.1211': attribute type 1 has an invalid length. [ 218.249728][ T831] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 218.251289][ T831] cdc_wdm 5-1:1.0: Unknown control protocol [ 218.255934][T10667] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1211'. [ 218.268683][T10667] netlink: 'syz.1.1211': attribute type 2 has an invalid length. [ 218.284313][ T6000] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 218.492472][T10677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.495832][T10677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.500085][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 218.500280][ T63] usb 5-1: USB disconnect, device number 25 [ 218.501839][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 218.505432][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 218.694182][T10683] netlink: 'syz.1.1215': attribute type 2 has an invalid length. [ 218.696545][T10683] netlink: 'syz.1.1215': attribute type 1 has an invalid length. [ 218.773738][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 219.093745][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 219.106174][ T5310] block nbd1: Receive control failed (result -32) [ 219.132975][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1218'. [ 219.145771][T10691] block nbd1: shutting down sockets [ 219.230489][T10699] tipc: Enabling of bearer rejected, already enabled [ 219.336849][T10661] vhci_hcd: connection reset by peer [ 219.350935][ T12] vhci_hcd: stop threads [ 219.352079][ T12] vhci_hcd: release socket [ 219.353613][ T12] vhci_hcd: disconnect device [ 219.378507][T10707] tipc: Enabling of bearer rejected, already enabled [ 219.813768][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 220.001738][T10724] FAULT_INJECTION: forcing a failure. [ 220.001738][T10724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.005471][T10724] CPU: 0 UID: 0 PID: 10724 Comm: syz.1.1226 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 220.008192][T10724] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 220.010949][T10724] Call Trace: [ 220.011826][T10724] [ 220.012618][T10724] dump_stack_lvl+0x16c/0x1f0 [ 220.013885][T10724] should_fail_ex+0x497/0x5b0 [ 220.015123][T10724] _copy_to_user+0x32/0xd0 [ 220.016306][T10724] put_old_timespec32+0x194/0x1e0 [ 220.017588][T10724] ? __pfx_put_old_timespec32+0x10/0x10 [ 220.018956][T10724] ? ns_to_timespec64+0x59/0xc0 [ 220.020178][T10724] ? posix_cpu_clock_get+0x13e/0x340 [ 220.021543][T10724] __ia32_sys_clock_gettime32+0x1d5/0x270 [ 220.023047][T10724] ? __pfx___ia32_sys_clock_gettime32+0x10/0x10 [ 220.024692][T10724] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 220.026422][T10724] __do_fast_syscall_32+0x73/0x120 [ 220.027763][T10724] do_fast_syscall_32+0x32/0x80 [ 220.029177][T10724] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 220.030853][T10724] RIP: 0023:0xf7fa7579 [ 220.031920][T10724] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 220.036769][T10724] RSP: 002b:00000000f50d555c EFLAGS: 00000296 ORIG_RAX: 0000000000000109 [ 220.038786][T10724] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000020000200 [ 220.040680][T10724] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 220.042610][T10724] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 220.044605][T10724] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 220.046664][T10724] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 220.048527][T10724] [ 220.133779][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 220.763818][ T25] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 220.853735][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 220.875751][T10740] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 220.879270][T10739] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1232'. [ 220.882308][T10739] x_tables: duplicate underflow at hook 1 [ 220.934872][ T25] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 220.937204][ T25] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 220.939889][ T25] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 220.942250][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 220.946597][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 220.951695][ T25] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 220.954129][ T25] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 220.956211][ T25] usb 8-1: Product: syz [ 220.957415][ T25] usb 8-1: Manufacturer: syz [ 220.963947][ T25] cdc_wdm 8-1:1.0: skipping garbage [ 220.965418][ T25] cdc_wdm 8-1:1.0: skipping garbage [ 220.968237][T10744] tipc: Enabling of bearer rejected, already enabled [ 220.968479][ T25] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 220.971837][ T25] cdc_wdm 8-1:1.0: Unknown control protocol [ 221.129707][T10748] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1235'. [ 221.173779][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 221.270895][T10756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.273240][T10756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.277700][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 221.277811][ T6419] usb 8-1: USB disconnect, device number 19 [ 221.279452][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 221.282603][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 221.903731][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 222.213730][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 222.612589][T10775] netlink: 'syz.3.1241': attribute type 21 has an invalid length. [ 222.615589][T10775] IPv6: NLM_F_CREATE should be specified when creating new route [ 222.873757][ T8634] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 222.933735][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 223.053704][ T8634] usb 8-1: Using ep0 maxpacket: 32 [ 223.056813][ T8634] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 223.058945][ T8634] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 223.061801][ T8634] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 223.064712][ T8634] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 223.067248][ T8634] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 223.070589][ T8634] usb 8-1: config 0 interface 0 has no altsetting 0 [ 223.073958][ T8634] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 223.076336][ T8634] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 223.078498][ T8634] usb 8-1: Product: syz [ 223.079590][ T8634] usb 8-1: Manufacturer: syz [ 223.080799][ T8634] usb 8-1: SerialNumber: syz [ 223.083203][ T8634] usb 8-1: config 0 descriptor?? [ 223.086237][ T8634] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 223.089056][ T8634] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 223.253735][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 223.287827][T10777] ldusb 8-1:0.0: Couldn't submit interrupt_in_urb -90 [ 223.403925][ T6000] vhci_hcd: vhci_device speed not set [ 223.738554][ T1450] usb 8-1: USB disconnect, device number 20 [ 223.741397][ T1450] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 223.811828][T10807] lo speed is unknown, defaulting to 1000 [ 223.837311][T10805] netlink: 'syz.0.1251': attribute type 2 has an invalid length. [ 223.839452][T10805] netlink: 'syz.0.1251': attribute type 1 has an invalid length. [ 223.842734][T10805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1251'. [ 223.885911][T10811] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 223.888946][T10811] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 223.894535][T10811] dvmrp0: entered allmulticast mode [ 224.324731][T10830] syz_tun: left allmulticast mode [ 224.326474][T10830] syz_tun: left promiscuous mode [ 224.327873][T10830] bridge0: port 3(syz_tun) entered disabled state [ 224.341628][T10830] bond0: (slave batadv0): Releasing backup interface [ 224.352729][T10830] bridge_slave_0: left allmulticast mode [ 224.354655][T10830] bridge_slave_0: left promiscuous mode [ 224.356205][T10830] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.367165][T10830] bridge_slave_1: left allmulticast mode [ 224.368693][T10830] bridge_slave_1: left promiscuous mode [ 224.370296][T10830] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.379036][T10830] bond0: (slave bond_slave_0): Releasing backup interface [ 224.398538][T10830] bond0: (slave bond_slave_1): Releasing backup interface [ 224.416145][T10830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.418160][T10830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.421394][T10830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.424237][T10830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.502284][T10830] vlan0: entered promiscuous mode [ 224.523058][T10830] tipc: Enabling of bearer rejected, failed to enable media [ 224.959561][T10871] tipc: Enabling of bearer rejected, already enabled [ 225.018366][T10865] nbd3: detected capacity change from 0 to 22 [ 225.023763][ C3] net_ratelimit: 3 callbacks suppressed [ 225.023773][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 225.024091][T10867] block nbd3: shutting down sockets [ 225.044364][T10881] overlayfs: failed to decode file handle (len=5, type=248, flags=0, err=-22) [ 225.056317][ T5954] blk_print_req_error: 60 callbacks suppressed [ 225.056328][ T5954] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 225.063111][ T5954] buffer_io_error: 60 callbacks suppressed [ 225.063120][ T5954] Buffer I/O error on dev nbd3, logical block 0, async page read [ 225.066891][ T5954] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 225.069239][ T5954] Buffer I/O error on dev nbd3, logical block 0, async page read [ 225.071273][ T5954] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 225.074114][ T5954] Buffer I/O error on dev nbd3, logical block 0, async page read [ 225.076187][ T5954] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 225.078565][ T5954] Buffer I/O error on dev nbd3, logical block 0, async page read [ 225.080595][ T5954] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 225.082923][ T5954] Buffer I/O error on dev nbd3, logical block 0, async page read [ 225.085188][ T5954] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 225.087518][ T5954] Buffer I/O error on dev nbd3, logical block 0, async page read [ 225.089712][ T5954] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 225.092044][ T5954] Buffer I/O error on dev nbd3, logical block 0, async page read [ 225.094265][ T5954] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 225.096590][ T5954] Buffer I/O error on dev nbd3, logical block 0, async page read [ 225.098604][ T5954] ldm_validate_partition_table(): Disk read failed. [ 225.100330][ T5954] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 225.102679][ T5954] Buffer I/O error on dev nbd3, logical block 0, async page read [ 225.105344][ T5954] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 225.108503][ T5954] Buffer I/O error on dev nbd3, logical block 0, async page read [ 225.110655][ T5954] Dev nbd3: unable to read RDB block 0 [ 225.112173][ T5954] nbd3: unable to read partition table [ 225.113929][ T5954] nbd3: partition table beyond EOD, truncated [ 225.116832][ T5954] ldm_validate_partition_table(): Disk read failed. [ 225.118716][ T5954] Dev nbd3: unable to read RDB block 0 [ 225.120263][ T5954] nbd3: unable to read partition table [ 225.121864][ T5954] nbd3: partition table beyond EOD, truncated [ 225.170422][T10888] FAULT_INJECTION: forcing a failure. [ 225.170422][T10888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.173899][T10888] CPU: 2 UID: 0 PID: 10888 Comm: syz.0.1268 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 225.176647][T10888] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 225.179399][T10888] Call Trace: [ 225.180269][T10888] [ 225.181043][T10888] dump_stack_lvl+0x16c/0x1f0 [ 225.182285][T10888] should_fail_ex+0x497/0x5b0 [ 225.183531][T10888] _copy_from_user+0x2e/0xd0 [ 225.184744][T10888] get_compat_msghdr+0xa8/0x170 [ 225.186027][T10888] ? __pfx_get_compat_msghdr+0x10/0x10 [ 225.187450][T10888] ___sys_sendmsg+0x1b0/0x1e0 [ 225.188676][T10888] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.190036][T10888] ? trace_lock_acquire+0x14e/0x1f0 [ 225.191397][T10888] __sys_sendmmsg+0x2fa/0x420 [ 225.192623][T10888] ? __pfx___sys_sendmmsg+0x10/0x10 [ 225.193982][T10888] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 225.195530][T10888] ? fput+0x67/0x440 [ 225.196553][T10888] ? ksys_write+0x1ba/0x250 [ 225.197732][T10888] ? __pfx_ksys_write+0x10/0x10 [ 225.198981][T10888] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 225.200425][T10888] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 225.202107][T10888] __do_fast_syscall_32+0x73/0x120 [ 225.203447][T10888] do_fast_syscall_32+0x32/0x80 [ 225.204711][T10888] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 225.206360][T10888] RIP: 0023:0xf7fa8579 [ 225.207420][T10888] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 225.212331][T10888] RSP: 002b:00000000f50f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 225.214496][T10888] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000020000440 [ 225.216472][T10888] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 225.218505][T10888] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 225.220542][T10888] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 225.222601][T10888] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 225.224630][T10888] [ 225.343741][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 225.355712][T10895] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1271'. [ 225.361946][T10895] program syz.0.1271 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.736688][T10899] tipc: Enabling of bearer rejected, already enabled [ 226.063715][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 226.373748][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 226.566422][T10928] block nbd0: shutting down sockets [ 226.893762][T10931] nbd3: detected capacity change from 0 to 22 [ 226.896454][T10930] block nbd3: shutting down sockets [ 226.896909][ T5954] ldm_validate_partition_table(): Disk read failed. [ 226.900719][ T5954] Dev nbd3: unable to read RDB block 0 [ 226.902395][ T5954] nbd3: unable to read partition table [ 226.904253][ T5954] nbd3: partition table beyond EOD, truncated [ 226.909085][ T5954] ldm_validate_partition_table(): Disk read failed. [ 226.911847][ T5954] Dev nbd3: unable to read RDB block 0 [ 226.913549][ T5954] nbd3: unable to read partition table [ 226.915238][ T5954] nbd3: partition table beyond EOD, truncated [ 227.095100][T10939] tipc: Enabling of bearer rejected, already enabled [ 227.103728][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 227.423943][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 227.742054][T10952] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1289'. [ 228.051727][T10961] lo speed is unknown, defaulting to 1000 [ 228.143721][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 228.453722][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 228.701372][T10973] qnx6: unable to read the first superblock [ 228.745729][T10974] tipc: Enabling of bearer rejected, already enabled [ 229.173716][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 229.319321][ T35] hid-generic 0001:0000:0002.0004: unknown main item tag 0x0 [ 229.321282][ T35] hid-generic 0001:0000:0002.0004: unknown main item tag 0x0 [ 229.323239][ T35] hid-generic 0001:0000:0002.0004: unknown main item tag 0x0 [ 229.328557][ T35] hid-generic 0001:0000:0002.0004: unknown main item tag 0x0 [ 229.336228][ T35] hid-generic 0001:0000:0002.0004: unknown main item tag 0x0 [ 229.340521][ T35] hid-generic 0001:0000:0002.0004: unknown main item tag 0x0 [ 229.345199][ T35] hid-generic 0001:0000:0002.0004: unknown main item tag 0x0 [ 229.352188][ T35] hid-generic 0001:0000:0002.0004: unknown main item tag 0x0 [ 229.356917][ T35] hid-generic 0001:0000:0002.0004: unknown main item tag 0x0 [ 229.361375][ T35] hid-generic 0001:0000:0002.0004: unknown main item tag 0x0 [ 229.366770][ T35] hid-generic 0001:0000:0002.0004: unknown main item tag 0x0 [ 229.371012][ T35] hid-generic 0001:0000:0002.0004: unknown main item tag 0x0 [ 229.375249][ T35] hid-generic 0001:0000:0002.0004: unknown main item tag 0x0 [ 229.381706][ T35] hid-generic 0001:0000:0002.0004: unknown main item tag 0x0 [ 229.387155][ T35] hid-generic 0001:0000:0002.0004: unknown main item tag 0x0 [ 229.391416][ T35] hid-generic 0001:0000:0002.0004: unknown main item tag 0x0 [ 229.395701][ T35] hid-generic 0001:0000:0002.0004: unknown main item tag 0x0 [ 229.398789][ T35] hid-generic 0001:0000:0002.0004: unknown main item tag 0x0 [ 229.405232][ T35] hid-generic 0001:0000:0002.0004: unknown main item tag 0x0 [ 229.409525][ T35] hid-generic 0001:0000:0002.0004: unknown main item tag 0x0 [ 229.413773][ T35] hid-generic 0001:0000:0002.0004: unknown main item tag 0x0 [ 229.427123][ T35] hid-generic 0001:0000:0002.0004: hidraw1: HID v2.00 Device [syz0] on syz0 [ 229.493705][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 230.213746][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 230.533702][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 230.541159][T10973] Set syz1 is full, maxelem 65536 reached [ 230.588741][T11010] tipc: Enabling of bearer rejected, already enabled [ 230.676353][T11017] netlink: 'syz.0.1305': attribute type 10 has an invalid length. [ 230.679246][T11017] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.682153][T11017] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.705611][T11017] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.708425][T11017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.710443][T11017] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.712275][T11017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.716003][T11017] bridge0: entered promiscuous mode [ 230.717937][T11017] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 230.723476][T11017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1305'. [ 230.730073][T11017] bridge_slave_1: left allmulticast mode [ 230.731573][T11017] bridge_slave_1: left promiscuous mode [ 230.733114][T11017] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.737946][T11017] bridge_slave_0: left allmulticast mode [ 230.739426][T11017] bridge_slave_0: left promiscuous mode [ 230.740967][T11017] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.754317][T11017] bond0: (slave bridge0): Releasing backup interface [ 230.756949][T11017] bridge0 (unregistering): left promiscuous mode [ 230.973793][ T5939] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 231.142659][T11025] netlink: 'syz.2.1307': attribute type 10 has an invalid length. [ 231.144984][T11025] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1307'. [ 231.146811][ T5939] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 231.147351][T11025] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 231.149531][ T5939] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 231.149543][ T5939] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 231.159939][ T5939] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 231.165025][ T5939] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 231.179328][ T5939] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 231.181647][ T5939] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 231.183780][ T5939] usb 8-1: Product: syz [ 231.184916][ T5939] usb 8-1: Manufacturer: syz [ 231.194616][ T5939] cdc_wdm 8-1:1.0: skipping garbage [ 231.196486][ T5939] cdc_wdm 8-1:1.0: skipping garbage [ 231.198823][ T5939] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 231.201297][ T5939] cdc_wdm 8-1:1.0: Unknown control protocol [ 231.253759][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 231.466053][T11035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.468419][T11035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.471131][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 231.471307][ T6000] usb 8-1: USB disconnect, device number 21 [ 231.472954][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 231.476323][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 231.533726][ T6419] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 231.573768][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 231.579492][T11039] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1311'. [ 231.621785][T11039] netlink: 'syz.0.1311': attribute type 39 has an invalid length. [ 231.705021][ T6419] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 231.707229][ T6419] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 231.710423][ T6419] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 231.712814][ T6419] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 231.715951][ T6419] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 231.720349][ T6419] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 231.722679][ T6419] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 231.724914][ T6419] usb 7-1: Product: syz [ 231.726031][ T6419] usb 7-1: Manufacturer: syz [ 231.731008][ T6419] cdc_wdm 7-1:1.0: skipping garbage [ 231.732380][ T6419] cdc_wdm 7-1:1.0: skipping garbage [ 231.736854][ T6419] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 231.738457][ T6419] cdc_wdm 7-1:1.0: Unknown control protocol [ 231.846729][T11051] lo speed is unknown, defaulting to 1000 [ 231.914165][T11056] block device autoloading is deprecated and will be removed. [ 231.924455][T11053] netlink: zone id is out of range [ 231.925953][T11053] netlink: zone id is out of range [ 231.927711][T11053] netlink: zone id is out of range [ 231.929592][T11053] netlink: zone id is out of range [ 231.994913][T11059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.997894][T11059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.003014][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 232.004772][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 232.006694][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 232.008414][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 232.010168][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 232.011874][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 232.013638][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 232.015340][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 232.017124][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 232.018836][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 232.020586][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 232.022272][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 232.024089][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 232.025796][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 232.027540][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 232.029214][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 232.031033][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 232.032702][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 232.035961][ T6419] usb 7-1: USB disconnect, device number 24 [ 232.037639][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 232.039427][T11064] lo speed is unknown, defaulting to 1000 [ 232.075364][ T39] audit: type=1326 audit(1734802411.767:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11063 comm="syz.3.1317" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x0 [ 232.114527][T11068] tun0: tun_chr_ioctl cmd 1074025675 [ 232.116402][T11068] tun0: persist enabled [ 232.118357][T11068] tun0: tun_chr_ioctl cmd 1074025675 [ 232.120203][T11068] tun0: persist enabled [ 232.159332][T11064] fuseblk: Unknown parameter '(60x0000000000000003' [ 233.093793][ T5948] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 233.244956][ T5948] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 233.247143][ T5948] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 233.249658][ T5948] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 233.251840][ T5948] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 233.254842][ T5948] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 233.258984][ T5948] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 233.261298][ T5948] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 233.263381][ T5948] usb 8-1: Product: syz [ 233.263767][ T6419] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 233.264933][ T5948] usb 8-1: Manufacturer: syz [ 233.272970][ T5948] cdc_wdm 8-1:1.0: skipping garbage [ 233.274754][ T5948] cdc_wdm 8-1:1.0: skipping garbage [ 233.276790][ T5948] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 233.278339][ T5948] cdc_wdm 8-1:1.0: Unknown control protocol [ 233.362107][T11100] fuse: Bad value for 'rootmode' [ 233.364623][T11100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1329'. [ 233.366861][T11100] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1329'. [ 233.369044][T11100] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1329'. [ 233.371255][T11100] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1329'. [ 233.373433][T11100] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1329'. [ 233.421274][ T6419] usb 6-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 233.425712][ T6419] usb 6-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 233.430368][ T6419] usb 6-1: config 1 interface 0 has no altsetting 0 [ 233.447092][ T6419] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 233.449370][ T6419] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.451347][ T6419] usb 6-1: Product: syz [ 233.452390][ T6419] usb 6-1: Manufacturer: syz [ 233.456509][ T6419] usb 6-1: SerialNumber: syz [ 233.494221][T11106] tun1: tun_chr_ioctl cmd 1074025675 [ 233.496340][T11106] tun1: persist enabled [ 233.498704][T11106] tun1: tun_chr_ioctl cmd 1074025675 [ 233.500846][T11106] tun1: persist enabled [ 233.533223][T11107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.535753][T11107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.539718][ T63] usb 8-1: USB disconnect, device number 22 [ 233.539855][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 233.790121][T11110] lo speed is unknown, defaulting to 1000 [ 234.343213][T11132] bridge0: port 1(syz_tun) entered blocking state [ 234.348962][T11132] bridge0: port 1(syz_tun) entered disabled state [ 234.351425][T11132] syz_tun: entered allmulticast mode [ 234.354881][T11132] syz_tun: entered promiscuous mode [ 234.358939][T11132] bridge0: port 1(syz_tun) entered blocking state [ 234.360650][T11132] bridge0: port 1(syz_tun) entered forwarding state [ 234.433203][T11133] bond0: entered promiscuous mode [ 234.437985][T11133] bond0: entered allmulticast mode [ 234.440118][T11133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.643693][T11133] bond0 (unregistering): Released all slaves [ 234.705908][T11139] tun0: tun_chr_ioctl cmd 1074025675 [ 234.707356][T11139] tun0: persist enabled [ 234.708662][T11140] tun0: tun_chr_ioctl cmd 1074025675 [ 234.710142][T11140] tun0: persist enabled [ 234.902200][T11147] sctp: [Deprecated]: syz.0.1342 (pid 11147) Use of int in max_burst socket option. [ 234.902200][T11147] Use struct sctp_assoc_value instead [ 234.938722][T11147] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 235.079195][T11155] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 235.080982][T11155] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 235.083098][T11155] vhci_hcd vhci_hcd.0: Device attached [ 235.085651][T11156] vhci_hcd: connection closed [ 235.087963][ T1142] vhci_hcd: stop threads [ 235.090444][ T1142] vhci_hcd: release socket [ 235.091663][ T1142] vhci_hcd: disconnect device [ 235.413703][ C3] net_ratelimit: 19 callbacks suppressed [ 235.413716][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 235.687597][T11165] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1348'. [ 235.733749][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 235.770607][ T39] audit: type=1326 audit(1734802415.457:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11164 comm="syz.0.1348" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 235.779230][ T39] audit: type=1326 audit(1734802415.457:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11164 comm="syz.0.1348" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 235.785063][ T39] audit: type=1326 audit(1734802415.467:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11164 comm="syz.0.1348" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 235.790622][ T39] audit: type=1326 audit(1734802415.467:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11164 comm="syz.0.1348" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 235.796370][ T39] audit: type=1326 audit(1734802415.467:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11164 comm="syz.0.1348" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 235.801795][ T39] audit: type=1326 audit(1734802415.477:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11164 comm="syz.0.1348" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 235.807924][ T39] audit: type=1326 audit(1734802415.477:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11164 comm="syz.0.1348" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 235.807941][ T39] audit: type=1326 audit(1734802415.477:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11164 comm="syz.0.1348" exe="/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 235.807957][ T39] audit: type=1326 audit(1734802415.477:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11164 comm="syz.0.1348" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 235.853751][T11170] nbd2: detected capacity change from 0 to 22 [ 235.866521][T11171] block nbd2: shutting down sockets [ 235.872974][ C3] blk_print_req_error: 60 callbacks suppressed [ 235.872983][ C3] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 235.876955][ C3] buffer_io_error: 60 callbacks suppressed [ 235.876962][ C3] Buffer I/O error on dev nbd2, logical block 0, async page read [ 235.880875][ T6128] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 235.883245][ T6128] Buffer I/O error on dev nbd2, logical block 0, async page read [ 235.885495][ T6128] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 235.887762][ T6128] Buffer I/O error on dev nbd2, logical block 0, async page read [ 235.890031][ T6128] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 235.892908][ T6128] Buffer I/O error on dev nbd2, logical block 0, async page read [ 235.895177][ T6128] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 235.897487][ T6128] Buffer I/O error on dev nbd2, logical block 0, async page read [ 235.899474][ T6128] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 235.902224][ T6128] Buffer I/O error on dev nbd2, logical block 0, async page read [ 235.904667][ T6128] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 235.906977][ T6128] Buffer I/O error on dev nbd2, logical block 0, async page read [ 235.909289][ T6128] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 235.911853][ T6128] Buffer I/O error on dev nbd2, logical block 0, async page read [ 235.914467][ T6128] ldm_validate_partition_table(): Disk read failed. [ 235.916572][ T6128] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 235.918814][ T6128] Buffer I/O error on dev nbd2, logical block 0, async page read [ 235.920756][ T6128] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 235.923028][ T6128] Buffer I/O error on dev nbd2, logical block 0, async page read [ 235.925164][ T6128] Dev nbd2: unable to read RDB block 0 [ 235.926698][ T6128] nbd2: unable to read partition table [ 235.928194][ T6128] nbd2: partition table beyond EOD, truncated [ 235.944260][ T6128] ldm_validate_partition_table(): Disk read failed. [ 235.946346][ T6128] Dev nbd2: unable to read RDB block 0 [ 235.947894][ T6128] nbd2: unable to read partition table [ 235.949472][ T6128] nbd2: partition table beyond EOD, truncated [ 235.976791][T11163] lo speed is unknown, defaulting to 1000 [ 236.167223][ T6419] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 236.249827][ T6419] usb 6-1: USB disconnect, device number 14 [ 236.318446][ T6419] usblp0: removed [ 236.453731][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 236.597598][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1352'. [ 236.601396][T11187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1352'. [ 236.773764][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 236.960408][T11191] --map-set only usable from mangle table [ 237.347352][T11214] bond1: entered promiscuous mode [ 237.347945][T11216] FAULT_INJECTION: forcing a failure. [ 237.347945][T11216] name failslab, interval 1, probability 0, space 0, times 0 [ 237.348636][T11214] bond1: entered allmulticast mode [ 237.351853][T11216] CPU: 0 UID: 0 PID: 11216 Comm: syz.1.1364 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 237.351868][T11216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 237.353252][T11214] 8021q: adding VLAN 0 to HW filter on device bond1 [ 237.355695][T11216] Call Trace: [ 237.355702][T11216] [ 237.355706][T11216] dump_stack_lvl+0x16c/0x1f0 [ 237.355723][T11216] should_fail_ex+0x497/0x5b0 [ 237.355737][T11216] ? fs_reclaim_acquire+0xae/0x150 [ 237.355750][T11216] should_failslab+0xc2/0x120 [ 237.355764][T11216] __kmalloc_noprof+0xce/0x4f0 [ 237.355790][T11216] ? d_absolute_path+0x137/0x1b0 [ 237.355804][T11216] ? tomoyo_encode2+0x100/0x3e0 [ 237.355819][T11216] tomoyo_encode2+0x100/0x3e0 [ 237.355831][T11216] tomoyo_realpath_from_path+0x1a7/0x710 [ 237.355846][T11216] tomoyo_path_number_perm+0x248/0x5b0 [ 237.355861][T11216] ? tomoyo_path_number_perm+0x235/0x5b0 [ 237.375970][T11216] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 237.377530][T11216] ? __pfx_lock_release+0x10/0x10 [ 237.378831][T11216] ? trace_lock_acquire+0x14e/0x1f0 [ 237.380174][T11216] ? lock_acquire+0x2f/0xb0 [ 237.381343][T11216] ? __fget_files+0x40/0x3a0 [ 237.382559][T11216] ? __fget_files+0x206/0x3a0 [ 237.383774][T11216] security_file_ioctl_compat+0x9b/0x240 [ 237.385214][T11216] __do_compat_sys_ioctl+0x4e/0x2c0 [ 237.386573][T11216] __do_fast_syscall_32+0x73/0x120 [ 237.387894][T11216] do_fast_syscall_32+0x32/0x80 [ 237.389157][T11216] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 237.390792][T11216] RIP: 0023:0xf7fa7579 [ 237.391849][T11216] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 237.396766][T11216] RSP: 002b:00000000f50d555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 237.398896][T11216] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040305828 [ 237.400909][T11216] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 237.402959][T11216] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 237.404975][T11216] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 237.406941][T11216] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 237.408972][T11216] [ 237.414296][T11216] ERROR: Out of memory at tomoyo_realpath_from_path. [ 237.493741][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 237.580748][T11214] bond1 (unregistering): Released all slaves [ 237.638631][T11221] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.693941][T11225] lo speed is unknown, defaulting to 1000 [ 237.714211][T11230] syz.1.1366[11230] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 237.714372][T11230] syz.1.1366[11230] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 237.717499][T11230] syz.1.1366[11230] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 237.786394][T11221] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.823778][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 237.878335][T11221] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.947236][T11221] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.029392][T11221] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.034981][T11221] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.039339][T11221] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.043613][T11221] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.307575][T11240] syz.3.1369[11240] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 238.307671][T11240] syz.3.1369[11240] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 238.313850][T11240] syz.3.1369[11240] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 238.533741][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 238.853775][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 239.338219][T11265] lo speed is unknown, defaulting to 1000 [ 239.412459][ T39] kauditd_printk_skb: 29 callbacks suppressed [ 239.412470][ T39] audit: type=1326 audit(1734802419.097:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11263 comm="syz.3.1376" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 239.421440][ T39] audit: type=1326 audit(1734802419.107:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11263 comm="syz.3.1376" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf710e5a7 code=0x7ffc0000 [ 239.435171][ T39] audit: type=1326 audit(1734802419.107:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11263 comm="syz.3.1376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 239.447858][ T39] audit: type=1326 audit(1734802419.107:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11263 comm="syz.3.1376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 239.454497][ T39] audit: type=1326 audit(1734802419.117:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11263 comm="syz.3.1376" exe="/syz-executor" sig=0 arch=40000003 syscall=122 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 239.461134][ T39] audit: type=1326 audit(1734802419.117:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11263 comm="syz.3.1376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 239.467249][ T39] audit: type=1326 audit(1734802419.117:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11263 comm="syz.3.1376" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 239.473002][ T39] audit: type=1326 audit(1734802419.117:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11263 comm="syz.3.1376" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf710e5a7 code=0x7ffc0000 [ 239.478872][ T39] audit: type=1326 audit(1734802419.117:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11263 comm="syz.3.1376" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 239.484371][ T39] audit: type=1326 audit(1734802419.117:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11263 comm="syz.3.1376" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf710e5a7 code=0x7ffc0000 [ 239.573753][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 239.851941][T11272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1378'. [ 239.903795][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 240.613714][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 240.885478][T11283] tipc: Enabling of bearer rejected, already enabled [ 240.889657][T11286] lo speed is unknown, defaulting to 1000 [ 240.933848][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 241.663709][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 241.970630][T11311] netlink: 'syz.1.1389': attribute type 10 has an invalid length. [ 241.972640][T11311] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1389'. [ 241.973772][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 241.975939][T11309] /dev/sr0: Can't open blockdev [ 242.238711][T11316] JFS: discard option not supported on device [ 242.240600][T11316] syz.0.1390: attempt to access beyond end of device [ 242.240600][T11316] loop0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 242.244175][T11316] syz.0.1390: attempt to access beyond end of device [ 242.244175][T11316] loop0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 242.247480][T11316] Mount JFS Failure: -5 [ 242.248597][T11316] jfs_mount failed w/return code = -5 [ 242.693769][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 242.744815][T11310] /dev/sr0: Can't open blockdev [ 242.946929][T11322] tipc: Enabling of bearer rejected, already enabled [ 243.013748][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 243.465967][T11340] overlayfs: missing 'lowerdir' [ 243.743700][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 243.945195][T11353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1402'. [ 244.028269][T11355] tipc: Enabling of bearer rejected, already enabled [ 244.063721][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 244.099904][T11365] overlayfs: missing 'lowerdir' [ 244.313494][T11375] ptrace attach of "/syz-executor exec"[5945] was attempted by "/syz-executor exec"[11375] [ 244.773748][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 244.897157][T11381] tipc: Enabling of bearer rejected, already enabled [ 244.996767][ T39] kauditd_printk_skb: 3639 callbacks suppressed [ 244.996778][ T39] audit: type=1326 audit(1734802424.687:5051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11400 comm="syz.1.1416" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa7579 code=0x0 [ 245.092828][T11409] netlink: 'syz.0.1419': attribute type 11 has an invalid length. [ 245.093754][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 245.154369][T11413] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 245.813813][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 246.096885][T11425] tipc: Enabling of bearer rejected, already enabled [ 246.133761][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 246.267907][T11435] overlayfs: failed to resolve './file0': -2 [ 246.598601][T11443] lo speed is unknown, defaulting to 1000 [ 246.729221][T11446] netlink: 39 bytes leftover after parsing attributes in process `syz.1.1425'. [ 246.853892][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 247.173738][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 247.266165][T11453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1431'. [ 247.271121][T11453] ntfs3(nullb0): Primary boot signature is not NTFS. [ 247.273299][T11453] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 247.409554][T11465] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 247.724084][ T6000] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 247.885019][ T6000] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 247.887376][ T6000] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 247.890124][ T6000] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 247.892586][ T6000] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 247.893748][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 247.895860][ T6000] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 247.901406][ T6000] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 247.903992][ T6000] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 247.906414][ T6000] usb 7-1: Product: syz [ 247.907908][ T6000] usb 7-1: Manufacturer: syz [ 247.912923][ T6000] cdc_wdm 7-1:1.0: skipping garbage [ 247.915615][ T6000] cdc_wdm 7-1:1.0: skipping garbage [ 247.918294][ T6000] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 247.920392][ T6000] cdc_wdm 7-1:1.0: Unknown control protocol [ 247.983738][ T1013] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 248.143802][ T1013] usb 6-1: Using ep0 maxpacket: 8 [ 248.150003][ T1013] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 248.152288][ T1013] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 248.154603][ T1013] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 248.157989][ T1013] usb 6-1: config 250 has no interface number 0 [ 248.160520][ T1013] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 248.165457][ T1013] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 248.166765][T11489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.169059][ T1013] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 248.171344][T11489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.179525][ T1013] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 248.182386][ C2] wdm_int_callback: 13 callbacks suppressed [ 248.182401][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 248.182545][ T5939] usb 7-1: USB disconnect, device number 25 [ 248.182699][ T1013] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 248.184394][ C2] wdm_int_callback: 13 callbacks suppressed [ 248.184403][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 248.184412][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 248.213716][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 248.213979][ T1013] usb 6-1: config 250 interface 228 has no altsetting 0 [ 248.232994][ T1013] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 248.246558][ T1013] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 248.249763][ T1013] usb 6-1: Product: syz [ 248.253026][ T1013] usb 6-1: SerialNumber: syz [ 248.299878][T11491] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 248.325209][ T1013] hub 6-1:250.228: bad descriptor, ignoring hub [ 248.327799][ T1013] hub 6-1:250.228: probe with driver hub failed with error -5 [ 248.362927][T11490] lo speed is unknown, defaulting to 1000 [ 248.522892][ T1013] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 15 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 248.824161][ T6419] usb 6-1: USB disconnect, device number 15 [ 248.827351][ T6419] usblp0: removed [ 248.943783][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 248.946603][T11506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.132351][T11514] hfs: can't find a HFS filesystem on dev sr0 [ 249.137257][T11512] overlayfs: failed to resolve './file1': -2 [ 249.223707][ T8] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 249.263745][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 249.383857][ T63] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 249.384872][ T8] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.388976][ T8] usb 8-1: config 0 has no interfaces? [ 249.390421][ T8] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 249.392746][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.396240][ T8] usb 8-1: config 0 descriptor?? [ 249.553705][ T63] usb 5-1: Using ep0 maxpacket: 32 [ 249.556301][ T63] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 249.558463][ T63] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 249.560676][ T63] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 249.563053][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 249.565628][ T63] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 249.568161][ T63] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 249.571493][ T63] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 249.573946][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.576969][ T63] usb 5-1: config 0 descriptor?? [ 249.613746][ T5939] usb 8-1: USB disconnect, device number 23 [ 249.790882][ T63] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 249.795550][ T63] usb 5-1: USB disconnect, device number 26 [ 249.800402][ T63] usblp0: removed [ 249.973780][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 250.093755][ T831] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 250.254989][ T831] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 250.257376][ T831] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 250.260053][ T831] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 250.262594][ T831] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 250.266175][ T831] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 250.270636][ T831] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 250.273473][ T831] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 250.276051][ T831] usb 7-1: Product: syz [ 250.277179][ T831] usb 7-1: Manufacturer: syz [ 250.280937][ T831] cdc_wdm 7-1:1.0: skipping garbage [ 250.282412][ T831] cdc_wdm 7-1:1.0: skipping garbage [ 250.284325][ T831] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 250.286226][ T831] cdc_wdm 7-1:1.0: Unknown control protocol [ 250.293723][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 250.546430][T11550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.554336][T11550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.566957][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 250.569218][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 250.571471][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 250.573701][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 250.575971][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 250.578184][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 250.580405][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 250.582630][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 250.584917][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 250.587179][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 250.589428][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 250.591646][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 250.592961][ T831] usb 7-1: USB disconnect, device number 26 [ 250.593735][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 250.721449][T11551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1457'. [ 250.877893][T11551] unsupported nlmsg_type 40 [ 251.013743][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 251.333712][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 251.491705][T11574] FAULT_INJECTION: forcing a failure. [ 251.491705][T11574] name failslab, interval 1, probability 0, space 0, times 0 [ 251.498754][T11574] CPU: 3 UID: 0 PID: 11574 Comm: syz.1.1469 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 251.502081][T11574] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 251.505599][T11574] Call Trace: [ 251.506741][T11574] [ 251.507754][T11574] dump_stack_lvl+0x16c/0x1f0 [ 251.509364][T11574] should_fail_ex+0x497/0x5b0 [ 251.510982][T11574] ? fs_reclaim_acquire+0xae/0x150 [ 251.512699][T11574] should_failslab+0xc2/0x120 [ 251.514346][T11574] __kmalloc_noprof+0xce/0x4f0 [ 251.515921][T11574] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 251.517816][T11574] ? tomoyo_realpath_from_path+0xbf/0x710 [ 251.519749][T11574] tomoyo_realpath_from_path+0xbf/0x710 [ 251.521618][T11574] ? tomoyo_path_number_perm+0x235/0x5b0 [ 251.523423][T11574] tomoyo_path_number_perm+0x248/0x5b0 [ 251.525266][T11574] ? tomoyo_path_number_perm+0x235/0x5b0 [ 251.527098][T11574] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 251.529127][T11574] ? __pfx_lock_release+0x10/0x10 [ 251.530795][T11574] ? trace_lock_acquire+0x14e/0x1f0 [ 251.532469][T11574] ? lock_acquire+0x2f/0xb0 [ 251.534018][T11574] ? __fget_files+0x40/0x3a0 [ 251.535470][T11574] ? __fget_files+0x206/0x3a0 [ 251.537065][T11574] security_file_ioctl_compat+0x9b/0x240 [ 251.538884][T11574] __do_compat_sys_ioctl+0x4e/0x2c0 [ 251.540638][T11574] __do_fast_syscall_32+0x73/0x120 [ 251.542215][T11574] do_fast_syscall_32+0x32/0x80 [ 251.543847][T11574] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 251.545954][T11574] RIP: 0023:0xf7fa7579 [ 251.547382][T11574] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 251.552626][T11574] RSP: 002b:00000000f50f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 251.554904][T11574] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005608 [ 251.557295][T11574] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 251.559819][T11574] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 251.562376][T11574] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 251.564945][T11574] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 251.567008][T11574] [ 251.579600][T11574] ERROR: Out of memory at tomoyo_realpath_from_path. [ 251.826275][ T39] audit: type=1326 audit(1734802431.517:5052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.0.1474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 251.832223][ T39] audit: type=1326 audit(1734802431.517:5053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.0.1474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 251.839630][ T39] audit: type=1326 audit(1734802431.517:5054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.0.1474" exe="/syz-executor" sig=0 arch=40000003 syscall=151 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 251.848428][ T39] audit: type=1326 audit(1734802431.517:5055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.0.1474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 251.856176][ T39] audit: type=1326 audit(1734802431.517:5056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.0.1474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 251.863353][ T39] audit: type=1326 audit(1734802431.527:5057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.0.1474" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 251.870703][ T39] audit: type=1326 audit(1734802431.537:5058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.0.1474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 251.878042][ T39] audit: type=1326 audit(1734802431.537:5059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.0.1474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 251.885366][ T39] audit: type=1326 audit(1734802431.537:5060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.0.1474" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 251.892475][ T39] audit: type=1326 audit(1734802431.547:5061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.0.1474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 252.053732][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 252.383729][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 252.623194][T11612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1484'. [ 252.630638][T11612] bridge0: port 1(bridge_slave_1) entered blocking state [ 252.632580][T11612] bridge0: port 1(bridge_slave_1) entered disabled state [ 252.635518][T11612] bridge_slave_1: entered allmulticast mode [ 252.637825][T11612] bridge_slave_1: entered promiscuous mode [ 253.103793][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 253.423711][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 253.557535][T11635] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1490'. [ 253.559885][T11635] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1490'. [ 253.563019][T11635] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1490'. [ 253.565881][T11635] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 253.569695][T11635] netlink: 'syz.3.1490': attribute type 4 has an invalid length. [ 253.584342][T11635] netlink: 'syz.3.1490': attribute type 4 has an invalid length. [ 253.589683][ T6000] lo speed is unknown, defaulting to 1000 [ 254.133792][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 254.453794][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 254.480835][T11655] syzkaller0: entered promiscuous mode [ 254.482403][T11655] syzkaller0: entered allmulticast mode [ 255.017071][ T1412] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.105778][T11667] ptrace attach of "/syz-executor exec"[5946] was attempted by "/syz-executor exec"[11667] [ 255.183706][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 255.493720][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 255.901610][T11677] Falling back ldisc for ttyS3. [ 255.959833][T11689] tipc: Enabling of bearer rejected, already enabled [ 256.133978][T11702] netlink: 'syz.1.1508': attribute type 10 has an invalid length. [ 256.136614][T11702] bridge0: port 3(syz_tun) entered disabled state [ 256.139978][T11702] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.154935][T11702] bridge0: port 3(syz_tun) entered blocking state [ 256.156711][T11702] bridge0: port 3(syz_tun) entered forwarding state [ 256.158518][T11702] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.160382][T11702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.166718][T11702] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 256.173476][T11702] fuse: Bad value for 'fd' [ 256.213753][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 256.445523][T11713] lo speed is unknown, defaulting to 1000 [ 256.543699][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 257.234014][T11731] nbd3: detected capacity change from 0 to 22 [ 257.235793][ T8634] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 257.235905][T11732] block nbd3: shutting down sockets [ 257.238961][ T5954] blk_print_req_error: 25 callbacks suppressed [ 257.238970][ T5954] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 257.244608][ T5954] buffer_io_error: 25 callbacks suppressed [ 257.244616][ T5954] Buffer I/O error on dev nbd3, logical block 0, async page read [ 257.249360][ T2593] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 257.251820][ T2593] Buffer I/O error on dev nbd3, logical block 0, async page read [ 257.254148][ T5954] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 257.257262][ T5954] Buffer I/O error on dev nbd3, logical block 0, async page read [ 257.259943][ T5954] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 257.263061][ T5954] Buffer I/O error on dev nbd3, logical block 0, async page read [ 257.265892][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 257.268238][ T5954] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 257.270653][ T5954] Buffer I/O error on dev nbd3, logical block 0, async page read [ 257.272701][ T5954] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 257.275153][ T5954] Buffer I/O error on dev nbd3, logical block 0, async page read [ 257.277208][ T5954] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 257.279587][ T5954] Buffer I/O error on dev nbd3, logical block 0, async page read [ 257.281647][ T5954] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 257.284678][ T5954] Buffer I/O error on dev nbd3, logical block 0, async page read [ 257.286711][ T5954] ldm_validate_partition_table(): Disk read failed. [ 257.288608][ T5954] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 257.291017][ T5954] Buffer I/O error on dev nbd3, logical block 0, async page read [ 257.293059][ T5954] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 257.295442][ T5954] Buffer I/O error on dev nbd3, logical block 0, async page read [ 257.297660][ T5954] Dev nbd3: unable to read RDB block 0 [ 257.299217][ T5954] nbd3: unable to read partition table [ 257.300722][ T5954] nbd3: partition table beyond EOD, truncated [ 257.354242][ T5954] ldm_validate_partition_table(): Disk read failed. [ 257.356803][ T5954] Dev nbd3: unable to read RDB block 0 [ 257.358792][ T5954] nbd3: unable to read partition table [ 257.360648][ T5954] nbd3: partition table beyond EOD, truncated [ 257.487736][ T8634] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 257.583777][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 257.883721][ T8634] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 257.886376][ T8634] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 257.888670][ T8634] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 257.891469][ T8634] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 257.906321][ T8634] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 257.908665][ T8634] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 257.910721][ T8634] usb 5-1: Product: syz [ 257.911806][ T8634] usb 5-1: Manufacturer: syz [ 257.923124][ T8634] cdc_wdm 5-1:1.0: skipping garbage [ 257.924561][ T8634] cdc_wdm 5-1:1.0: skipping garbage [ 257.928049][ T8634] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 257.929607][ T8634] cdc_wdm 5-1:1.0: Unknown control protocol [ 258.136945][T11744] FAULT_INJECTION: forcing a failure. [ 258.136945][T11744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.141300][T11744] CPU: 1 UID: 0 PID: 11744 Comm: syz.1.1519 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 258.145049][T11744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 258.148654][T11744] Call Trace: [ 258.149814][T11744] [ 258.150826][T11744] dump_stack_lvl+0x16c/0x1f0 [ 258.152446][T11744] should_fail_ex+0x497/0x5b0 [ 258.154060][T11744] _copy_to_user+0x32/0xd0 [ 258.155574][T11744] simple_read_from_buffer+0xd0/0x160 [ 258.157419][T11744] proc_fail_nth_read+0x198/0x270 [ 258.159121][T11744] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 258.160991][T11744] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 258.162867][T11744] vfs_read+0x1df/0xbe0 [ 258.164287][T11744] ? __fget_files+0x1fc/0x3a0 [ 258.165889][T11744] ? __pfx___mutex_lock+0x10/0x10 [ 258.167589][T11744] ? __pfx_vfs_read+0x10/0x10 [ 258.169206][T11744] ? __fget_files+0x206/0x3a0 [ 258.170802][T11744] ksys_read+0x12b/0x250 [ 258.172267][T11744] ? __pfx_ksys_read+0x10/0x10 [ 258.173902][T11744] __do_fast_syscall_32+0x73/0x120 [ 258.175644][T11744] do_fast_syscall_32+0x32/0x80 [ 258.177316][T11744] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 258.179444][T11744] RIP: 0023:0xf7fa7579 [ 258.180832][T11744] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 258.187304][T11744] RSP: 002b:00000000f50f6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 258.190129][T11744] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f50f6620 [ 258.192788][T11744] RDX: 000000000000000f RSI: 00000000f7433ff4 RDI: 0000000000000000 [ 258.195455][T11744] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 258.198125][T11744] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 258.200780][T11744] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 258.203476][T11744] [ 258.207137][T11745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.209420][T11745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.211958][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 258.212364][ T1450] usb 5-1: USB disconnect, device number 27 [ 258.213767][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 258.213789][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 258.303700][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 258.613774][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 258.673212][T11765] lo speed is unknown, defaulting to 1000 [ 258.798222][T11772] random: crng reseeded on system resumption [ 258.860449][T11776] netlink: 'syz.0.1527': attribute type 7 has an invalid length. [ 258.863080][T11776] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1527'. [ 259.113817][ T6000] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 259.284668][ T6000] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 259.288150][ T6000] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 259.293412][ T6000] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 259.297490][ T6000] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.303017][T11776] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 259.308070][ T6000] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 259.343689][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 259.551328][T11776] lo speed is unknown, defaulting to 1000 [ 259.663819][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 259.814864][ T8634] usb 5-1: USB disconnect, device number 28 [ 259.976333][T11791] binder: 11789:11791 ioctl c0405665 20000000 returned -22 [ 259.977452][T11790] binder: 11789:11790 ioctl c0306201 20000000 returned -14 [ 260.376419][ T6000] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 260.383688][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 260.463390][T11809] netlink: 'syz.3.1536': attribute type 10 has an invalid length. [ 260.498753][T11813] --map-set only usable from mangle table [ 260.525817][ T6000] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 260.530932][ T6000] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 260.540951][ T6000] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 260.543459][ T6000] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 260.549645][ T6000] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 260.556368][ T6000] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 260.558886][ T6000] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 260.561407][ T6000] usb 6-1: Product: syz [ 260.562638][ T6000] usb 6-1: Manufacturer: syz [ 260.567267][ T6000] cdc_wdm 6-1:1.0: skipping garbage [ 260.568670][ T6000] cdc_wdm 6-1:1.0: skipping garbage [ 260.571133][ T6000] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 260.572829][ T6000] cdc_wdm 6-1:1.0: Unknown control protocol [ 260.703702][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 260.818812][T11825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.821087][T11825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.823968][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 260.824104][ T35] usb 6-1: USB disconnect, device number 16 [ 260.825716][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 260.828842][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 260.889075][T11827] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1542'. [ 260.891455][T11827] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1542'. [ 261.115637][T11830] netlink: 'syz.3.1542': attribute type 10 has an invalid length. [ 261.413832][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 261.434319][T11833] netlink: 'syz.1.1543': attribute type 10 has an invalid length. [ 261.437189][T11833] bond0: (slave wlan1): Opening slave failed [ 261.474388][T11834] syz.1.1543 (11834): drop_caches: 2 [ 261.565759][ T63] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 261.568201][ T63] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 261.570830][ T63] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 261.581310][ T63] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 261.583277][ T63] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 261.587175][ T63] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 261.589227][ T63] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 261.591146][ T63] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 261.593053][ T63] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 261.595256][ T63] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 261.597195][ T63] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 261.599113][ T63] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 261.601083][ T63] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 261.603016][ T63] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 261.606861][ T63] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 261.608791][ T63] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 261.609514][T11841] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1545'. [ 261.610702][ T63] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 261.610728][ T63] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 261.610738][ T63] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 261.610749][ T63] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 261.622625][ T63] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 261.624870][ T63] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 261.626810][ T63] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 261.628716][ T63] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 261.630644][ T63] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 261.632567][ T63] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 261.634606][ T63] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 261.636535][ T63] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 261.638558][ T63] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 261.640541][ T63] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 261.642507][ T63] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 261.644581][ T63] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 261.650998][ T63] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz0] on syz0 [ 261.663313][T11841] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 261.733819][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 262.453713][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 262.773739][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 262.938891][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888022d52800: rx timeout, send abort [ 262.942401][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888022d52800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 263.208744][T11860] netlink: 'syz.3.1550': attribute type 58 has an invalid length. [ 263.210845][T11860] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1550'. [ 263.317196][T11865] tipc: Enabling of bearer rejected, already enabled [ 263.408608][T11870] FAULT_INJECTION: forcing a failure. [ 263.408608][T11870] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 263.412051][T11870] CPU: 1 UID: 0 PID: 11870 Comm: syz.3.1552 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 263.414843][T11870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 263.417630][T11870] Call Trace: [ 263.418510][T11870] [ 263.419291][T11870] dump_stack_lvl+0x16c/0x1f0 [ 263.420530][T11870] should_fail_ex+0x497/0x5b0 [ 263.421777][T11870] ? fs_reclaim_acquire+0xae/0x150 [ 263.423130][T11870] should_fail_alloc_page+0xe7/0x130 [ 263.424499][T11870] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 263.426129][T11870] ? __pfx_mark_lock+0x10/0x10 [ 263.427384][T11870] __alloc_pages_noprof+0x190/0x25b0 [ 263.428760][T11870] ? finish_task_switch.isra.0+0x212/0xcc0 [ 263.430279][T11870] ? __pfx_lock_release+0x10/0x10 [ 263.431589][T11870] ? rcu_is_watching+0x12/0xc0 [ 263.432842][T11870] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 263.434356][T11870] ? __lock_acquire+0x15a9/0x3c40 [ 263.435678][T11870] ? hlock_class+0x4e/0x130 [ 263.436868][T11870] ? mark_lock+0xb5/0xc60 [ 263.438007][T11870] ? hlock_class+0x4e/0x130 [ 263.439195][T11870] ? mark_lock+0xb5/0xc60 [ 263.440379][T11870] ? __schedule+0xe60/0x5ad0 [ 263.441591][T11870] ? __pfx_mark_lock+0x10/0x10 [ 263.442851][T11870] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 263.444385][T11870] ? policy_nodemask+0xea/0x4e0 [ 263.445664][T11870] alloc_pages_mpol_noprof+0x2c9/0x610 [ 263.447083][T11870] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 263.448636][T11870] ? __lock_acquire+0xcc5/0x3c40 [ 263.449943][T11870] ? find_held_lock+0x2d/0x110 [ 263.451198][T11870] folio_alloc_mpol_noprof+0x36/0xd0 [ 263.452586][T11870] vma_alloc_folio_noprof+0xee/0x1b0 [ 263.454019][T11870] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 263.455566][T11870] ? __pfx___lock_acquire+0x10/0x10 [ 263.456924][T11870] do_wp_page+0x105a/0x4670 [ 263.458128][T11870] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 263.459595][T11870] ? __pfx_do_wp_page+0x10/0x10 [ 263.460869][T11870] ? rcu_is_watching+0x12/0xc0 [ 263.462130][T11870] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 263.463520][T11870] ? lock_acquire+0x2f/0xb0 [ 263.464705][T11870] ? __handle_mm_fault+0xdfa/0x2a40 [ 263.466072][T11870] __handle_mm_fault+0x1ade/0x2a40 [ 263.467369][T11870] ? find_held_lock+0x2d/0x110 [ 263.468604][T11870] ? __pfx___handle_mm_fault+0x10/0x10 [ 263.470019][T11870] ? follow_page_pte+0x374/0x1b20 [ 263.471328][T11870] ? __pfx_lock_release+0x10/0x10 [ 263.472764][T11870] ? vm_normal_page+0x13c/0x2b0 [ 263.474052][T11870] ? follow_page_pte+0x3f7/0x1b20 [ 263.475492][T11870] handle_mm_fault+0x3fa/0xaa0 [ 263.477201][T11870] __get_user_pages+0x8d9/0x3b50 [ 263.478942][T11870] ? __pfx___get_user_pages+0x10/0x10 [ 263.480806][T11870] ? down_read_killable+0xcc/0x380 [ 263.482487][T11870] ? __pfx_down_read_killable+0x10/0x10 [ 263.483923][T11870] ? find_held_lock+0x2d/0x110 [ 263.485192][T11870] __gup_longterm_locked+0x211/0x1870 [ 263.486595][T11870] ? __pfx_lock_release+0x10/0x10 [ 263.487910][T11870] ? trace_lock_acquire+0x14e/0x1f0 [ 263.489291][T11870] ? __pfx___gup_longterm_locked+0x10/0x10 [ 263.490808][T11870] ? gup_fast_fallback+0x84c/0x2690 [ 263.492139][T11870] ? __pfx_lock_release+0x10/0x10 [ 263.493465][T11870] ? try_get_folio+0x517/0x800 [ 263.494718][T11870] ? sanity_check_pinned_pages+0x3ab/0x11e0 [ 263.496276][T11870] gup_fast_fallback+0x1802/0x2690 [ 263.497633][T11870] ? __pfx_gup_fast_fallback+0x10/0x10 [ 263.499065][T11870] pin_user_pages_fast+0xa8/0x100 [ 263.500393][T11870] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 263.501869][T11870] ? __kmalloc_noprof+0x23b/0x4f0 [ 263.503196][T11870] ? rds_info_getsockopt+0x376/0x4f0 [ 263.504574][T11870] rds_info_getsockopt+0x39a/0x4f0 [ 263.505961][T11870] ? __might_fault+0x13b/0x190 [ 263.507221][T11870] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 263.508687][T11870] ? trace_lock_acquire+0x14e/0x1f0 [ 263.510064][T11870] ? lock_acquire+0x2f/0xb0 [ 263.511252][T11870] ? __might_fault+0xe3/0x190 [ 263.512498][T11870] ? __might_fault+0xe3/0x190 [ 263.513750][T11870] rds_getsockopt+0x173/0x2d0 [ 263.514994][T11870] ? __pfx_rds_getsockopt+0x10/0x10 [ 263.516361][T11870] do_sock_getsockopt+0x3fe/0x870 [ 263.517700][T11870] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 263.519142][T11870] ? lock_acquire+0x2f/0xb0 [ 263.520332][T11870] ? __fget_files+0x40/0x3a0 [ 263.521555][T11870] ? __fget_files+0x206/0x3a0 [ 263.522789][T11870] __sys_getsockopt+0x12f/0x260 [ 263.523712][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 263.524071][T11870] __ia32_sys_getsockopt+0xbc/0x160 [ 263.527281][T11870] ? lockdep_hardirqs_on+0x7c/0x110 [ 263.528642][T11870] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 263.530352][T11870] __do_fast_syscall_32+0x73/0x120 [ 263.531685][T11870] do_fast_syscall_32+0x32/0x80 [ 263.532973][T11870] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 263.534623][T11870] RIP: 0023:0xf710e579 [ 263.535699][T11870] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 263.540627][T11870] RSP: 002b:00000000f50df55c EFLAGS: 00000296 ORIG_RAX: 000000000000016d [ 263.542814][T11870] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000114 [ 263.544860][T11870] RDX: 000000000000271b RSI: 0000000020000580 RDI: 0000000020000000 [ 263.546905][T11870] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 263.548939][T11870] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 263.550989][T11870] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 263.553032][T11870] [ 263.701298][T11879] mmap: syz.0.1555 (11879) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 263.813923][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 264.114816][T11887] lo speed is unknown, defaulting to 1000 [ 264.343898][T11889] nbd0: detected capacity change from 0 to 22 [ 264.345985][T11892] block nbd0: shutting down sockets [ 264.348030][ T5954] blk_print_req_error: 25 callbacks suppressed [ 264.348076][ T5954] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.352212][ T5954] buffer_io_error: 25 callbacks suppressed [ 264.352219][ T5954] Buffer I/O error on dev nbd0, logical block 0, async page read [ 264.358059][ T5954] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.360553][ T5954] Buffer I/O error on dev nbd0, logical block 0, async page read [ 264.362708][ T5954] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.365629][ T5954] Buffer I/O error on dev nbd0, logical block 0, async page read [ 264.367815][ T5954] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.370282][ T5954] Buffer I/O error on dev nbd0, logical block 0, async page read [ 264.372371][ T5954] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.375172][ T5954] Buffer I/O error on dev nbd0, logical block 0, async page read [ 264.377349][ T5954] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.379645][ T5954] Buffer I/O error on dev nbd0, logical block 0, async page read [ 264.381771][ T5954] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.384314][ T5954] Buffer I/O error on dev nbd0, logical block 0, async page read [ 264.386697][ T5954] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.389189][ T5954] Buffer I/O error on dev nbd0, logical block 0, async page read [ 264.391521][ T5954] ldm_validate_partition_table(): Disk read failed. [ 264.393602][ T5954] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.396572][ T5954] Buffer I/O error on dev nbd0, logical block 0, async page read [ 264.398705][ T5954] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.401105][ T5954] Buffer I/O error on dev nbd0, logical block 0, async page read [ 264.403314][ T5954] Dev nbd0: unable to read RDB block 0 [ 264.405070][ T5954] nbd0: unable to read partition table [ 264.406660][ T5954] nbd0: partition table beyond EOD, truncated [ 264.409670][ T5954] ldm_validate_partition_table(): Disk read failed. [ 264.411626][ T5954] Dev nbd0: unable to read RDB block 0 [ 264.413319][ T5954] nbd0: unable to read partition table [ 264.414954][ T5954] nbd0: partition table beyond EOD, truncated [ 264.533715][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 264.863731][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 265.157908][T11915] binder: 11913:11915 ioctl c00c6211 0 returned -14 [ 265.212824][ T39] kauditd_printk_skb: 20 callbacks suppressed [ 265.212835][ T39] audit: type=1326 audit(1734802444.897:5082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11913 comm="syz.2.1565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 265.221286][ T39] audit: type=1326 audit(1734802444.897:5083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11913 comm="syz.2.1565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 265.227256][ T39] audit: type=1326 audit(1734802444.897:5084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11913 comm="syz.2.1565" exe="/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 265.232915][ T39] audit: type=1326 audit(1734802444.897:5085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11913 comm="syz.2.1565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 265.239625][ T39] audit: type=1326 audit(1734802444.907:5086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11913 comm="syz.2.1565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 265.245353][ T39] audit: type=1326 audit(1734802444.907:5087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11913 comm="syz.2.1565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 265.250859][ T39] audit: type=1326 audit(1734802444.907:5088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11913 comm="syz.2.1565" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 265.257357][ T39] audit: type=1326 audit(1734802444.907:5089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11913 comm="syz.2.1565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 265.263747][ T39] audit: type=1326 audit(1734802444.907:5090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11913 comm="syz.2.1565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 265.264253][ T1450] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 265.272182][ T39] audit: type=1326 audit(1734802444.957:5091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11913 comm="syz.2.1565" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 265.413912][ T1450] usb 6-1: device descriptor read/64, error -71 [ 265.573762][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 265.663906][ T1450] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 265.795290][ T1450] usb 6-1: device descriptor read/64, error -71 [ 265.842796][T11947] pim6reg: entered allmulticast mode [ 265.849185][T11947] pim6reg: left allmulticast mode [ 265.893741][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 265.908315][T11948] lo speed is unknown, defaulting to 1000 [ 265.908689][ T1450] usb usb6-port1: attempt power cycle [ 266.203741][ T6419] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 266.253937][ T1450] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 266.275797][ T1450] usb 6-1: device descriptor read/8, error -71 [ 266.353916][ T6419] usb 5-1: Using ep0 maxpacket: 8 [ 266.356583][ T6419] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 266.359051][ T6419] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 266.361377][ T6419] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 266.364562][ T6419] usb 5-1: config 250 has no interface number 0 [ 266.366965][ T6419] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 266.370970][ T6419] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 266.377414][ T6419] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 266.380111][ T6419] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 266.382794][ T6419] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 266.386959][ T6419] usb 5-1: config 250 interface 228 has no altsetting 0 [ 266.389911][ T6419] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 266.392318][ T6419] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 266.394570][ T6419] usb 5-1: Product: syz [ 266.395722][ T6419] usb 5-1: SerialNumber: syz [ 266.401885][ T6419] hub 5-1:250.228: bad descriptor, ignoring hub [ 266.403585][ T6419] hub 5-1:250.228: probe with driver hub failed with error -5 [ 266.513772][ T1450] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 266.534345][ T1450] usb 6-1: device descriptor read/8, error -71 [ 266.608313][ T6419] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 29 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 266.623717][ C3] net_ratelimit: 1 callbacks suppressed [ 266.623727][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 266.643843][ T1450] usb usb6-port1: unable to enumerate USB device [ 266.943722][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 266.955249][T11973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.653741][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 267.656736][ T1450] usb 5-1: USB disconnect, device number 29 [ 267.662609][ T1450] usblp0: removed [ 267.727811][T11987] lo speed is unknown, defaulting to 1000 [ 267.973814][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 268.201769][T11996] tipc: Enabling of bearer rejected, already enabled [ 268.216260][T11998] program syz.0.1585 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 268.535742][T12009] fuse: Bad value for 'fd' [ 268.605814][T12011] netlink: 'syz.1.1586': attribute type 2 has an invalid length. [ 268.617460][T12011] netlink: 'syz.1.1586': attribute type 1 has an invalid length. [ 268.629494][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1586'. [ 268.693726][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 268.793695][T12014] 9pnet_fd: Insufficient options for proto=fd [ 268.980616][T12022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1591'. [ 269.013693][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 269.143788][ T1450] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 269.304892][ T1450] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 269.306968][ T1450] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 269.309759][ T1450] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 269.316582][ T1450] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 269.319073][ T1450] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 269.322718][ T1450] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 269.325140][ T1450] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 269.326939][ T1450] usb 7-1: Product: syz [ 269.327887][ T1450] usb 7-1: Manufacturer: syz [ 269.334301][ T1450] cdc_wdm 7-1:1.0: skipping garbage [ 269.335532][ T1450] cdc_wdm 7-1:1.0: skipping garbage [ 269.337158][ T1450] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 269.338514][ T1450] cdc_wdm 7-1:1.0: Unknown control protocol [ 269.488454][T12045] lo speed is unknown, defaulting to 1000 [ 269.591029][T12047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.593586][T12047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.598740][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 269.600470][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 269.602304][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 269.604094][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 269.605887][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 269.607674][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 269.609364][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 269.611026][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 269.612729][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 269.614800][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 269.617186][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 269.618893][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 269.620406][ T6000] usb 7-1: USB disconnect, device number 27 [ 269.621911][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 269.621922][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 269.621929][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 269.733736][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 269.855558][T12049] tipc: Enabling of bearer rejected, already enabled [ 269.953451][T12054] lo speed is unknown, defaulting to 1000 [ 270.063706][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 270.462893][T12063] 9pnet_fd: Insufficient options for proto=fd [ 270.465993][T12063] siw: device registration error -23 [ 270.773741][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 271.107775][T12072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1604'. [ 271.194027][ T1450] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 271.813733][ C3] net_ratelimit: 1 callbacks suppressed [ 271.813746][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 272.025377][T12082] tipc: Enabling of bearer rejected, already enabled [ 272.053888][ T1450] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 272.133727][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 272.314364][ T1450] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 272.589942][ T1450] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 272.592244][ T1450] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 272.595020][ T1450] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 272.595213][T12114] netlink: 'syz.0.1613': attribute type 9 has an invalid length. [ 272.597308][ T1450] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 272.602321][ T1450] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 272.668145][ T1450] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 272.678761][ T1450] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 272.680808][ T1450] usb 6-1: Product: syz [ 272.681851][ T1450] usb 6-1: Manufacturer: syz [ 272.686852][ T1450] cdc_wdm 6-1:1.0: skipping garbage [ 272.688407][ T1450] cdc_wdm 6-1:1.0: skipping garbage [ 272.691666][ T1450] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 272.693990][ T1450] cdc_wdm 6-1:1.0: Unknown control protocol [ 272.853742][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 272.948476][T12122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.950945][T12122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.954206][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 272.954399][ T35] usb 6-1: USB disconnect, device number 21 [ 272.956029][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 272.959252][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 273.183747][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 273.319343][T12125] tipc: Enabling of bearer rejected, already enabled [ 273.859544][T12148] lo speed is unknown, defaulting to 1000 [ 273.903721][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 274.066840][T12157] tipc: Enabling of bearer rejected, already enabled [ 274.223755][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 274.723852][T12169] nbd2: detected capacity change from 0 to 22 [ 274.726163][T12174] block nbd2: shutting down sockets [ 274.735943][ C1] blk_print_req_error: 25 callbacks suppressed [ 274.735953][ C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 274.735986][ C1] buffer_io_error: 25 callbacks suppressed [ 274.735993][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 274.736112][ T5954] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 274.736131][ T5954] Buffer I/O error on dev nbd2, logical block 0, async page read [ 274.736220][ T5954] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 274.736234][ T5954] Buffer I/O error on dev nbd2, logical block 0, async page read [ 274.736279][ T5954] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 274.736292][ T5954] Buffer I/O error on dev nbd2, logical block 0, async page read [ 274.736331][ T5954] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 274.736344][ T5954] Buffer I/O error on dev nbd2, logical block 0, async page read [ 274.736453][ T5954] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 274.736467][ T5954] Buffer I/O error on dev nbd2, logical block 0, async page read [ 274.736513][ T5954] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 274.736525][ T5954] Buffer I/O error on dev nbd2, logical block 0, async page read [ 274.736566][ T5954] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 274.736579][ T5954] Buffer I/O error on dev nbd2, logical block 0, async page read [ 274.736605][ T5954] ldm_validate_partition_table(): Disk read failed. [ 274.736630][ T5954] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 274.736642][ T5954] Buffer I/O error on dev nbd2, logical block 0, async page read [ 274.736688][ T5954] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 274.736701][ T5954] Buffer I/O error on dev nbd2, logical block 0, async page read [ 274.736830][ T5954] Dev nbd2: unable to read RDB block 0 [ 274.736942][ T5954] nbd2: unable to read partition table [ 274.737008][ T5954] nbd2: partition table beyond EOD, truncated [ 274.738106][ T5954] ldm_validate_partition_table(): Disk read failed. [ 274.738246][ T5954] Dev nbd2: unable to read RDB block 0 [ 274.738351][ T5954] nbd2: unable to read partition table [ 274.738409][ T5954] nbd2: partition table beyond EOD, truncated [ 274.943706][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 274.985207][ T1450] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 275.260955][ T1450] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 275.263707][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 275.271028][ T1450] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 275.289382][ T1450] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 275.292031][ T1450] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 275.295298][ T1450] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 275.321939][ T1450] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 275.324770][ T1450] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 275.423802][ T1450] usb 6-1: Product: syz [ 275.425327][ T1450] usb 6-1: Manufacturer: syz [ 275.460231][T12181] syz.0.1633 (12181): drop_caches: 2 [ 275.461337][ T1450] cdc_wdm 6-1:1.0: skipping garbage [ 275.467780][ T1450] cdc_wdm 6-1:1.0: skipping garbage [ 275.473880][ T1450] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 275.475526][ T1450] cdc_wdm 6-1:1.0: Unknown control protocol [ 275.727758][T12188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.734244][T12188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.737297][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 275.737733][ T1450] usb 6-1: USB disconnect, device number 22 [ 275.739743][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 275.743598][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 275.800780][T12192] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1636'. [ 275.803094][T12192] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1636'. [ 275.961254][T12198] lo speed is unknown, defaulting to 1000 [ 275.973801][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 276.293770][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 276.468705][T12224] block device autoloading is deprecated and will be removed. [ 276.472246][T12224] syz.1.1644: attempt to access beyond end of device [ 276.472246][T12224] md0: rw=2048, sector=18446744073709551608, nr_sectors = 8 limit=0 [ 276.755866][T12230] 9pnet_virtio: no channels available for device syz [ 277.013724][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 277.014659][ T6419] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 277.167228][ T6419] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 277.170000][ T6419] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 277.172624][ T6419] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 277.175018][ T6419] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 277.177562][ T6419] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 277.182810][ T6419] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 277.185286][ T6419] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 277.187528][ T6419] usb 7-1: Product: syz [ 277.188591][ T6419] usb 7-1: Manufacturer: syz [ 277.193329][ T6419] cdc_wdm 7-1:1.0: skipping garbage [ 277.194906][ T6419] cdc_wdm 7-1:1.0: skipping garbage [ 277.197584][ T6419] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 277.199257][ T6419] cdc_wdm 7-1:1.0: Unknown control protocol [ 277.283928][ T1450] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 277.333811][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 277.399521][ T35] usb 7-1: USB disconnect, device number 28 [ 277.435385][ T1450] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 277.438537][ T1450] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 277.442217][ T1450] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 277.445639][ T1450] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 277.449333][ T1450] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 277.454857][ T1450] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 277.457942][ T1450] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 277.460931][ T1450] usb 5-1: Product: syz [ 277.462351][ T1450] usb 5-1: Manufacturer: syz [ 277.467564][ T1450] cdc_wdm 5-1:1.0: skipping garbage [ 277.469412][ T1450] cdc_wdm 5-1:1.0: skipping garbage [ 277.472005][ T1450] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 277.473562][ T1450] cdc_wdm 5-1:1.0: Unknown control protocol [ 277.725488][T12241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.728460][T12241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.731984][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 277.732167][ T35] usb 5-1: USB disconnect, device number 30 [ 277.734044][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 277.734060][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 277.873793][ T5948] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 278.039596][ T5948] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.047720][ T5948] usb 6-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.40 [ 278.050180][ T5948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.052259][ T5948] usb 6-1: Product: syz [ 278.053487][ T5948] usb 6-1: Manufacturer: syz [ 278.053796][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 278.054838][ T5948] usb 6-1: SerialNumber: syz [ 278.064238][ T5948] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 278.066458][ T5948] usb 6-1: no configuration chosen from 1 choice [ 278.373752][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 278.872605][T12256] lo speed is unknown, defaulting to 1000 [ 279.103843][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 279.413734][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 279.764278][T12267] [ 279.765049][T12267] ====================================================== [ 279.766764][T12267] WARNING: possible circular locking dependency detected [ 279.768491][T12267] 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 Not tainted [ 279.771176][T12267] ------------------------------------------------------ [ 279.774240][T12267] syz.0.1660/12267 is trying to acquire lock: [ 279.776275][T12267] ffff888023c02330 (&q->sysfs_lock){+.+.}-{4:4}, at: __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 279.779590][T12267] [ 279.779590][T12267] but task is already holding lock: [ 279.781621][T12267] ffff888023c01e00 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x1460 [ 279.784862][T12267] [ 279.784862][T12267] which lock already depends on the new lock. [ 279.784862][T12267] [ 279.787826][T12267] [ 279.787826][T12267] the existing dependency chain (in reverse order) is: [ 279.790411][T12267] [ 279.790411][T12267] -> #4 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 279.793257][T12267] blk_mq_submit_bio+0x1fb6/0x24c0 [ 279.795157][T12267] __submit_bio+0x384/0x540 [ 279.796800][T12267] submit_bio_noacct_nocheck+0x698/0xd70 [ 279.798800][T12267] submit_bio_noacct+0x93a/0x1e20 [ 279.800636][T12267] block_read_full_folio+0x812/0xa50 [ 279.802608][T12267] filemap_read_folio+0xc6/0x2a0 [ 279.804440][T12267] filemap_get_pages+0x155f/0x1be0 [ 279.806346][T12267] filemap_read+0x3ca/0xd70 [ 279.808052][T12267] blkdev_read_iter+0x187/0x480 [ 279.809862][T12267] vfs_read+0x87f/0xbe0 [ 279.811449][T12267] ksys_read+0x12b/0x250 [ 279.813081][T12267] do_syscall_64+0xcd/0x250 [ 279.814850][T12267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.817047][T12267] [ 279.817047][T12267] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 279.819434][T12267] down_read+0x9a/0x330 [ 279.820940][T12267] filemap_fault+0x62c/0x2820 [ 279.822642][T12267] __do_fault+0x10a/0x490 [ 279.824236][T12267] do_pte_missing+0xebd/0x3e00 [ 279.825652][T12267] __handle_mm_fault+0x103c/0x2a40 [ 279.827123][T12267] handle_mm_fault+0x3fa/0xaa0 [ 279.828706][T12267] __get_user_pages+0x8d9/0x3b50 [ 279.830099][T12267] populate_vma_page_range+0x27f/0x3a0 [ 279.831652][T12267] __mm_populate+0x1d6/0x380 [ 279.833063][T12267] do_mlock+0x40a/0x7d0 [ 279.834309][T12267] __ia32_sys_mlock+0x57/0x80 [ 279.835684][T12267] __do_fast_syscall_32+0x73/0x120 [ 279.837144][T12267] do_fast_syscall_32+0x32/0x80 [ 279.838539][T12267] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 279.840316][T12267] [ 279.840316][T12267] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 279.842317][T12267] __might_fault+0x11b/0x190 [ 279.843641][T12267] _copy_from_user+0x29/0xd0 [ 279.844973][T12267] compat_blk_trace_setup+0xc9/0x200 [ 279.846511][T12267] blk_trace_ioctl+0x24a/0x290 [ 279.847888][T12267] compat_blkdev_ioctl+0x13c/0x750 [ 279.849389][T12267] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 279.850910][T12267] __do_fast_syscall_32+0x73/0x120 [ 279.852391][T12267] do_fast_syscall_32+0x32/0x80 [ 279.853803][T12267] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 279.855581][T12267] [ 279.855581][T12267] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 279.857630][T12267] __mutex_lock+0x19b/0xa60 [ 279.858931][T12267] blk_register_queue+0x13c/0x4f0 [ 279.860366][T12267] add_disk_fwnode+0x785/0x1300 [ 279.861782][T12267] brd_alloc.isra.0+0x50a/0x7c0 [ 279.863202][T12267] brd_init+0x12b/0x1d0 [ 279.864403][T12267] do_one_initcall+0x128/0x630 [ 279.865787][T12267] kernel_init_freeable+0x58f/0x8b0 [ 279.867266][T12267] kernel_init+0x1c/0x2b0 [ 279.868528][T12267] ret_from_fork+0x45/0x80 [ 279.869821][T12267] ret_from_fork_asm+0x1a/0x30 [ 279.871192][T12267] [ 279.871192][T12267] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 279.873155][T12267] __lock_acquire+0x249e/0x3c40 [ 279.874661][T12267] lock_acquire.part.0+0x11b/0x380 [ 279.876490][T12267] __mutex_lock+0x19b/0xa60 [ 279.877832][T12267] __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 279.879511][T12267] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 279.881106][T12267] nbd_start_device+0x15b/0xd70 [ 279.882532][T12267] nbd_ioctl+0x21a/0xfd0 [ 279.883785][T12267] compat_blkdev_ioctl+0x2f7/0x750 [ 279.885264][T12267] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 279.886784][T12267] __do_fast_syscall_32+0x73/0x120 [ 279.888241][T12267] do_fast_syscall_32+0x32/0x80 [ 279.889651][T12267] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 279.891386][T12267] [ 279.891386][T12267] other info that might help us debug this: [ 279.891386][T12267] [ 279.894026][T12267] Chain exists of: [ 279.894026][T12267] &q->sysfs_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#49 [ 279.894026][T12267] [ 279.897825][T12267] Possible unsafe locking scenario: [ 279.897825][T12267] [ 279.899734][T12267] CPU0 CPU1 [ 279.901120][T12267] ---- ---- [ 279.902534][T12267] lock(&q->q_usage_counter(io)#49); [ 279.903916][T12267] lock(mapping.invalidate_lock#2); [ 279.905963][T12267] lock(&q->q_usage_counter(io)#49); [ 279.907982][T12267] lock(&q->sysfs_lock); [ 279.909117][T12267] [ 279.909117][T12267] *** DEADLOCK *** [ 279.909117][T12267] [ 279.911198][T12267] 4 locks held by syz.0.1660/12267: [ 279.912552][T12267] #0: ffff888023d6b998 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x151/0xfd0 [ 279.914875][T12267] #1: ffff888023d6b8d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x20/0x40 [ 279.917341][T12267] #2: ffff888023c01e00 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x1460 [ 279.920385][T12267] #3: ffff888023c01e38 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x1460 [ 279.923504][T12267] [ 279.923504][T12267] stack backtrace: [ 279.925043][T12267] CPU: 3 UID: 0 PID: 12267 Comm: syz.0.1660 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 279.927774][T12267] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 279.930496][T12267] Call Trace: [ 279.931371][T12267] [ 279.932185][T12267] dump_stack_lvl+0x116/0x1f0 [ 279.933402][T12267] print_circular_bug+0x41c/0x610 [ 279.934724][T12267] check_noncircular+0x31a/0x400 [ 279.936022][T12267] ? __pfx_check_noncircular+0x10/0x10 [ 279.937423][T12267] ? save_trace+0x42/0xa10 [ 279.938574][T12267] ? add_lock_to_list+0x17d/0x390 [ 279.939872][T12267] __lock_acquire+0x249e/0x3c40 [ 279.941148][T12267] ? __pfx___lock_acquire+0x10/0x10 [ 279.942516][T12267] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 279.944020][T12267] ? stack_depot_save_flags+0x36d/0x9e0 [ 279.945455][T12267] lock_acquire.part.0+0x11b/0x380 [ 279.946830][T12267] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 279.948326][T12267] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 279.950073][T12267] ? rcu_is_watching+0x12/0xc0 [ 279.951461][T12267] ? trace_lock_acquire+0x14e/0x1f0 [ 279.952831][T12267] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 279.954439][T12267] ? lock_acquire+0x2f/0xb0 [ 279.955644][T12267] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 279.957252][T12267] __mutex_lock+0x19b/0xa60 [ 279.958445][T12267] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 279.960035][T12267] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 279.961630][T12267] ? __pfx___mutex_lock+0x10/0x10 [ 279.962952][T12267] ? __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 279.964541][T12267] __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 279.966098][T12267] ? lock_acquire.part.0+0x11b/0x380 [ 279.967470][T12267] ? __mutex_trylock_common+0xea/0x250 [ 279.968883][T12267] ? __pfx___mutex_trylock_common+0x10/0x10 [ 279.970425][T12267] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 279.971912][T12267] ? rcu_is_watching+0x12/0xc0 [ 279.973167][T12267] ? __pfx___blk_mq_update_nr_hw_queues+0x10/0x10 [ 279.974845][T12267] ? __pfx___mutex_trylock_common+0x10/0x10 [ 279.976431][T12267] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 279.977905][T12267] ? __pfx___mutex_lock+0x10/0x10 [ 279.979362][T12267] ? trace_contention_end+0xee/0x140 [ 279.981068][T12267] ? __mutex_lock+0x1cc/0xa60 [ 279.982701][T12267] ? nbd_ioctl+0x151/0xfd0 [ 279.984231][T12267] ? __pfx___mutex_lock+0x10/0x10 [ 279.985896][T12267] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 279.987215][T12267] nbd_start_device+0x15b/0xd70 [ 279.988908][T12267] ? bpf_lsm_capable+0x9/0x10 [ 279.990185][T12267] nbd_ioctl+0x21a/0xfd0 [ 279.991296][T12267] ? __pfx_nbd_ioctl+0x10/0x10 [ 279.992584][T12267] ? __pfx_lock_release+0x10/0x10 [ 279.993913][T12267] ? trace_lock_acquire+0x14e/0x1f0 [ 279.995241][T12267] ? __pfx_nbd_ioctl+0x10/0x10 [ 279.996513][T12267] compat_blkdev_ioctl+0x2f7/0x750 [ 279.997854][T12267] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 279.999298][T12267] ? __fget_files+0x206/0x3a0 [ 280.000528][T12267] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 280.002047][T12267] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 280.003426][T12267] __do_fast_syscall_32+0x73/0x120 [ 280.004753][T12267] do_fast_syscall_32+0x32/0x80 [ 280.006026][T12267] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 280.007664][T12267] RIP: 0023:0xf7fa8579 [ 280.008723][T12267] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 280.013616][T12267] RSP: 002b:00000000f50f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 280.015804][T12267] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000000ab03 [ 280.017987][T12267] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 280.020045][T12267] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 280.022136][T12267] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 280.024462][T12267] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 280.026784][T12267] [ 280.080644][ T5310] block nbd0: Wrong magic (0x329b06ec) [ 280.080663][ T5951] block nbd0: Wrong magic (0x18092875) [ 280.098296][T12269] block nbd0: shutting down sockets [ 280.143703][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 280.453753][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 280.614824][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 280.618951][ T1450] usb 6-1: USB disconnect, device number 23 [ 281.183721][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 281.493779][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 282.213890][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 282.543696][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 283.263701][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 283.573863][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 284.293877][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 284.613729][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 285.333779][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 285.653779][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 286.373777][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 286.693725][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 287.413716][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 287.733711][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 288.453732][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 288.773768][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 289.503684][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available VM DIAGNOSIS: 17:34:19 Registers: info registers vcpu 0 CPU#0 RAX=0000000000c3af4c RBX=0000000000000000 RCX=ffffffff8b1a3819 RDX=ffffed1005686fee RSI=ffffffff8bb16e40 RDI=ffffffff81702e19 RBP=fffffbfff1b52ef8 RSP=ffffffff8da07e20 R8 =0000000000000000 R9 =ffffed1005686fed R10=ffff88802b437f6b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8da977c0 R14=ffffffff901ce390 R15=0000000000000000 RIP=ffffffff8b1a4bff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020f9b000 CR3=0000000068fa2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffff90b94cea RBX=ffffffff903511ec RCX=dffffc0000000000 RDX=1ffffffff206a23d RSI=0000000000000000 RDI=ffffffff903511dc RBP=ffffffff903511dc RSP=ffffc9000f236f20 R8 =ffffffff90b94d20 R9 =ffffffff90b8df7a R10=ffffc9000f236fd0 R11=000000000000da3c R12=ffffffff903511fc R13=ffffffff81da3c75 R14=ffffffff903511dc R15=ffffffff903511dc RIP=ffffffff8148e4f0 RFL=00000a03 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000209f0000 CR3=000000000db7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000005e65b4 RBX=0000000000000002 RCX=ffffffff8b1a3819 RDX=ffffed10056c6fee RSI=ffffffff8bb16e40 RDI=ffffffff81702e19 RBP=ffffed10039df000 RSP=ffffc9000048fe08 R8 =0000000000000000 R9 =ffffed10056c6fed R10=ffff88802b637f6b R11=0000000000000001 R12=0000000000000002 R13=ffff88801cef8000 R14=ffffffff901ce390 R15=0000000000000000 RIP=ffffffff8b1a4bff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055a99cf383d8 CR3=000000004a6a0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851425f5 RDI=ffffffff9a6672c0 RBP=ffffffff9a667280 RSP=ffffc90020067000 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff85142590 R15=0000000000000000 RIP=ffffffff8514261f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7c76500c39 CR3=000000006b80c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000