last executing test programs: 25.479646045s ago: executing program 2 (id=720): socket(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_io_uring_setup(0x6bfd, 0x0, &(0x7f0000000340), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioprio_set$uid(0x0, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x1d4840, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x345142) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @private2}, 0x1c) socket$netlink(0x10, 0x3, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r3 = syz_io_uring_setup(0x1110, &(0x7f0000000140)={0x0, 0x4, 0x400, 0x2}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x56, 0x0, @fd=r3, 0x1000000000000000, 0x0, 0x3, 0x1}) io_uring_enter(r3, 0x47f6, 0x0, 0x40, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r6, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getpid() socket$kcm(0x2, 0x1, 0x84) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) fsopen(&(0x7f0000000080)='bpf\x00', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) 24.621610538s ago: executing program 2 (id=726): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x810, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mm_vmscan_lru_shrink_inactive\x00', r2, 0x0, 0x8}, 0x18) set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) r3 = socket$igmp(0x2, 0x3, 0x2) readv(r3, &(0x7f0000000200), 0x62) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) 23.631196134s ago: executing program 2 (id=730): socket$packet(0x11, 0x2, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x7000000) 23.58361833s ago: executing program 2 (id=731): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x0, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/175, 0x0, 0xf000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340)) r3 = dup(r0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r3}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, 0x0) setpgid(0x0, r4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES8=r2, @ANYBLOB="0100000000000000000001000000000400000241000000030013"], 0x2c}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e"], 0xec) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x2a19f1b19fdd939c) 23.450229111s ago: executing program 2 (id=733): socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r0 = fanotify_init(0x200, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_create1(0x80000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, 0xffffffffffffffff, 0x3, 0x5003) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r5, 0x400442c9, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x1}, 0x1c) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="c62d0699e5f80fa4343acda9f5d1d2703392da48141d966f85f21f84854a8aa43d3db5b9ef3f0d0cc96bb5cdae5765ed040ef72c7fd8ec92068dd1b0415c2df9986d963303526c78422e3a35be6de928598c0a90a0b4dcc3ba8b5a909c0e2a09f107405e0b4715cb94eda713c728c06fbade557b2df2afa401aa500de091b669b43ff317f475411986234377327bd6a127cb98c7f0c052e794b658de27b07e5940c289aca33c13b69e162177e6ec1a4c72bbdca4c9295b837feeb24443c0d552ad9e6efe36e037dcf26aea71d6d6514f1da8", 0xd2}, {&(0x7f0000000380)="cd332bebdfb4d4406339387de55c5895be4569e5c742c7b7d3e4b02787e1272913369389fde40827632e218a8454a0aff84455cc004efadf6fe551bdbaa89eea7812974587339446", 0x48}, {&(0x7f0000000500)="a8faba8e9c07e410b9ec23be42fa3aff372dc19c79032e60bc74e57ac1533b02242c5f5afc69dd100654597228a5305e8179becf6d5bbbad6c4b8915aa8869946646d51b3af5745e7c9d3700e850bdf919a84942c55f42bd65dba953333e4107dedbd569b08aad241c788245936e1f24933a84a82ab957da7cdf440563abf14c1cedf33cf648103545697944246f9f", 0x8f}, {&(0x7f0000000780)="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", 0x173}, {&(0x7f0000000600)="8dcb4c987f90b12d6b1607b5b986ad4f857660829f819a73bfa7feee430704741e8a47c849dfa2e1f8f3604326fb30aed8ae935d50d516d9ea4559c3e329a349fe00deac249809cfc06e3a68ebbbd4cf5447c2c7f251e40d74f06116868f7a64d69e887ad0bf24cf015b351ec76d0d18cf7d27f7d7572471cde76a98", 0x7c}, {&(0x7f0000000940)="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", 0x154}], 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) 23.057183259s ago: executing program 2 (id=734): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$xdp(0x2c, 0x3, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, 0xffffffffffffffff, 0x81, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r3, &(0x7f0000004180)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_OPEN(r3, &(0x7f00000002c0)={0x20, 0x0, r4}, 0x20) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000c3d3ec04f03ae25d4475f91c47000000cd0a00000000b8650800000000000000"]) io_uring_enter(r0, 0x52c4, 0x81, 0x34, &(0x7f0000000040)={[0x1417, 0x9]}, 0x8) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x58}, 0x1, 0xffffffff00000003}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 22.833644766s ago: executing program 32 (id=734): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$xdp(0x2c, 0x3, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, 0xffffffffffffffff, 0x81, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r3, &(0x7f0000004180)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_OPEN(r3, &(0x7f00000002c0)={0x20, 0x0, r4}, 0x20) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000c3d3ec04f03ae25d4475f91c47000000cd0a00000000b8650800000000000000"]) io_uring_enter(r0, 0x52c4, 0x81, 0x34, &(0x7f0000000040)={[0x1417, 0x9]}, 0x8) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x58}, 0x1, 0xffffffff00000003}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7.626245954s ago: executing program 1 (id=792): socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r0 = fanotify_init(0x200, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_create1(0x80000) r1 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, 0xffffffffffffffff, 0x3, 0x5003) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x1}, 0x1c) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="c62d0699e5f80fa4343acda9f5d1d2703392da48141d966f85f21f84854a8aa43d3db5b9ef3f0d0cc96bb5cdae5765ed040ef72c7fd8ec92068dd1b0415c2df9986d963303526c78422e3a35be6de928598c0a90a0b4dcc3ba8b5a909c0e2a09f107405e0b4715cb94eda713c728c06fbade557b2df2afa401aa500de091b669b43ff317f475411986234377327bd6a127cb98c7f0c052e7", 0x98}, {&(0x7f0000000500)="a8faba8e9c07e410b9ec23be42fa3aff372dc19c79032e60bc74e57ac1533b02242c5f5afc69dd100654597228a5305e8179becf6d5bbbad6c4b8915aa8869946646d51b3af5745e7c9d3700e850bdf919a84942c55f42bd65dba95333", 0x5d}, {&(0x7f0000000780)="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", 0x173}, {&(0x7f0000000600)="8dcb4c987f90b12d6b1607b5b986ad4f857660829f819a73bfa7feee430704741e8a47c849dfa2e1f8f3604326fb30aed8ae935d50d516d9ea4559c3e329a349fe00deac249809cfc06e3a68ebbbd4cf5447c2c7f251e40d74f06116868f7a64d69e887ad0bf24cf015b351e", 0x6c}, {&(0x7f0000000940)}], 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) 6.668591002s ago: executing program 1 (id=788): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000000800000000000000000073797a3100005bfc3c3cd21279edc7e6434996422e00020800630080000001fbf2b3aff67b9f9d24cf1838636b0697873771b91b36d51c881304375828a4033d243b8a261f01aacfe8e3bf019275a9cdc6a782b50566b50000cbc0cba0d27409cd18a03cab074cc4d03057baa54b495ebabe4db9c2e9a4beee354d4bd5c50b0d5826814581ca7cde46df11"], 0x28}, 0x1, 0x0, 0x0, 0x88c0}, 0x80) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) syz_emit_ethernet(0x2e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb81000000080045fc001c000000000033907800000000000000000000008f313a6678"], 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000780), 0x2, 0x10020, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000400)=[@in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e23, 0xce12, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r4, 0x5}, &(0x7f00000002c0)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001d00)=[{&(0x7f00000000c0)=@in={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000d00)='P', 0x1}], 0x1, &(0x7f0000000180)=[@dstaddrv4={0x10, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x12}}, @init={0x14, 0x84, 0x0, {0x31, 0x9, 0x4, 0xa0}}], 0x24, 0x24004884}], 0x1, 0x4040044) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r6 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x9013, 0x100, 0x4, 0x165}, &(0x7f0000000000), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000140)={&(0x7f0000001000)={[{0x0, 0x5, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) ioctl$sock_TIOCINQ(r7, 0x541b, &(0x7f0000000c40)) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x80, 0xb2}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40800) 6.409054409s ago: executing program 1 (id=789): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000400)=0x13) write$FUSE_INIT(r0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002240)={0x2020, 0x0, 0x0}, 0x2020) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_STATX(r0, &(0x7f00000003c0)={0x130, 0x0, r2, {0x8, 0x9, 0x0, '\x00', {0x4000, 0xadc, 0x9, 0x9, r3, 0x0, 0x4000, '\x00', 0x6, 0xee, 0xffffffffffff8001, 0x0, {0xfffffffffffffff8, 0x38644d84}, {0xd, 0x1ff}, {0x6, 0x67}, {0x3, 0x6}, 0x8, 0x3, 0x0, 0x4d43}}}, 0x130) socket$inet(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x65364000) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_io_uring_setup(0xbdc, &(0x7f00000021c0)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000002180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5.280169499s ago: executing program 1 (id=796): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$smc(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001700000085000000860000008500000023000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r4}, 0x10) setrlimit(0x6, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket(0x1d, 0x2, 0x6) r6 = fsopen(&(0x7f00000000c0)='ocfs2_dlmfs\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000180)='rw\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xe, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) 4.330595608s ago: executing program 1 (id=800): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r2 = gettid() r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x5, &(0x7f0000000140)={0x2, 0xffffffff, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(r1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @vbi={0xfffffff2, 0x3, 0x5b3e, 0x32315659, [0x2, 0x9], [0x2, 0x6], 0xbf2509255031d7fa}}) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) fsmount(0xffffffffffffffff, 0x1, 0x8c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00'}, 0x18) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)={r4}) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000080)=0x4f, 0x4) r6 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioperm(0x2, 0x7, 0x13) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r7 = shmget$private(0x0, 0x800000, 0x1, &(0x7f0000173000/0x800000)=nil) shmat(r7, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x84) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="dd86b07075a0003100001e0379f041373db52b2b62a2393c196e000857c8073ec1c47a21481783972fa5"], 0x1f) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) 3.740651616s ago: executing program 3 (id=801): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000200)=ANY=[@ANYBLOB="0100"]) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001ec0), r6) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002040)={0x58, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6c9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4938}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) prctl$PR_GET_IO_FLUSHER(0x3a) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r9], &(0x7f0000000200), &(0x7f0000000580), 0x0}) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002180)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f00000008c0)={{}, 0x0, 0x2, @inherit={0x68, 0x0}, @devid=r11}) ioctl$BTRFS_IOC_SCRUB(r10, 0xc400941b, &(0x7f0000019080)={r11, 0x80, 0x3ff, 0x1}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca249435, &(0x7f0000000940)={0x1, 0x0, @start={r11, 0x1, "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", "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"}, [0xd4, 0x3, 0x5, 0x7, 0x400, 0x7, 0x0, 0x4, 0x6a8, 0xffffffffffffffff, 0x7fffffff, 0x6, 0x9, 0x1, 0xda20, 0x3, 0x0, 0x2, 0x2, 0xd06, 0x7f, 0x5, 0x3, 0xd, 0xb, 0x80, 0x0, 0x6f, 0x1ff, 0x1, 0xfff, 0x1, 0x7fffffffffffffff, 0x2, 0x0, 0x8, 0x80000, 0x3, 0x7f, 0x5, 0x8, 0x4, 0x2, 0xfffffffffffff001, 0x1, 0x5, 0xfffffffffffffff8, 0x2, 0x8000000000000000, 0xe6b1, 0x7, 0x5, 0x0, 0x1, 0x9, 0x1, 0x3, 0xb66, 0x7d, 0x6, 0x2, 0x101, 0x3, 0x8]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000000101040000000000000000020000001800018014000180080001000000000008000200ac141400240002800c0002800500010000000000140001"], 0x50}}, 0x0) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$netlink(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000018c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x21, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x8c}}, 0x40880) 3.630841005s ago: executing program 3 (id=804): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1c8, 0x12) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x10, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x7}, 0x94) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r7, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {0x2, 0x1}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x70) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 3.277707416s ago: executing program 0 (id=806): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x2, @loopback, 0x1}, r1}}, 0x30) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x1db2}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) (fail_nth: 6) 3.170828522s ago: executing program 0 (id=807): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000080), &(0x7f0000000240)}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f0000000580)) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000640)={0x0, 0xc2, "20391554aa84a9ad80dbdb850f17905ffda92798525fc10600cbd27a7f199ef7733782aaa9d6d39b988772e90a570075ee63de424c084399700eed9e327638aa6cf4d64568a54cc82f2e244b5d66d73d3dd301f18e54968d57ab325c8d4444febc1a3d3591c607584f62a0644f41b5b27b9c1420f5932be59375408ee1cf31c830b3df5c818d99739283cad68481560500000064b146bb1e0f7eb529a7e66d2bf1772e88734859240e870eea35bbac5e55cf138ef68e948100"/194}, &(0x7f0000000040)=0xca) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r4 = dup(r3) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000000506010400000000000000000500000205000100070000000900000000000900030073797a310000000009000300735c15e56ac1777049a2f8e04478f0733d5928c7a6522413bfcb01e6133ab9c200e6c235df44597fd88908afa0eee4b29c7f4bc70ac8f6b7a3d056ac4b6f37"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r7}, 0x18) sendmsg$can_j1939(r8, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, 0x0}, 0xee) setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x2, {0x2, 0xf, 0x6}, {0x1, 0xf0, 0x1}, 0xfd, 0xfe}, {0x0, 0x2, {0x0, 0xf0}, {0x0, 0x1, 0x2}, 0x0, 0xfe}, {0x1, 0x3, {0x2, 0x0, 0x7}, {0x2, 0x1, 0x3}, 0x0, 0xfd}], 0x60) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r7, {0x10, 0x1}, {0xb, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) socket$inet_udp(0x2, 0x2, 0x0) 2.160753612s ago: executing program 3 (id=809): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000080), &(0x7f0000000240)}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f0000000580)) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000640)={0x0, 0xc2, "20391554aa84a9ad80dbdb850f17905ffda92798525fc10600cbd27a7f199ef7733782aaa9d6d39b988772e90a570075ee63de424c084399700eed9e327638aa6cf4d64568a54cc82f2e244b5d66d73d3dd301f18e54968d57ab325c8d4444febc1a3d3591c607584f62a0644f41b5b27b9c1420f5932be59375408ee1cf31c830b3df5c818d99739283cad68481560500000064b146bb1e0f7eb529a7e66d2bf1772e88734859240e870eea35bbac5e55cf138ef68e948100"/194}, &(0x7f0000000040)=0xca) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r4 = dup(r3) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000000506010400000000000000000500000205000100070000000900000000000900030073797a310000000009000300735c15e56ac1777049a2f8e04478f0733d5928c7a6522413bfcb01e6133ab9c200e6c235df44597fd88908afa0eee4b29c7f4bc70ac8f6b7a3d056ac4b6f37"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r7}, 0x18) sendmsg$can_j1939(r8, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, 0x0}, 0xee) setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x2, {0x2, 0xf, 0x6}, {0x1, 0xf0, 0x1}, 0xfd, 0xfe}, {0x0, 0x2, {0x0, 0xf0}, {0x0, 0x1, 0x2}, 0x0, 0xfe}, {0x1, 0x3, {0x2, 0x0, 0x7}, {0x2, 0x1, 0x3}, 0x0, 0xfd}], 0x60) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r7, {0x10, 0x1}, {0xb, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) socket$inet_udp(0x2, 0x2, 0x0) 2.020101743s ago: executing program 0 (id=811): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="b9ff030768442650e04e7a8c09a5", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x100004a, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@uname={'uname', 0x3d, '#A*#&'}}], [], 0x6b}}) 2.019749126s ago: executing program 4 (id=812): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26beeef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f00000001c0)="051a000200", 0x5}], 0x2) 1.717936577s ago: executing program 0 (id=813): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x0, 0x0) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff"], 0x48) syz_emit_ethernet(0x3b6, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, [{0x0, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000025000000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "17dcea46805d4809c20547406b18901b20eff04c0300f3c75dc2d227a83b89483b1084743474671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x0, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f021659ff5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x0, 0x5, "090000000900000036da018dff16e70b8b1400000000e18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000009500"/24], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000001c0)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x3, 0x1, 0x0, 0x0, 0x205a, 0x1ff, 0x0, 0x96c, 0x6, 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0xffffff1f, 0x1}}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) r7 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000040)="308186", 0x3, r7) 1.595750159s ago: executing program 4 (id=814): socket(0x1f, 0x3, 0xff) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x30, 0xffffffffffffffff, 0xfffff000) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x280}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f000090c000/0x2000)=nil, 0x2000}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x163042, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000002300)={0x50, 0x0, r4, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r3, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r6, r3, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc0142, 0x1ff) sendfile(r7, r7, 0x0, 0xfffe80) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000340)={0x6c2, 0x6, 0x0, 0x800002}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c93010000c0005001a0508"], 0x15) socket$inet_udplite(0x2, 0x2, 0x88) openat$cdrom(0xffffff9c, &(0x7f00000001c0), 0x2040, 0x0) 1.418763466s ago: executing program 4 (id=815): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x62, 0x0, 0x2f, 0x1, 0x0, 0x9, 0x66}, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x2, 0x1, 0x2, 0xa, 0xc53e, 0x8}, 0x20) 1.41760236s ago: executing program 4 (id=816): setresgid(0x0, 0x0, 0xee00) r0 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, &(0x7f0000000100), 0x1, &(0x7f0000000140)) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0', [{0x20, 'wchan\x00'}, {0x20, 'wchan\x00'}, {0x20, 'task\x00'}, {0x20, 'task\x00'}, {0x20, '&-&'}, {0x20, 'wchan\x00'}, {0x20, 'task\x00'}], 0xa, "2a15107423205c21a8a4e8a0ddb03e1b18c2c2b2262c669d63ffb2acf8f02577faadef3af72b926da7499fb909ebc43bea4b3b05f15c7676354b8b0f4a2a67519231"}, 0x78) r2 = syz_open_procfs(r0, &(0x7f00000000c0)='wchan\x00') pread64(r2, &(0x7f0000000040)=""/31, 0x1f, 0x9) 1.270544746s ago: executing program 4 (id=817): socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r0 = fanotify_init(0x200, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_create1(0x80000) r1 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, 0xffffffffffffffff, 0x3, 0x5003) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x1}, 0x1c) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="c62d0699e5f80fa4343acda9f5d1d2703392da48141d966f85f21f84854a8aa43d3db5b9ef3f0d0cc96bb5cdae5765ed040ef72c7fd8ec92068dd1b0415c2df9986d963303526c78422e3a35be6de928598c0a90a0b4dcc3ba8b5a909c0e2a09f107405e0b4715cb94eda713c728c06fbade557b2df2afa401aa500de091b669b43ff317f475411986234377327bd6a127cb98c7f0c052e7", 0x98}, {&(0x7f0000000500)="a8faba8e9c07e410b9ec23be42fa3aff372dc19c79032e60bc74e57ac1533b02242c5f5afc69dd100654597228a5305e8179becf6d5bbbad6c4b8915aa8869946646d51b3af5745e7c9d3700e850bdf919a84942c55f42bd65dba95333", 0x5d}, {&(0x7f0000000780)="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", 0x173}, {&(0x7f0000000600)="8dcb4c987f90b12d6b1607b5b986ad4f857660829f819a73bfa7feee430704741e8a47c849dfa2e1f8f3604326fb30aed8ae935d50d516d9ea4559c3e329a349fe00deac249809cfc06e3a68ebbbd4cf5447c2c7f251e40d74f06116868f7a64d69e887ad0bf24cf015b351e", 0x6c}, {&(0x7f0000000940)}], 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r5, 0xffffffffffffffff, 0x0) 1.053378209s ago: executing program 3 (id=818): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) 959.935001ms ago: executing program 3 (id=819): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000080), &(0x7f0000000240)}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f0000000580)) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000640)={0x0, 0xc2, "20391554aa84a9ad80dbdb850f17905ffda92798525fc10600cbd27a7f199ef7733782aaa9d6d39b988772e90a570075ee63de424c084399700eed9e327638aa6cf4d64568a54cc82f2e244b5d66d73d3dd301f18e54968d57ab325c8d4444febc1a3d3591c607584f62a0644f41b5b27b9c1420f5932be59375408ee1cf31c830b3df5c818d99739283cad68481560500000064b146bb1e0f7eb529a7e66d2bf1772e88734859240e870eea35bbac5e55cf138ef68e948100"/194}, &(0x7f0000000040)=0xca) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r4 = dup(r3) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000000506010400000000000000000500000205000100070000000900000000000900030073797a310000000009000300735c15e56ac1777049a2f8e04478f0733d5928c7a6522413bfcb01e6133ab9c200e6c235df44597fd88908afa0eee4b29c7f4bc70ac8f6b7a3d056ac4b6f37"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r7}, 0x18) sendmsg$can_j1939(r8, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, 0x0}, 0xee) setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x2, {0x2, 0xf, 0x6}, {0x1, 0xf0, 0x1}, 0xfd, 0xfe}, {0x0, 0x2, {0x0, 0xf0}, {0x0, 0x1, 0x2}, 0x0, 0xfe}, {0x1, 0x3, {0x2, 0x0, 0x7}, {0x2, 0x1, 0x3}, 0x0, 0xfd}], 0x60) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r7, {0x10, 0x1}, {0xb, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) socket$inet_udp(0x2, 0x2, 0x0) 449.91546ms ago: executing program 1 (id=820): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="090000000000400003000000000000000000", @ANYRES64=0x0, @ANYRESOCT, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="0201d7abf9a335c60000000000009509000020800000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x10, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0), 0x0) socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f00000002c0)={0x400002}) chroot(&(0x7f0000000180)='./file0\x00') umount2(&(0x7f00000003c0)='./file0\x00', 0xf) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x80880, 0x120) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0x9362, 0x0) 211.117986ms ago: executing program 4 (id=821): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r1, &(0x7f000000bb40)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x203, {0x7, 0x29, 0x20001, 0x0, 0xdcf, 0x7, 0xb, 0x800, 0x0, 0x0, 0x10, 0x9b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000042c0)="0d9ec529eb18ec94a35378619cb10ff8c913f67139447b7ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c67c0432c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a59c4699c94d7379e1e190c6dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc5019a9f4d20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b891a7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a10911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593d26430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114c1948d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31662db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccca2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138228c7e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632cab5acb5e08d6f973003c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282cc7e96cf5582c4eaf874a2fe6369534176429b7505eb0aade883260806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43cb65febea224c2b554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243fc3787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60492813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07085bb1cd74f5d63763f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d117d03a8fabc85f5ecdd0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4d9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f634eba98f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac3a2da1bf52da017c3312095403d50dcde39671242b610f11832773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737aee63ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce6ca71de75c9174e8744ba1098513bb6c7fdc6a3c7c8e5870223d6cc0b18b5d6edea926d5376aeb85488d3712e8f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b31492b19410d6f681d614eaa20029592c00c948a98973a9fba87f1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb41c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac866268d914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f755a219993e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a89a2d5a4e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909193ce64b20470e3480c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e9531e7295f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9efdd5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a6cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34e84b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5da12a0fe58f95d6b911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b524008794ffa0c179753ab48d0f73e5ff13624b3b90287edaf6a5367dcfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde07e6334c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfdddd9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6ea0ee6b7e840344fbcd377b995bfb1faf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f580f262c64c57fce8ef933f18904f001809cfdf94eb679c9eced5d125b4f1d0064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912fe9cd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de1eff7d41477bb25052f32cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b21629e1989e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a05762943073d5992aac4d9b0d411ba25905c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a45626cd18c79d46f5c77c2d359e19ea870cd230709b5e33cd52fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4edab4007c988998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd597de0ce9d2cf03333a0c7121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb9c0d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f1b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab533998a1fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc74249424310dff81116b8f2076b8ebece84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a7e8ed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815f728bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4f86c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8c5fc684d12efae1859c53e2cc3e2f508a9cd0410ec036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4490093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc66a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c375696ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe51ce7f250adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a44fafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe285ad7c7a41133ed85c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c6013042b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe961b99b2d025538c3888bfff8957e3592ee5b26a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6594fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c0231600f9b4b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98bcd35ad3f1fb1d5a7d00541a8a202c8590e35360bb9d25d6431476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8f2f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d045370ce3b77365c5320892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x7, {0xb, 0x0, 0x0, {0x9, 0x1, 0x7, 0x90000005, 0x40000000000003, 0x2, 0x9ec, 0x35741061, 0x10000, 0xa593e9c1ca988eda, 0xfffffff9, 0x0, 0x0, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000980)='./file0\x00', 0x0, 0x20025, 0x0) (fail_nth: 4) syz_fuse_handle_req(r1, &(0x7f0000007b40)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x2, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x14, 0x0, 0x0, {'+!\x1a-'}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 209.470644ms ago: executing program 0 (id=822): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0xf4ff, &(0x7f0000009b00)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 703.512µs ago: executing program 0 (id=823): r0 = gettid() r1 = openat$fb1(0xffffff9c, &(0x7f0000000280), 0x88200, 0x0) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000580)={0x0, 0x1, &(0x7f00000002c0)=[0x0], &(0x7f00000004c0), &(0x7f0000000380), 0x0}) (async) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000580)={0x0, 0x1, &(0x7f00000002c0)=[0x0], &(0x7f00000004c0), &(0x7f0000000380), 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x7f000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0xc0843, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) (async) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000340), 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x5, 0x0, 0x11ffffffffff, 0x2, 0xdbbe, 0x7, 0x1800000000000000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x53bf, 0xd, 0x200000004, 0x4000000000000086, 0x804, 0x3, 0x1}, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010b2abd5000ffdbdf250e00000008000600cac3391bbb14ec62c882b13356c9dfe2d11dd70d58f8dc3ed1e71b558da1b6409c800259bea1bafe0089ac6362b1ab41de7e8e1df3f9e7e20afb1e", @ANYRES32=0x0, @ANYBLOB="08003c00ee10000008003c0028ffffff08002c0000000000"], 0x34}}, 0x0) mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) (async) r6 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) syz_io_uring_setup(0x3c81, &(0x7f0000000700)={0x0, 0x21fe, 0x800, 0x3, 0x2e5}, &(0x7f0000000280), &(0x7f00000001c0)) (async) r7 = syz_io_uring_setup(0x3c81, &(0x7f0000000700)={0x0, 0x21fe, 0x800, 0x3, 0x2e5}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0x6, &(0x7f0000000380), 0x0, 0x4}) (async) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0x6, &(0x7f0000000380), 0x0, 0x4}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 3 (id=824): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000140)=0x5) (fail_nth: 6) kernel console output (not intermixed with test programs): 777][ T92] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.193439][ T92] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.205649][ T92] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.226580][ T6847] vxcan1 speed is unknown, defaulting to 1000 [ 98.387403][ T2295] usb 5-1: USB disconnect, device number 3 [ 98.490777][ T6875] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 98.492910][ T6875] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 98.507736][ T6875] vhci_hcd vhci_hcd.0: Device attached [ 98.779187][ T6881] ªªªªª»: renamed from hsr0 (while UP) [ 98.786926][ T5985] usb 44-1: SetAddress Request (2) to port 0 [ 98.789654][ T5985] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 99.088044][ T6886] FAULT_INJECTION: forcing a failure. [ 99.088044][ T6886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.106735][ T6886] CPU: 0 UID: 0 PID: 6886 Comm: syz.0.210 Not tainted syzkaller #0 PREEMPT(full) [ 99.106767][ T6886] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 99.106779][ T6886] Call Trace: [ 99.106789][ T6886] [ 99.106798][ T6886] dump_stack_lvl+0x16c/0x1f0 [ 99.106833][ T6886] should_fail_ex+0x512/0x640 [ 99.106860][ T6886] __fpu_restore_sig+0x90c/0x13a0 [ 99.106891][ T6886] ? __pfx___fpu_restore_sig+0x10/0x10 [ 99.106915][ T6886] ? do_raw_spin_lock+0x12c/0x2b0 [ 99.106950][ T6886] ? __might_fault+0xe3/0x190 [ 99.106970][ T6886] ? __might_fault+0x13b/0x190 [ 99.106991][ T6886] fpu__restore_sig+0x151/0x190 [ 99.107017][ T6886] ia32_restore_sigcontext+0x44a/0x630 [ 99.107045][ T6886] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 99.107076][ T6886] ? rcu_is_watching+0x12/0xc0 [ 99.107094][ T6886] ? _raw_spin_unlock_irq+0x23/0x50 [ 99.107118][ T6886] ? lockdep_hardirqs_on+0x7c/0x110 [ 99.107145][ T6886] __do_compat_sys_rt_sigreturn+0x120/0x1f0 [ 99.107246][ T6886] ? __pfx___do_compat_sys_rt_sigreturn+0x10/0x10 [ 99.107285][ T6886] ? rcu_is_watching+0x12/0xc0 [ 99.107311][ T6886] do_int80_emulation+0x104/0x460 [ 99.107341][ T6886] asm_int80_emulation+0x1a/0x20 [ 99.107357][ T6886] RIP: 0023:0xf7ff6577 [ 99.107370][ T6886] Code: 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 [ 99.107386][ T6886] RSP: 002b:00000000f550655c EFLAGS: 00000296 [ 99.107402][ T6886] RAX: 00000000000001c1 RBX: 0000000080001080 RCX: 0000000000000001 [ 99.107412][ T6886] RDX: 0000000000000000 RSI: 0000000080001100 RDI: 0000000000000001 [ 99.107422][ T6886] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 99.107431][ T6886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.107442][ T6886] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 99.107464][ T6886] [ 99.216462][ T34] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 99.368602][ T34] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 99.371641][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 99.382616][ T34] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 99.403426][ T34] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 99.422053][ T34] usb 6-1: Product: syz [ 99.432138][ T34] usb 6-1: Manufacturer: syz [ 99.445711][ T34] usb 6-1: SerialNumber: syz [ 99.518495][ T34] usb 6-1: config 0 descriptor?? [ 99.581585][ T34] usb 6-1: selecting invalid altsetting 0 [ 99.763602][ T6876] vhci_hcd: connection reset by peer [ 99.767986][ T34] usb 6-1: USB disconnect, device number 4 [ 99.769450][ T92] vhci_hcd: stop threads [ 99.781435][ T92] vhci_hcd: release socket [ 99.786102][ T92] vhci_hcd: disconnect device [ 100.010822][ T6078] udevd[6078]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 101.173006][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.214'. [ 102.310878][ T6917] usb usb1: usbfs: process 6917 (syz.0.217) did not claim interface 42 before use [ 103.132840][ T6930] sctp: [Deprecated]: syz.0.222 (pid 6930) Use of struct sctp_assoc_value in delayed_ack socket option. [ 103.132840][ T6930] Use struct sctp_sack_info instead [ 103.448508][ T6944] FAULT_INJECTION: forcing a failure. [ 103.448508][ T6944] name failslab, interval 1, probability 0, space 0, times 0 [ 103.454217][ T6944] CPU: 3 UID: 0 PID: 6944 Comm: syz.0.224 Not tainted syzkaller #0 PREEMPT(full) [ 103.454242][ T6944] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 103.454253][ T6944] Call Trace: [ 103.454260][ T6944] [ 103.454268][ T6944] dump_stack_lvl+0x16c/0x1f0 [ 103.454298][ T6944] should_fail_ex+0x512/0x640 [ 103.454323][ T6944] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 103.454345][ T6944] should_failslab+0xc2/0x120 [ 103.454368][ T6944] __kmalloc_cache_noprof+0x6a/0x3e0 [ 103.454386][ T6944] ? snd_seq_timer_new+0x44/0x1b0 [ 103.454409][ T6944] ? lockdep_init_map_type+0x5c/0x280 [ 103.454436][ T6944] snd_seq_timer_new+0x44/0x1b0 [ 103.454460][ T6944] snd_seq_queue_alloc+0x177/0x5a0 [ 103.454489][ T6944] snd_seq_ioctl_create_queue+0xa9/0x380 [ 103.454517][ T6944] snd_seq_kernel_client_ctl+0x107/0x1c0 [ 103.454546][ T6944] alloc_seq_queue+0xda/0x180 [ 103.454572][ T6944] ? __pfx_alloc_seq_queue+0x10/0x10 [ 103.454614][ T6944] ? mark_held_locks+0x49/0x80 [ 103.454635][ T6944] ? _raw_spin_unlock_irq+0x23/0x50 [ 103.454659][ T6944] snd_seq_oss_open+0x38c/0xa20 [ 103.454680][ T6944] odev_open+0x6f/0x90 [ 103.454702][ T6944] ? __pfx_odev_open+0x10/0x10 [ 103.454726][ T6944] soundcore_open+0x409/0x580 [ 103.454753][ T6944] ? __pfx_soundcore_open+0x10/0x10 [ 103.454777][ T6944] chrdev_open+0x234/0x6a0 [ 103.454800][ T6944] ? __pfx_apparmor_file_open+0x10/0x10 [ 103.454820][ T6944] ? __pfx_chrdev_open+0x10/0x10 [ 103.454844][ T6944] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 103.454870][ T6944] do_dentry_open+0x982/0x1530 [ 103.454892][ T6944] ? __pfx_chrdev_open+0x10/0x10 [ 103.454920][ T6944] vfs_open+0x82/0x3f0 [ 103.454943][ T6944] ? inode_owner_or_capable+0x124/0x240 [ 103.454969][ T6944] path_openat+0x1de4/0x2cb0 [ 103.455000][ T6944] ? __pfx_path_openat+0x10/0x10 [ 103.455021][ T6944] ? __lock_acquire+0xb97/0x1ce0 [ 103.455060][ T6944] do_filp_open+0x20b/0x470 [ 103.455084][ T6944] ? __pfx_do_filp_open+0x10/0x10 [ 103.455123][ T6944] ? _raw_spin_unlock+0x28/0x50 [ 103.455142][ T6944] ? alloc_fd+0x471/0x7d0 [ 103.455168][ T6944] do_sys_openat2+0x11b/0x1d0 [ 103.455193][ T6944] ? __pfx_do_sys_openat2+0x10/0x10 [ 103.455222][ T6944] ? __fget_files+0x20e/0x3c0 [ 103.455237][ T6944] ? handle_mm_fault+0x200/0xd10 [ 103.455261][ T6944] __ia32_compat_sys_openat+0x16d/0x210 [ 103.455278][ T6944] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 103.455294][ T6944] ? ksys_write+0x1ac/0x250 [ 103.455318][ T6944] ? rcu_is_watching+0x12/0xc0 [ 103.455341][ T6944] __do_fast_syscall_32+0x7c/0x3a0 [ 103.455368][ T6944] do_fast_syscall_32+0x32/0x80 [ 103.455392][ T6944] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.455413][ T6944] RIP: 0023:0xf7ff6579 [ 103.455427][ T6944] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 103.455443][ T6944] RSP: 002b:00000000f550655c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 103.455460][ T6944] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000300 [ 103.455471][ T6944] RDX: 00000000001e1000 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.455487][ T6944] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.455497][ T6944] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 103.455507][ T6944] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.455530][ T6944] [ 103.709838][ T6948] vxcan1 speed is unknown, defaulting to 1000 [ 103.936522][ T5985] usb 44-1: device descriptor read/8, error -110 [ 104.555085][ T5985] usb usb44-port1: attempt power cycle [ 105.117624][ T6973] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.121735][ T6973] hfs: can't find a HFS filesystem on dev loop0 [ 105.156935][ T6969] sctp: [Deprecated]: syz.2.231 (pid 6969) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.156935][ T6969] Use struct sctp_sack_info instead [ 105.237549][ T5985] usb usb44-port1: unable to enumerate USB device [ 105.266447][ T56] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 105.416397][ T56] usb 6-1: Using ep0 maxpacket: 16 [ 105.421461][ T56] usb 6-1: too many configurations: 123, using maximum allowed: 8 [ 105.427059][ T56] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.435881][ T56] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.443590][ T56] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.449345][ T56] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.454939][ T56] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.462803][ T56] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.468228][ T56] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.474599][ T56] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.484461][ T56] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 105.489819][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 105.493290][ T56] usb 6-1: SerialNumber: syz [ 105.500067][ T56] usb 6-1: config 0 descriptor?? [ 105.532754][ T56] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input5 [ 105.724142][ T6967] input: syz1 as /devices/virtual/input/input6 [ 105.766139][ T6988] netlink: 136784 bytes leftover after parsing attributes in process `syz.2.237'. [ 105.769476][ T6988] netlink: zone id is out of range [ 105.771393][ T6988] netlink: zone id is out of range [ 105.773321][ T6988] netlink: zone id is out of range [ 105.775324][ T6988] netlink: zone id is out of range [ 105.777953][ T6988] netlink: zone id is out of range [ 105.780207][ T6988] netlink: zone id is out of range [ 105.782094][ T6988] netlink: zone id is out of range [ 105.783765][ T6988] netlink: zone id is out of range [ 105.785465][ T6988] netlink: zone id is out of range [ 105.787530][ T6988] netlink: zone id is out of range [ 105.952331][ T6991] QAT: Device 253 not found [ 106.817547][ T5985] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 107.001062][ T5985] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.004553][ T5985] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 107.010864][ T5985] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1792, setting to 64 [ 107.014758][ T5985] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 107.022498][ T5985] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 107.026150][ T5985] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 107.089324][ T7015] : entered promiscuous mode [ 107.098727][ T7015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.244'. [ 107.106513][ T5985] usb 5-1: Manufacturer: syz [ 107.119631][ T5985] usb 5-1: config 0 descriptor?? [ 107.386387][ T5985] rc_core: IR keymap rc-hauppauge not found [ 107.388396][ T5985] Registered IR keymap rc-empty [ 107.392132][ T5985] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 107.407275][ T5985] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 107.427650][ T5985] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 107.434100][ T5985] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 107.443198][ T5985] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 107.456652][ T5985] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 107.476483][ T5985] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 107.496642][ T5985] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 107.528352][ T5985] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 107.546733][ T5985] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 107.566665][ T5985] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 107.586672][ T5985] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 107.606652][ T5985] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 107.626696][ T5985] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 107.648343][ T5985] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 107.652295][ T5985] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 107.722866][ T5985] usb 5-1: USB disconnect, device number 4 [ 107.798189][ T7026] netlink: 32 bytes leftover after parsing attributes in process `syz.3.251'. [ 107.874293][ T5369] bcm5974 6-1:0.0: could not read from device [ 107.878624][ T839] usb 6-1: USB disconnect, device number 5 [ 110.098453][ T7051] kexec: Could not allocate control_code_buffer [ 110.158283][ T7051] Process accounting resumed [ 111.116873][ T7098] netlink: 24 bytes leftover after parsing attributes in process `syz.0.275'. [ 111.235924][ T7100] binder: 7099:7100 ioctl c008ae09 80000440 returned -22 [ 111.248229][ T7100] binder: 7099:7100 ioctl 8982 80000040 returned -22 [ 111.306495][ T839] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 111.396397][ T5985] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 111.503716][ T839] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 111.506957][ T839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.509983][ T839] usb 6-1: Product: syz [ 111.511421][ T839] usb 6-1: Manufacturer: syz [ 111.513039][ T839] usb 6-1: SerialNumber: syz [ 111.534949][ T839] usb 6-1: config 0 descriptor?? [ 111.577145][ T5985] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 111.586775][ T5985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.589513][ T5985] usb 5-1: Product: syz [ 111.590852][ T5985] usb 5-1: Manufacturer: syz [ 111.596505][ T5985] usb 5-1: SerialNumber: syz [ 111.751710][ T839] usb 6-1: USB disconnect, device number 6 [ 111.982356][ T7096] dummy0: entered allmulticast mode [ 111.985717][ T7095] dummy0: left allmulticast mode [ 112.073950][ T5985] rtl8150 5-1:1.0: couldn't reset the device [ 112.076940][ T5985] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 112.087372][ T5985] usb 5-1: USB disconnect, device number 5 [ 112.216611][ C3] net_ratelimit: 4052 callbacks suppressed [ 112.216627][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 112.730802][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.286'. [ 112.757609][ T7131] netlink: 14 bytes leftover after parsing attributes in process `syz.3.285'. [ 113.383457][ T7131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.415134][ T7131] bond_slave_0: left allmulticast mode [ 113.438332][ T7131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.447792][ T7131] bond_slave_1: left allmulticast mode [ 113.462222][ T7131] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 113.477849][ T7131] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 113.506468][ T7131] bond0 (unregistering): Released all slaves [ 113.662712][ T7150] Bluetooth: MGMT ver 1.23 [ 113.744365][ T6061] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 113.751829][ T6061] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 113.976002][ T7172] FAULT_INJECTION: forcing a failure. [ 113.976002][ T7172] name failslab, interval 1, probability 0, space 0, times 0 [ 113.981541][ T7172] CPU: 1 UID: 0 PID: 7172 Comm: syz.3.295 Not tainted syzkaller #0 PREEMPT(full) [ 113.981569][ T7172] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 113.981576][ T7172] Call Trace: [ 113.981580][ T7172] [ 113.981585][ T7172] dump_stack_lvl+0x16c/0x1f0 [ 113.981626][ T7172] should_fail_ex+0x512/0x640 [ 113.981646][ T7172] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 113.981660][ T7172] should_failslab+0xc2/0x120 [ 113.981675][ T7172] __kmalloc_cache_noprof+0x6a/0x3e0 [ 113.981685][ T7172] ? __might_fault+0xe3/0x190 [ 113.981698][ T7172] ? __might_fault+0x13b/0x190 [ 113.981709][ T7172] ? snd_pcm_info_user+0x48/0x100 [ 113.981724][ T7172] snd_pcm_info_user+0x48/0x100 [ 113.981736][ T7172] snd_pcm_control_ioctl+0x5c8/0x6f0 [ 113.981752][ T7172] snd_ctl_ioctl_compat+0x7b4/0xc70 [ 113.981768][ T7172] ? __pfx_snd_pcm_control_ioctl+0x10/0x10 [ 113.981781][ T7172] ? __pfx_snd_ctl_ioctl_compat+0x10/0x10 [ 113.981795][ T7172] ? find_held_lock+0x2b/0x80 [ 113.981806][ T7172] ? hook_file_ioctl_common+0x145/0x410 [ 113.981824][ T7172] ? __fget_files+0x20e/0x3c0 [ 113.981839][ T7172] ? __pfx_snd_ctl_ioctl_compat+0x10/0x10 [ 113.981855][ T7172] __ia32_compat_sys_ioctl+0x242/0x370 [ 113.981874][ T7172] __do_fast_syscall_32+0x7c/0x3a0 [ 113.981890][ T7172] do_fast_syscall_32+0x32/0x80 [ 113.981905][ T7172] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 113.981919][ T7172] RIP: 0023:0xf705e579 [ 113.981929][ T7172] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 113.981939][ T7172] RSP: 002b:00000000f542d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 113.981950][ T7172] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000c1205531 [ 113.981957][ T7172] RDX: 0000000080000540 RSI: 0000000000000000 RDI: 0000000000000000 [ 113.981963][ T7172] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 113.981969][ T7172] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 113.981975][ T7172] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 113.981988][ T7172] [ 114.184554][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 114.184568][ T40] audit: type=1326 audit(1756632327.409:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.1.300" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 114.197531][ T40] audit: type=1326 audit(1756632327.409:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.1.300" exe="/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 114.207841][ T40] audit: type=1326 audit(1756632327.409:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.1.300" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 114.216552][ T40] audit: type=1326 audit(1756632327.409:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.1.300" exe="/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 114.224906][ T40] audit: type=1326 audit(1756632327.409:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.1.300" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 114.233671][ T40] audit: type=1326 audit(1756632327.419:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.1.300" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 114.244957][ T40] audit: type=1326 audit(1756632327.419:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.1.300" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 114.255094][ T7181] overlayfs: missing 'lowerdir' [ 114.257548][ T40] audit: type=1326 audit(1756632327.419:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.1.300" exe="/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 114.265093][ T40] audit: type=1326 audit(1756632327.419:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.1.300" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 114.298730][ T40] audit: type=1326 audit(1756632327.419:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.1.300" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 114.968219][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.303'. [ 116.335598][ T7222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.307'. [ 116.616465][ T6060] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 116.767751][ T6060] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 116.771251][ T6060] usb 6-1: config 0 interface 0 has no altsetting 0 [ 116.774829][ T6060] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 116.778010][ T6060] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 116.780606][ T6060] usb 6-1: Product: syz [ 116.782135][ T6060] usb 6-1: Manufacturer: syz [ 116.783851][ T6060] usb 6-1: SerialNumber: syz [ 116.787128][ T6060] usb 6-1: config 0 descriptor?? [ 116.791646][ T6060] usb 6-1: selecting invalid altsetting 0 [ 116.846005][ T7218] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 116.848186][ T7218] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 117.060130][ T34] usb 6-1: USB disconnect, device number 7 [ 117.116367][ T6061] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 117.266842][ T7218] vhci_hcd vhci_hcd.0: Device attached [ 117.403058][ T7227] vhci_hcd: connection closed [ 117.403443][ T12] vhci_hcd: stop threads [ 117.407517][ T12] vhci_hcd: release socket [ 117.410532][ T12] vhci_hcd: disconnect device [ 117.977342][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 118.009715][ T7246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.314'. [ 118.543785][ T56] IPVS: starting estimator thread 0... [ 118.626864][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 118.647672][ T7253] IPVS: using max 23 ests per chain, 55200 per kthread [ 118.719827][ T7265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.318'. [ 118.720181][ T7264] FAULT_INJECTION: forcing a failure. [ 118.720181][ T7264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.730915][ T7264] CPU: 2 UID: 0 PID: 7264 Comm: syz.3.322 Not tainted syzkaller #0 PREEMPT(full) [ 118.730958][ T7264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 118.730968][ T7264] Call Trace: [ 118.730974][ T7264] [ 118.730979][ T7264] dump_stack_lvl+0x16c/0x1f0 [ 118.731009][ T7264] should_fail_ex+0x512/0x640 [ 118.731038][ T7264] _copy_to_user+0x32/0xd0 [ 118.731055][ T7264] simple_read_from_buffer+0xcb/0x170 [ 118.731070][ T7264] proc_fail_nth_read+0x197/0x240 [ 118.731083][ T7264] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 118.731096][ T7264] ? rw_verify_area+0xcf/0x6c0 [ 118.731107][ T7264] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 118.731118][ T7264] vfs_read+0x1e4/0xcf0 [ 118.731134][ T7264] ? __pfx_vfs_read+0x10/0x10 [ 118.731145][ T7264] ? find_held_lock+0x2b/0x80 [ 118.731160][ T7264] ? __fget_files+0x20e/0x3c0 [ 118.731171][ T7264] ? handle_mm_fault+0x200/0xd10 [ 118.731189][ T7264] ksys_read+0x12a/0x250 [ 118.731201][ T7264] ? __pfx_ksys_read+0x10/0x10 [ 118.731214][ T7264] ? rcu_is_watching+0x12/0xc0 [ 118.731227][ T7264] __do_fast_syscall_32+0x7c/0x3a0 [ 118.731244][ T7264] do_fast_syscall_32+0x32/0x80 [ 118.731259][ T7264] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 118.731273][ T7264] RIP: 0023:0xf705e579 [ 118.731282][ T7264] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 118.731293][ T7264] RSP: 002b:00000000f544e590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 118.731303][ T7264] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f544e620 [ 118.731310][ T7264] RDX: 000000000000000f RSI: 00000000f73d4ff4 RDI: 0000000000000000 [ 118.731316][ T7264] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 118.731322][ T7264] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 118.731328][ T7264] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 118.731341][ T7264] [ 118.815355][ T7269] NILFS (nbd1): device size too small [ 118.894363][ T7273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.325'. [ 118.900525][ T7273] netlink: 'syz.1.325': attribute type 20 has an invalid length. [ 118.904103][ T7273] netlink: 'syz.1.325': attribute type 21 has an invalid length. [ 118.966505][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.324'. [ 119.772406][ T7283] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 119.775671][ T7282] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 120.079471][ T7294] loop4: detected capacity change from 0 to 524255232 [ 120.505384][ T7312] FAULT_INJECTION: forcing a failure. [ 120.505384][ T7312] name failslab, interval 1, probability 0, space 0, times 0 [ 120.509735][ T7312] CPU: 3 UID: 0 PID: 7312 Comm: syz.1.337 Not tainted syzkaller #0 PREEMPT(full) [ 120.509752][ T7312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 120.509760][ T7312] Call Trace: [ 120.509764][ T7312] [ 120.509770][ T7312] dump_stack_lvl+0x16c/0x1f0 [ 120.509806][ T7312] should_fail_ex+0x512/0x640 [ 120.509825][ T7312] ? __kmalloc_noprof+0xbf/0x510 [ 120.509841][ T7312] ? copy_splice_read+0x1a8/0xc20 [ 120.509853][ T7312] should_failslab+0xc2/0x120 [ 120.509869][ T7312] __kmalloc_noprof+0xd2/0x510 [ 120.509887][ T7312] copy_splice_read+0x1a8/0xc20 [ 120.509898][ T7312] ? __pfx___might_resched+0x10/0x10 [ 120.509914][ T7312] ? trace_contention_end+0xdd/0x130 [ 120.509931][ T7312] ? __pfx_copy_splice_read+0x10/0x10 [ 120.509954][ T7312] sock_splice_read+0xe9/0x110 [ 120.509974][ T7312] ? __pfx_sock_splice_read+0x10/0x10 [ 120.509992][ T7312] do_splice_read+0x285/0x370 [ 120.510006][ T7312] splice_file_to_pipe+0x109/0x120 [ 120.510021][ T7312] do_splice+0x118c/0x1fc0 [ 120.510034][ T7312] ? __lock_acquire+0x62e/0x1ce0 [ 120.510056][ T7312] ? __pfx_do_splice+0x10/0x10 [ 120.510067][ T7312] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 120.510080][ T7312] ? find_held_lock+0x2b/0x80 [ 120.510094][ T7312] __do_splice+0x15d/0x360 [ 120.510108][ T7312] ? __pfx___do_splice+0x10/0x10 [ 120.510126][ T7312] __ia32_sys_splice+0x189/0x250 [ 120.510141][ T7312] __do_fast_syscall_32+0x7c/0x3a0 [ 120.510160][ T7312] do_fast_syscall_32+0x32/0x80 [ 120.510183][ T7312] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 120.510200][ T7312] RIP: 0023:0xf7f76579 [ 120.510210][ T7312] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 120.510222][ T7312] RSP: 002b:00000000f544455c EFLAGS: 00000296 ORIG_RAX: 0000000000000139 [ 120.510235][ T7312] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 120.510242][ T7312] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000007 [ 120.510249][ T7312] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 120.510255][ T7312] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 120.510262][ T7312] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 120.510277][ T7312] [ 122.536987][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.347'. [ 123.488460][ T7364] fuse: Bad value for 'fd' [ 123.833004][ T7385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.360'. [ 124.068413][ T7390] sctp: [Deprecated]: syz.0.362 (pid 7390) Use of struct sctp_assoc_value in delayed_ack socket option. [ 124.068413][ T7390] Use struct sctp_sack_info instead [ 124.862634][ T7409] netlink: 'syz.1.366': attribute type 2 has an invalid length. [ 124.928752][ T7403] fuse: Bad value for 'fd' [ 124.941848][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.366'. [ 125.552527][ T7423] netlink: 'syz.2.369': attribute type 2 has an invalid length. [ 125.632736][ T7424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.369'. [ 125.662103][ T7424] batman_adv: batadv0: Interface deactivated: dummy0 [ 125.701952][ T7424] batman_adv: batadv0: Removing interface: dummy0 [ 125.808979][ T7433] netlink: 'syz.3.372': attribute type 1 has an invalid length. [ 125.874813][ T7433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.899772][ T7438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.371'. [ 126.231420][ T7442] FAULT_INJECTION: forcing a failure. [ 126.231420][ T7442] name failslab, interval 1, probability 0, space 0, times 0 [ 126.236794][ T7442] CPU: 0 UID: 0 PID: 7442 Comm: syz.1.374 Not tainted syzkaller #0 PREEMPT(full) [ 126.236845][ T7442] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 126.236856][ T7442] Call Trace: [ 126.236867][ T7442] [ 126.236877][ T7442] dump_stack_lvl+0x16c/0x1f0 [ 126.236939][ T7442] should_fail_ex+0x512/0x640 [ 126.236971][ T7442] ? fs_reclaim_acquire+0xae/0x150 [ 126.237000][ T7442] ? p9_fcall_init+0x97/0x260 [ 126.237022][ T7442] should_failslab+0xc2/0x120 [ 126.237043][ T7442] __kmalloc_noprof+0xd2/0x510 [ 126.237060][ T7442] ? rcu_is_watching+0x12/0xc0 [ 126.237084][ T7442] p9_fcall_init+0x97/0x260 [ 126.237107][ T7442] p9_tag_alloc+0x161/0x640 [ 126.237133][ T7442] ? __pfx_p9_tag_alloc+0x10/0x10 [ 126.237160][ T7442] p9_client_prepare_req+0x19b/0x4d0 [ 126.237179][ T7442] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 126.237197][ T7442] ? __ia32_compat_sys_open+0x146/0x1e0 [ 126.237217][ T7442] ? __lock_acquire+0xb97/0x1ce0 [ 126.237276][ T7442] p9_client_rpc+0x1c4/0xc50 [ 126.237299][ T7442] ? node_tag_clear+0x105/0x290 [ 126.237318][ T7442] ? __pfx_p9_client_rpc+0x10/0x10 [ 126.237340][ T7442] ? idr_alloc_u32+0x20f/0x2f0 [ 126.237364][ T7442] ? idr_preload_end+0xc2/0x230 [ 126.237387][ T7442] ? rcu_is_watching+0x12/0xc0 [ 126.237407][ T7442] p9_client_walk+0x1ab/0x530 [ 126.237433][ T7442] ? v9fs_fid_lookup+0xb1e/0xeb0 [ 126.237458][ T7442] ? __pfx_p9_client_walk+0x10/0x10 [ 126.237481][ T7442] ? do_raw_spin_unlock+0x172/0x230 [ 126.237506][ T7442] ? v9fs_fid_lookup+0xe9/0xeb0 [ 126.237534][ T7442] v9fs_vfs_lookup+0x206/0x5b0 [ 126.237553][ T7442] ? __pfx_v9fs_vfs_lookup+0x10/0x10 [ 126.237574][ T7442] ? make_vfsuid+0xec/0x140 [ 126.237598][ T7442] ? __pfx_make_vfsuid+0x10/0x10 [ 126.237624][ T7442] v9fs_vfs_atomic_open+0x4cc/0x920 [ 126.237644][ T7442] ? generic_permission+0xad/0x7d0 [ 126.237671][ T7442] ? __pfx_v9fs_vfs_atomic_open+0x10/0x10 [ 126.237690][ T7442] ? security_inode_permission+0xbf/0x260 [ 126.237713][ T7442] ? inode_permission+0x156/0x630 [ 126.237736][ T7442] ? __pfx_v9fs_vfs_atomic_open+0x10/0x10 [ 126.237756][ T7442] lookup_open.isra.0+0x83d/0x1580 [ 126.237781][ T7442] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 126.237812][ T7442] ? __pfx_down_write+0x10/0x10 [ 126.237835][ T7442] ? mnt_get_write_access+0x20c/0x300 [ 126.237866][ T7442] path_openat+0x893/0x2cb0 [ 126.237895][ T7442] ? __pfx_path_openat+0x10/0x10 [ 126.237921][ T7442] do_filp_open+0x20b/0x470 [ 126.237939][ T7442] ? __pfx_do_filp_open+0x10/0x10 [ 126.237982][ T7442] ? alloc_fd+0x471/0x7d0 [ 126.237998][ T7442] do_sys_openat2+0x11b/0x1d0 [ 126.238015][ T7442] ? __pfx_do_sys_openat2+0x10/0x10 [ 126.238032][ T7442] ? __fget_files+0x20e/0x3c0 [ 126.238046][ T7442] __ia32_compat_sys_open+0x146/0x1e0 [ 126.238057][ T7442] ? __pfx___ia32_compat_sys_open+0x10/0x10 [ 126.238069][ T7442] ? rcu_is_watching+0x12/0xc0 [ 126.238079][ T7442] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 126.238097][ T7442] __do_fast_syscall_32+0x7c/0x3a0 [ 126.238114][ T7442] do_fast_syscall_32+0x32/0x80 [ 126.238129][ T7442] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 126.238144][ T7442] RIP: 0023:0xf7f76579 [ 126.238155][ T7442] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 126.238166][ T7442] RSP: 002b:00000000f546555c EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 126.238177][ T7442] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000000080242 [ 126.238184][ T7442] RDX: 000000005997fa7b RSI: 0000000000000000 RDI: 0000000000000000 [ 126.238190][ T7442] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 126.238196][ T7442] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 126.238201][ T7442] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 126.238214][ T7442] [ 126.290848][ T7437] bond0: (slave geneve2): making interface the new active one [ 126.551746][ T7437] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 126.991376][ T7448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.375'. [ 127.652209][ T7458] fuseblk: Bad value for 'fd' [ 128.153574][ T7468] sctp: [Deprecated]: syz.1.383 (pid 7468) Use of struct sctp_assoc_value in delayed_ack socket option. [ 128.153574][ T7468] Use struct sctp_sack_info instead [ 128.669079][ T7478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.385'. [ 128.808533][ T7475] sctp: [Deprecated]: syz.1.384 (pid 7475) Use of struct sctp_assoc_value in delayed_ack socket option. [ 128.808533][ T7475] Use struct sctp_sack_info instead [ 129.034229][ T7491] team0: Device gtp0 is of different type [ 129.045893][ T7493] fuseblk: Bad value for 'fd' [ 129.187185][ T7501] program syz.3.392 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.184887][ T7529] ubi8: attaching mtd0 [ 131.189381][ T7532] loop7: detected capacity change from 0 to 7 [ 131.191013][ T7529] ubi8: scanning is finished [ 131.198157][ T7529] ubi8: empty MTD device detected [ 131.371824][ T7529] ubi8: attached mtd0 (name "mtdram test device", size 0 MiB) [ 131.375171][ T7529] ubi8: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 131.379568][ T7529] ubi8: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 131.382899][ T7529] ubi8: VID header offset: 64 (aligned 64), data offset: 128 [ 131.387327][ T7529] ubi8: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 131.390389][ T7529] ubi8: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 131.392284][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.403'. [ 131.393753][ T7529] ubi8: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 950851457 [ 131.402007][ T7529] ubi8: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 131.407078][ T7537] ubi8: background thread "ubi_bgt8d" started, PID 7537 [ 131.416077][ T7538] bridge_slave_1: left allmulticast mode [ 131.424063][ T7532] Dev loop7: unable to read RDB block 7 [ 131.426455][ C2] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 131.426789][ T7538] bridge_slave_1: left promiscuous mode [ 131.430003][ C2] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 131.433781][ T7538] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.437104][ T7532] loop7: unable to read partition table [ 131.439665][ T7532] loop7: partition table beyond EOD, truncated [ 131.441849][ T7532] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 131.453213][ T7538] bridge_slave_0: left allmulticast mode [ 131.455924][ T7538] bridge_slave_0: left promiscuous mode [ 131.459071][ T7538] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.916908][ T7544] input: syz0 as /devices/virtual/input/input8 [ 132.149934][ T7545] FAULT_INJECTION: forcing a failure. [ 132.149934][ T7545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.162402][ T7545] CPU: 0 UID: 0 PID: 7545 Comm: syz.1.406 Not tainted syzkaller #0 PREEMPT(full) [ 132.162437][ T7545] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.162444][ T7545] Call Trace: [ 132.162450][ T7545] [ 132.162455][ T7545] dump_stack_lvl+0x16c/0x1f0 [ 132.162478][ T7545] should_fail_ex+0x512/0x640 [ 132.162498][ T7545] _copy_from_user+0x2e/0xd0 [ 132.162517][ T7545] input_event_from_user+0x137/0x290 [ 132.162531][ T7545] ? __pfx_input_event_from_user+0x10/0x10 [ 132.162544][ T7545] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 132.162571][ T7545] ? input_event+0xb6/0xd0 [ 132.162582][ T7545] uinput_write+0xbe7/0xff0 [ 132.162601][ T7545] ? __pfx_uinput_write+0x10/0x10 [ 132.162613][ T7545] ? common_file_perm+0x1a9/0x340 [ 132.162630][ T7545] ? bpf_lsm_file_permission+0x9/0x10 [ 132.162647][ T7545] ? security_file_permission+0x71/0x210 [ 132.162664][ T7545] ? rw_verify_area+0xcf/0x6c0 [ 132.162677][ T7545] ? __pfx_uinput_write+0x10/0x10 [ 132.162690][ T7545] vfs_write+0x2a0/0x11d0 [ 132.162705][ T7545] ? __pfx_vfs_write+0x10/0x10 [ 132.162716][ T7545] ? find_held_lock+0x2b/0x80 [ 132.162728][ T7545] ? __fget_files+0x204/0x3c0 [ 132.162743][ T7545] ? __fget_files+0x20e/0x3c0 [ 132.162765][ T7545] ? handle_mm_fault+0x200/0xd10 [ 132.162782][ T7545] ksys_write+0x1f8/0x250 [ 132.162794][ T7545] ? __pfx_ksys_write+0x10/0x10 [ 132.162807][ T7545] ? rcu_is_watching+0x12/0xc0 [ 132.162821][ T7545] __do_fast_syscall_32+0x7c/0x3a0 [ 132.162839][ T7545] do_fast_syscall_32+0x32/0x80 [ 132.162853][ T7545] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 132.162869][ T7545] RIP: 0023:0xf7f76579 [ 132.162880][ T7545] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 132.162890][ T7545] RSP: 002b:00000000f543c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 132.162901][ T7545] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080000000 [ 132.162908][ T7545] RDX: 000000000000fe4f RSI: 0000000000000000 RDI: 0000000000000000 [ 132.162920][ T7545] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 132.162925][ T7545] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 132.162931][ T7545] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 132.162945][ T7545] [ 132.249872][ C0] vkms_vblank_simulate: vblank timer overrun [ 132.314995][ T7555] FAULT_INJECTION: forcing a failure. [ 132.314995][ T7555] name failslab, interval 1, probability 0, space 0, times 0 [ 132.319978][ T7555] CPU: 2 UID: 0 PID: 7555 Comm: syz.2.408 Not tainted syzkaller #0 PREEMPT(full) [ 132.320021][ T7555] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.320032][ T7555] Call Trace: [ 132.320038][ T7555] [ 132.320046][ T7555] dump_stack_lvl+0x16c/0x1f0 [ 132.320076][ T7555] should_fail_ex+0x512/0x640 [ 132.320100][ T7555] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 132.320125][ T7555] should_failslab+0xc2/0x120 [ 132.320148][ T7555] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 132.320169][ T7555] ? __alloc_skb+0x2b2/0x380 [ 132.320195][ T7555] __alloc_skb+0x2b2/0x380 [ 132.320215][ T7555] ? __pfx___alloc_skb+0x10/0x10 [ 132.320239][ T7555] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 132.320269][ T7555] netlink_alloc_large_skb+0x69/0x130 [ 132.320294][ T7555] netlink_sendmsg+0x6a1/0xdd0 [ 132.320328][ T7555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.320355][ T7555] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 132.320380][ T7555] ____sys_sendmsg+0xa98/0xc70 [ 132.320400][ T7555] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.320415][ T7555] ? get_compat_msghdr+0x11a/0x170 [ 132.320449][ T7555] ___sys_sendmsg+0x134/0x1d0 [ 132.320475][ T7555] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.320510][ T7555] ? find_held_lock+0x2b/0x80 [ 132.320545][ T7555] __sys_sendmsg+0x16d/0x220 [ 132.320568][ T7555] ? __pfx___sys_sendmsg+0x10/0x10 [ 132.320601][ T7555] ? rcu_is_watching+0x12/0xc0 [ 132.320623][ T7555] __do_fast_syscall_32+0x7c/0x3a0 [ 132.320651][ T7555] do_fast_syscall_32+0x32/0x80 [ 132.320674][ T7555] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 132.320697][ T7555] RIP: 0023:0xf70ce579 [ 132.320710][ T7555] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 132.320727][ T7555] RSP: 002b:00000000f54be55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 132.320744][ T7555] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 132.320755][ T7555] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 132.320764][ T7555] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 132.320817][ T7555] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 132.320827][ T7555] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 132.320851][ T7555] [ 132.776135][ T7572] netlink: 'syz.1.414': attribute type 13 has an invalid length. [ 132.794779][ T7572] gretap0: refused to change device tx_queue_len [ 132.799496][ T7572] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 132.842593][ T7576] sctp: [Deprecated]: syz.0.415 (pid 7576) Use of struct sctp_assoc_value in delayed_ack socket option. [ 132.842593][ T7576] Use struct sctp_sack_info instead [ 133.051774][ T7585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.419'. [ 133.099576][ T7585] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 133.102330][ T7585] macvtap1: entered promiscuous mode [ 133.117916][ T7585] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 133.126498][ T7587] input: syz0 as /devices/virtual/input/input9 [ 133.156147][ T7587] FAULT_INJECTION: forcing a failure. [ 133.156147][ T7587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.162597][ T7587] CPU: 1 UID: 0 PID: 7587 Comm: syz.1.418 Not tainted syzkaller #0 PREEMPT(full) [ 133.162637][ T7587] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 133.162647][ T7587] Call Trace: [ 133.162654][ T7587] [ 133.162662][ T7587] dump_stack_lvl+0x16c/0x1f0 [ 133.162693][ T7587] should_fail_ex+0x512/0x640 [ 133.162719][ T7587] _copy_from_user+0x2e/0xd0 [ 133.162745][ T7587] input_event_from_user+0x137/0x290 [ 133.162765][ T7587] ? __pfx_input_event_from_user+0x10/0x10 [ 133.162783][ T7587] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 133.162803][ T7587] ? input_event+0xb6/0xd0 [ 133.162820][ T7587] uinput_write+0xbe7/0xff0 [ 133.162846][ T7587] ? __pfx_uinput_write+0x10/0x10 [ 133.162863][ T7587] ? common_file_perm+0x1a9/0x340 [ 133.162885][ T7587] ? bpf_lsm_file_permission+0x9/0x10 [ 133.162907][ T7587] ? security_file_permission+0x71/0x210 [ 133.162929][ T7587] ? rw_verify_area+0xcf/0x6c0 [ 133.162947][ T7587] ? __pfx_uinput_write+0x10/0x10 [ 133.162965][ T7587] vfs_write+0x2a0/0x11d0 [ 133.162989][ T7587] ? __pfx_vfs_write+0x10/0x10 [ 133.163004][ T7587] ? find_held_lock+0x2b/0x80 [ 133.163022][ T7587] ? __fget_files+0x204/0x3c0 [ 133.163043][ T7587] ? __fget_files+0x20e/0x3c0 [ 133.163067][ T7587] ksys_write+0x1f8/0x250 [ 133.163084][ T7587] ? __pfx_ksys_write+0x10/0x10 [ 133.163103][ T7587] ? rcu_is_watching+0x12/0xc0 [ 133.163123][ T7587] __do_fast_syscall_32+0x7c/0x3a0 [ 133.163156][ T7587] do_fast_syscall_32+0x32/0x80 [ 133.163176][ T7587] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 133.163196][ T7587] RIP: 0023:0xf7f76579 [ 133.163210][ T7587] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 133.163225][ T7587] RSP: 002b:00000000f545d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 133.163241][ T7587] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080000000 [ 133.163251][ T7587] RDX: 000000000000fe4f RSI: 0000000000000000 RDI: 0000000000000000 [ 133.163259][ T7587] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 133.163268][ T7587] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 133.163276][ T7587] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 133.163298][ T7587] [ 133.201597][ T7586] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.516491][ T839] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 133.671827][ T839] usb 5-1: Using ep0 maxpacket: 8 [ 133.680303][ T839] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.684500][ T839] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 133.685831][ T7603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.425'. [ 133.691614][ T7603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.425'. [ 133.706898][ T839] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 133.715385][ T839] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 133.735646][ T839] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 133.741843][ T839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.759058][ T839] hub 5-1:1.0: bad descriptor, ignoring hub [ 133.761129][ T839] hub 5-1:1.0: probe with driver hub failed with error -5 [ 133.763768][ T839] cdc_wdm 5-1:1.0: skipping garbage [ 133.765760][ T839] cdc_wdm 5-1:1.0: skipping garbage [ 133.783265][ T839] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 133.786550][ T839] cdc_wdm 5-1:1.0: Unknown control protocol [ 134.065011][ T7610] fuse: Invalid rootmode [ 134.280217][ T7617] input: syz0 as /devices/virtual/input/input10 [ 134.603819][ T7627] input: syz0 as /devices/virtual/input/input11 [ 135.803067][ T7641] fuse: Invalid rootmode [ 136.753211][ T7661] 9pnet_fd: Insufficient options for proto=fd [ 137.091771][ T7666] FAULT_INJECTION: forcing a failure. [ 137.091771][ T7666] name failslab, interval 1, probability 0, space 0, times 0 [ 137.095752][ T7666] CPU: 1 UID: 0 PID: 7666 Comm: syz.1.445 Not tainted syzkaller #0 PREEMPT(full) [ 137.095768][ T7666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 137.095775][ T7666] Call Trace: [ 137.095779][ T7666] [ 137.095784][ T7666] dump_stack_lvl+0x16c/0x1f0 [ 137.095804][ T7666] should_fail_ex+0x512/0x640 [ 137.095820][ T7666] ? fs_reclaim_acquire+0xae/0x150 [ 137.095849][ T7666] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 137.095867][ T7666] should_failslab+0xc2/0x120 [ 137.095881][ T7666] __kmalloc_noprof+0xd2/0x510 [ 137.095897][ T7666] tomoyo_realpath_from_path+0xc2/0x6e0 [ 137.095914][ T7666] ? tomoyo_profile+0x47/0x60 [ 137.095925][ T7666] tomoyo_path_number_perm+0x245/0x580 [ 137.095937][ T7666] ? tomoyo_path_number_perm+0x237/0x580 [ 137.095955][ T7666] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 137.095982][ T7666] ? find_held_lock+0x2b/0x80 [ 137.095994][ T7666] ? hook_file_ioctl_common+0x145/0x410 [ 137.096012][ T7666] ? __fget_files+0x20e/0x3c0 [ 137.096027][ T7666] security_file_ioctl_compat+0x9b/0x240 [ 137.096043][ T7666] __ia32_compat_sys_ioctl+0xc3/0x370 [ 137.096062][ T7666] __do_fast_syscall_32+0x7c/0x3a0 [ 137.096079][ T7666] do_fast_syscall_32+0x32/0x80 [ 137.096093][ T7666] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.096108][ T7666] RIP: 0023:0xf7f76579 [ 137.096116][ T7666] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 137.096127][ T7666] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 137.096138][ T7666] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000400448c9 [ 137.096144][ T7666] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 137.096150][ T7666] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 137.096156][ T7666] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 137.096162][ T7666] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.096175][ T7666] [ 137.096193][ T7666] ERROR: Out of memory at tomoyo_realpath_from_path. [ 137.323939][ T7674] fuse: Bad value for 'rootmode' [ 137.656433][ T839] usb 5-1: USB disconnect, device number 7 [ 137.660103][ T7585] cdc_wdm 5-1:1.0: Error autopm - -16 [ 137.770945][ T7683] block nbd3: not configured, cannot reconfigure [ 137.820375][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.300522][ T7719] netlink: 'syz.3.461': attribute type 21 has an invalid length. [ 139.317861][ T7720] sctp: [Deprecated]: syz.2.459 (pid 7720) Use of struct sctp_assoc_value in delayed_ack socket option. [ 139.317861][ T7720] Use struct sctp_sack_info instead [ 139.399621][ T7737] kernel profiling enabled (shift: 3) [ 139.781206][ T7759] netlink: 96 bytes leftover after parsing attributes in process `syz.0.467'. [ 139.789452][ T7759] overlay: Unknown parameter 'smackfshat' [ 139.892687][ T7765] netlink: 16 bytes leftover after parsing attributes in process `syz.0.468'. [ 141.635087][ T7804] FAULT_INJECTION: forcing a failure. [ 141.635087][ T7804] name failslab, interval 1, probability 0, space 0, times 0 [ 141.639479][ T7804] CPU: 3 UID: 0 PID: 7804 Comm: syz.2.478 Not tainted syzkaller #0 PREEMPT(full) [ 141.639497][ T7804] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 141.639504][ T7804] Call Trace: [ 141.639511][ T7804] [ 141.639517][ T7804] dump_stack_lvl+0x16c/0x1f0 [ 141.639540][ T7804] should_fail_ex+0x512/0x640 [ 141.639558][ T7804] ? fs_reclaim_acquire+0xae/0x150 [ 141.639577][ T7804] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 141.639594][ T7804] should_failslab+0xc2/0x120 [ 141.639610][ T7804] __kmalloc_noprof+0xd2/0x510 [ 141.639627][ T7804] tomoyo_realpath_from_path+0xc2/0x6e0 [ 141.639643][ T7804] ? tomoyo_profile+0x47/0x60 [ 141.639655][ T7804] tomoyo_path_number_perm+0x245/0x580 [ 141.639667][ T7804] ? tomoyo_path_number_perm+0x237/0x580 [ 141.639681][ T7804] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 141.639707][ T7804] ? find_held_lock+0x2b/0x80 [ 141.639720][ T7804] ? hook_file_ioctl_common+0x145/0x410 [ 141.639739][ T7804] ? __fget_files+0x20e/0x3c0 [ 141.639754][ T7804] security_file_ioctl_compat+0x9b/0x240 [ 141.639770][ T7804] __ia32_compat_sys_ioctl+0xc3/0x370 [ 141.639791][ T7804] __do_fast_syscall_32+0x7c/0x3a0 [ 141.639880][ T7804] do_fast_syscall_32+0x32/0x80 [ 141.639899][ T7804] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 141.639916][ T7804] RIP: 0023:0xf70ce579 [ 141.639927][ T7804] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 141.639939][ T7804] RSP: 002b:00000000f549d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 141.639959][ T7804] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000400448c8 [ 141.639967][ T7804] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.639974][ T7804] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 141.639980][ T7804] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 141.639987][ T7804] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 141.640002][ T7804] [ 141.640008][ T7804] ERROR: Out of memory at tomoyo_realpath_from_path. [ 141.795146][ T7812] FAULT_INJECTION: forcing a failure. [ 141.795146][ T7812] name failslab, interval 1, probability 0, space 0, times 0 [ 141.800465][ T7812] CPU: 2 UID: 0 PID: 7812 Comm: syz.1.481 Not tainted syzkaller #0 PREEMPT(full) [ 141.800504][ T7812] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 141.800513][ T7812] Call Trace: [ 141.800518][ T7812] [ 141.800524][ T7812] dump_stack_lvl+0x16c/0x1f0 [ 141.800548][ T7812] should_fail_ex+0x512/0x640 [ 141.800567][ T7812] ? __kmalloc_noprof+0xbf/0x510 [ 141.800585][ T7812] ? kernfs_fop_write_iter+0x237/0x510 [ 141.800598][ T7812] should_failslab+0xc2/0x120 [ 141.800616][ T7812] __kmalloc_noprof+0xd2/0x510 [ 141.800630][ T7812] ? lock_acquire+0x62/0x350 [ 141.800652][ T7812] kernfs_fop_write_iter+0x237/0x510 [ 141.800668][ T7812] vfs_write+0x7d0/0x11d0 [ 141.800708][ T7812] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 141.800724][ T7812] ? __pfx_vfs_write+0x10/0x10 [ 141.800738][ T7812] ? find_held_lock+0x2b/0x80 [ 141.800763][ T7812] ksys_write+0x12a/0x250 [ 141.800779][ T7812] ? __pfx_ksys_write+0x10/0x10 [ 141.800795][ T7812] ? rcu_is_watching+0x12/0xc0 [ 141.800812][ T7812] __do_fast_syscall_32+0x7c/0x3a0 [ 141.800833][ T7812] do_fast_syscall_32+0x32/0x80 [ 141.800852][ T7812] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 141.800868][ T7812] RIP: 0023:0xf7f76579 [ 141.800880][ T7812] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 141.800893][ T7812] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 141.800907][ T7812] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000200 [ 141.800916][ T7812] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.800924][ T7812] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 141.800932][ T7812] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 141.800940][ T7812] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 141.800958][ T7812] [ 142.413814][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.484'. [ 142.986441][ T5985] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 143.136409][ T5985] usb 7-1: Using ep0 maxpacket: 16 [ 143.139133][ T5985] usb 7-1: too many configurations: 123, using maximum allowed: 8 [ 143.145976][ T5985] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.150175][ T5985] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.154355][ T5985] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.159190][ T5985] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.163588][ T5985] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.168438][ T5985] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.172821][ T5985] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.177459][ T5985] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.193380][ T5985] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 143.198287][ T5985] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 143.201615][ T5985] usb 7-1: SerialNumber: syz [ 143.224288][ T5985] usb 7-1: config 0 descriptor?? [ 143.239546][ T5985] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input12 [ 143.364135][ T7842] loop2: detected capacity change from 0 to 7 [ 143.388880][ T7842] Dev loop2: unable to read RDB block 7 [ 143.391531][ T7842] loop2: unable to read partition table [ 143.394082][ T7842] loop2: partition table beyond EOD, truncated [ 143.396437][ T7842] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 143.413232][ T7842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.490'. [ 143.443228][ T7829] input: syz1 as /devices/virtual/input/input13 [ 143.478594][ T5369] bcm5974 7-1:0.0: could not read from device [ 143.485025][ T5369] bcm5974 7-1:0.0: could not read from device [ 143.498586][ T5369] bcm5974 7-1:0.0: could not read from device [ 143.506408][ T5369] bcm5974 7-1:0.0: could not read from device [ 143.515302][ T5985] usb 7-1: USB disconnect, device number 7 [ 143.807925][ T7851] fuse: Unknown parameter 'use00000000000000000000' [ 144.382732][ T7866] lo speed is unknown, defaulting to 1000 [ 144.384821][ T7866] lo speed is unknown, defaulting to 1000 [ 144.387522][ T7866] lo speed is unknown, defaulting to 1000 [ 144.392024][ T7866] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 144.399344][ T7866] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 144.492488][ T7866] lo speed is unknown, defaulting to 1000 [ 144.500806][ T7866] lo speed is unknown, defaulting to 1000 [ 144.506827][ T7866] lo speed is unknown, defaulting to 1000 [ 144.512092][ T7866] lo speed is unknown, defaulting to 1000 [ 145.636380][ T5985] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 145.796343][ T5985] usb 5-1: Using ep0 maxpacket: 16 [ 145.801325][ T5985] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 145.805198][ T5985] usb 5-1: config 0 has no interface number 0 [ 145.808124][ T5985] usb 5-1: config 0 interface 41 has no altsetting 0 [ 145.814100][ T5985] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 145.818260][ T5985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.821935][ T5985] usb 5-1: Product: syz [ 145.823945][ T5985] usb 5-1: Manufacturer: syz [ 145.826130][ T5985] usb 5-1: SerialNumber: syz [ 145.836861][ T5985] usb 5-1: config 0 descriptor?? [ 145.842528][ T5985] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22 [ 145.978056][ T7892] FAULT_INJECTION: forcing a failure. [ 145.978056][ T7892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.982539][ T7892] CPU: 3 UID: 0 PID: 7892 Comm: syz.2.506 Not tainted syzkaller #0 PREEMPT(full) [ 145.982557][ T7892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 145.982564][ T7892] Call Trace: [ 145.982570][ T7892] [ 145.982576][ T7892] dump_stack_lvl+0x16c/0x1f0 [ 145.982597][ T7892] should_fail_ex+0x512/0x640 [ 145.982616][ T7892] _copy_from_user+0x2e/0xd0 [ 145.982635][ T7892] get_compat_msghdr+0xa7/0x170 [ 145.982651][ T7892] ? __pfx_get_compat_msghdr+0x10/0x10 [ 145.982669][ T7892] ___sys_sendmsg+0x1ae/0x1d0 [ 145.982686][ T7892] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.982708][ T7892] ? find_held_lock+0x2b/0x80 [ 145.982729][ T7892] __sys_sendmsg+0x16d/0x220 [ 145.982745][ T7892] ? __pfx___sys_sendmsg+0x10/0x10 [ 145.982765][ T7892] ? rcu_is_watching+0x12/0xc0 [ 145.982779][ T7892] __do_fast_syscall_32+0x7c/0x3a0 [ 145.982797][ T7892] do_fast_syscall_32+0x32/0x80 [ 145.982812][ T7892] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 145.982833][ T7892] RIP: 0023:0xf70ce579 [ 145.982842][ T7892] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 145.982854][ T7892] RSP: 002b:00000000f54be55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 145.982865][ T7892] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 145.982873][ T7892] RDX: 00000000000004c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 145.982879][ T7892] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 145.982885][ T7892] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 145.982891][ T7892] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 145.982904][ T7892] [ 146.043935][ T6062] usb 5-1: USB disconnect, device number 8 [ 146.557370][ T7903] FAULT_INJECTION: forcing a failure. [ 146.557370][ T7903] name failslab, interval 1, probability 0, space 0, times 0 [ 146.564223][ T7903] CPU: 2 UID: 0 PID: 7903 Comm: syz.1.509 Not tainted syzkaller #0 PREEMPT(full) [ 146.564257][ T7903] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 146.564271][ T7903] Call Trace: [ 146.564282][ T7903] [ 146.564292][ T7903] dump_stack_lvl+0x16c/0x1f0 [ 146.564326][ T7903] should_fail_ex+0x512/0x640 [ 146.564353][ T7903] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 146.564380][ T7903] should_failslab+0xc2/0x120 [ 146.564406][ T7903] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 146.564430][ T7903] ? __d_alloc+0x32/0xae0 [ 146.564458][ T7903] __d_alloc+0x32/0xae0 [ 146.564487][ T7903] d_alloc_parallel+0x111/0x1480 [ 146.564533][ T7903] ? register_lock_class+0x41/0x4c0 [ 146.564562][ T7903] ? __lock_acquire+0xb97/0x1ce0 [ 146.564586][ T7903] ? __pfx_d_alloc_parallel+0x10/0x10 [ 146.564614][ T7903] ? lockdep_init_map_type+0x5c/0x280 [ 146.564633][ T7903] ? lockdep_init_map_type+0x5c/0x280 [ 146.564698][ T7903] __lookup_slow+0x193/0x460 [ 146.564722][ T7903] ? __pfx___lookup_slow+0x10/0x10 [ 146.564753][ T7903] ? lookup_fast+0x156/0x610 [ 146.564768][ T7903] walk_component+0x353/0x5b0 [ 146.564783][ T7903] path_lookupat+0x142/0x6d0 [ 146.564800][ T7903] filename_lookup+0x224/0x5f0 [ 146.564816][ T7903] ? __pfx_filename_lookup+0x10/0x10 [ 146.564844][ T7903] ? __might_fault+0xe3/0x190 [ 146.564858][ T7903] ? __might_fault+0x13b/0x190 [ 146.564885][ T7903] filename_setxattr+0x9d/0x1d0 [ 146.564907][ T7903] ? __pfx_filename_setxattr+0x10/0x10 [ 146.564930][ T7903] ? getname_flags.part.0+0x1c5/0x550 [ 146.564966][ T7903] path_setxattrat+0x1de/0x2a0 [ 146.564989][ T7903] ? __pfx_path_setxattrat+0x10/0x10 [ 146.565016][ T7903] ? ksys_write+0x190/0x250 [ 146.565063][ T7903] ? fput+0x9b/0xd0 [ 146.565093][ T7903] ? ksys_write+0x1ac/0x250 [ 146.565116][ T7903] ? __pfx_ksys_write+0x10/0x10 [ 146.565144][ T7903] __ia32_sys_setxattr+0xc4/0x140 [ 146.565172][ T7903] ? lockdep_hardirqs_on+0x7c/0x110 [ 146.565194][ T7903] __do_fast_syscall_32+0x7c/0x3a0 [ 146.565220][ T7903] do_fast_syscall_32+0x32/0x80 [ 146.565244][ T7903] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 146.565264][ T7903] RIP: 0023:0xf7f76579 [ 146.565281][ T7903] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 146.565297][ T7903] RSP: 002b:00000000f544455c EFLAGS: 00000296 ORIG_RAX: 00000000000000e2 [ 146.565315][ T7903] RAX: ffffffffffffffda RBX: 0000000080000200 RCX: 0000000080000240 [ 146.565326][ T7903] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.565335][ T7903] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 146.565344][ T7903] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 146.565354][ T7903] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 146.565377][ T7903] [ 146.726820][ T7906] can0: slcan on ttyS3. [ 146.785823][ T7908] nfs: Unknown parameter 'fuse' [ 146.817866][ T7906] can0 (unregistered): slcan off ttyS3. [ 147.722180][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 147.722193][ T40] audit: type=1804 audit(1756632360.949:100): pid=7934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.514" name="/newroot/118/bus/bus" dev="overlay" ino=650 res=1 errno=0 [ 147.750719][ T40] audit: type=1804 audit(1756632360.979:101): pid=7934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.514" name="/newroot/118/bus/bus" dev="overlay" ino=650 res=1 errno=0 [ 148.656659][ T7950] autofs: Bad value for 'fd' [ 149.664446][ T7975] (syz.2.528,7975,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 149.672983][ T7975] (syz.2.528,7975,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 150.226393][ T6062] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 150.396380][ T6062] usb 6-1: Using ep0 maxpacket: 16 [ 150.402001][ T6062] usb 6-1: too many configurations: 123, using maximum allowed: 8 [ 150.409543][ T6062] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.432568][ T6062] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.447616][ T6062] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.448412][ T7995] hub 9-0:1.0: USB hub found [ 150.453100][ T7995] hub 9-0:1.0: 1 port detected [ 150.468790][ T7995] netlink: 72 bytes leftover after parsing attributes in process `syz.3.534'. [ 150.470463][ T6062] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.491452][ T6062] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.508239][ T6062] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.527572][ T6062] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.537334][ T6062] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.541699][ T6062] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 150.545106][ T6062] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 150.560858][ T6062] usb 6-1: SerialNumber: syz [ 150.563755][ T6062] usb 6-1: config 0 descriptor?? [ 150.568910][ T6062] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input14 [ 150.616357][ T8004] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 150.621941][ T8004] IPv6: NLM_F_REPLACE set, but no existing node found! [ 150.778332][ T8012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.536'. [ 150.790956][ T8008] input: syz0 as /devices/virtual/input/input15 [ 150.821718][ T7984] input: syz1 as /devices/virtual/input/input16 [ 150.838377][ T5369] bcm5974 6-1:0.0: could not read from device [ 150.841572][ T5369] bcm5974 6-1:0.0: could not read from device [ 151.299179][ T6062] usb 6-1: USB disconnect, device number 8 [ 151.301753][ T5369] bcm5974 6-1:0.0: could not read from device [ 151.519872][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.539'. [ 151.592444][ T8028] veth0_vlan: entered allmulticast mode [ 151.675240][ T8033] veth0_vlan: left promiscuous mode [ 151.679488][ T8033] veth0_vlan: left allmulticast mode [ 151.685340][ T8033] veth0_vlan: entered promiscuous mode [ 152.461208][ T8048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.549'. [ 152.465110][ T8048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.549'. [ 154.156844][ T8091] FAULT_INJECTION: forcing a failure. [ 154.156844][ T8091] name failslab, interval 1, probability 0, space 0, times 0 [ 154.161304][ T8091] CPU: 0 UID: 0 PID: 8091 Comm: syz.2.562 Not tainted syzkaller #0 PREEMPT(full) [ 154.161321][ T8091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 154.161328][ T8091] Call Trace: [ 154.161333][ T8091] [ 154.161338][ T8091] dump_stack_lvl+0x16c/0x1f0 [ 154.161364][ T8091] should_fail_ex+0x512/0x640 [ 154.161388][ T8091] should_failslab+0xc2/0x120 [ 154.161408][ T8091] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 154.161427][ T8091] ? skb_clone+0x190/0x3f0 [ 154.161451][ T8091] skb_clone+0x190/0x3f0 [ 154.161473][ T8091] netlink_deliver_tap+0xabd/0xd30 [ 154.161522][ T8091] netlink_unicast+0x64c/0x870 [ 154.161548][ T8091] ? __pfx_netlink_unicast+0x10/0x10 [ 154.161570][ T8091] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 154.161600][ T8091] netlink_sendmsg+0x8d1/0xdd0 [ 154.161629][ T8091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.161655][ T8091] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 154.161679][ T8091] ____sys_sendmsg+0xa98/0xc70 [ 154.161700][ T8091] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.161715][ T8091] ? get_compat_msghdr+0x11a/0x170 [ 154.161745][ T8091] ___sys_sendmsg+0x134/0x1d0 [ 154.161769][ T8091] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.161798][ T8091] ? find_held_lock+0x2b/0x80 [ 154.161829][ T8091] __sys_sendmsg+0x16d/0x220 [ 154.161866][ T8091] ? __pfx___sys_sendmsg+0x10/0x10 [ 154.161897][ T8091] ? rcu_is_watching+0x12/0xc0 [ 154.161917][ T8091] __do_fast_syscall_32+0x7c/0x3a0 [ 154.161942][ T8091] do_fast_syscall_32+0x32/0x80 [ 154.161965][ T8091] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 154.161986][ T8091] RIP: 0023:0xf70ce579 [ 154.162000][ T8091] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 154.162015][ T8091] RSP: 002b:00000000f54be55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 154.162038][ T8091] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000540 [ 154.162049][ T8091] RDX: 0000000000044000 RSI: 0000000000000000 RDI: 0000000000000000 [ 154.162058][ T8091] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 154.162066][ T8091] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 154.162076][ T8091] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 154.162096][ T8091] [ 154.266807][ T40] audit: type=1326 audit(1756632367.499:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.2.563" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 154.273708][ T40] audit: type=1326 audit(1756632367.499:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.2.563" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 154.281644][ T40] audit: type=1326 audit(1756632367.499:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.2.563" exe="/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 154.289309][ T40] audit: type=1326 audit(1756632367.499:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.2.563" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 154.296561][ T40] audit: type=1326 audit(1756632367.499:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.2.563" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 154.304110][ T40] audit: type=1326 audit(1756632367.499:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.2.563" exe="/syz-executor" sig=0 arch=40000003 syscall=316 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 154.322930][ T40] audit: type=1326 audit(1756632367.549:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.2.563" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 154.330732][ T40] audit: type=1326 audit(1756632367.549:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.2.563" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 154.338298][ T40] audit: type=1326 audit(1756632367.549:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.2.563" exe="/syz-executor" sig=0 arch=40000003 syscall=77 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 154.345688][ T40] audit: type=1326 audit(1756632367.549:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.2.563" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 154.816079][ T8105] kAFS: No cell specified [ 155.186450][ T34] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 155.294451][ T8120] kAFS: No cell specified [ 155.336530][ T34] usb 6-1: Using ep0 maxpacket: 16 [ 155.339419][ T34] usb 6-1: too many configurations: 123, using maximum allowed: 8 [ 155.347135][ T34] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.357711][ T34] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.363097][ T34] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.369544][ T34] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.373729][ T8123] netlink: 32 bytes leftover after parsing attributes in process `syz.2.574'. [ 155.375187][ T34] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.382150][ T34] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.387032][ T34] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.391970][ T34] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.397307][ T34] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 155.401629][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 155.405265][ T34] usb 6-1: SerialNumber: syz [ 155.411704][ T34] usb 6-1: config 0 descriptor?? [ 155.419121][ T34] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input17 [ 155.644804][ T8108] input: syz1 as /devices/virtual/input/input18 [ 155.670624][ T56] usb 6-1: USB disconnect, device number 9 [ 155.671528][ T5977] bcm5974 6-1:0.0: could not read from device [ 155.678720][ T5369] bcm5974 6-1:0.0: could not read from device [ 156.096316][ T8133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.576'. [ 156.365263][ T8137] sctp: [Deprecated]: syz.3.578 (pid 8137) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.365263][ T8137] Use struct sctp_sack_info instead [ 156.954326][ T8152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.583'. [ 157.194938][ T8170] sctp: [Deprecated]: syz.2.589 (pid 8170) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.194938][ T8170] Use struct sctp_sack_info instead [ 157.686568][ T8186] FAULT_INJECTION: forcing a failure. [ 157.686568][ T8186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.696358][ T8186] CPU: 2 UID: 0 PID: 8186 Comm: syz.1.593 Not tainted syzkaller #0 PREEMPT(full) [ 157.696382][ T8186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 157.696391][ T8186] Call Trace: [ 157.696477][ T8186] [ 157.696495][ T8186] dump_stack_lvl+0x16c/0x1f0 [ 157.696521][ T8186] should_fail_ex+0x512/0x640 [ 157.696614][ T8186] _copy_to_user+0x32/0xd0 [ 157.696634][ T8186] bpf_test_finish.isra.0+0x53c/0x6e0 [ 157.696656][ T8186] ? do_csum+0x26f/0x2d0 [ 157.696671][ T8186] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 157.696690][ T8186] ? csum_partial+0x46/0x60 [ 157.696705][ T8186] ? skb_checksum+0x81f/0x980 [ 157.696727][ T8186] bpf_prog_test_run_skb+0x1368/0x2280 [ 157.696863][ T8186] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 157.696879][ T8186] ? fput+0x9b/0xd0 [ 157.696899][ T8186] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 157.696918][ T8186] __sys_bpf+0x104d/0x4de0 [ 157.696977][ T8186] ? __pfx___sys_bpf+0x10/0x10 [ 157.697000][ T8186] ? ksys_write+0x190/0x250 [ 157.697021][ T8186] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 157.697057][ T8186] ? fput+0x9b/0xd0 [ 157.697093][ T8186] ? ksys_write+0x1ac/0x250 [ 157.697113][ T8186] ? __pfx_ksys_write+0x10/0x10 [ 157.697135][ T8186] __ia32_sys_bpf+0x76/0xe0 [ 157.697154][ T8186] __do_fast_syscall_32+0x7c/0x3a0 [ 157.697172][ T8186] do_fast_syscall_32+0x32/0x80 [ 157.697187][ T8186] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 157.697202][ T8186] RIP: 0023:0xf7f76579 [ 157.697214][ T8186] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 157.697226][ T8186] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 157.697238][ T8186] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800002c0 [ 157.697245][ T8186] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 157.697251][ T8186] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 157.697257][ T8186] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 157.697263][ T8186] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.697277][ T8186] [ 158.658889][ T8206] sctp: [Deprecated]: syz.0.599 (pid 8206) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.658889][ T8206] Use struct sctp_sack_info instead [ 158.897331][ T8220] could not open pipe file descriptor [ 159.047583][ T8232] FAULT_INJECTION: forcing a failure. [ 159.047583][ T8232] name failslab, interval 1, probability 0, space 0, times 0 [ 159.054249][ T8232] CPU: 1 UID: 0 PID: 8232 Comm: syz.3.608 Not tainted syzkaller #0 PREEMPT(full) [ 159.054270][ T8232] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 159.054278][ T8232] Call Trace: [ 159.054284][ T8232] [ 159.054290][ T8232] dump_stack_lvl+0x16c/0x1f0 [ 159.054312][ T8232] should_fail_ex+0x512/0x640 [ 159.054330][ T8232] ? fs_reclaim_acquire+0xae/0x150 [ 159.054351][ T8232] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 159.054370][ T8232] should_failslab+0xc2/0x120 [ 159.054386][ T8232] __kmalloc_noprof+0xd2/0x510 [ 159.054405][ T8232] tomoyo_realpath_from_path+0xc2/0x6e0 [ 159.054425][ T8232] ? tomoyo_profile+0x47/0x60 [ 159.054438][ T8232] tomoyo_path_number_perm+0x245/0x580 [ 159.054453][ T8232] ? tomoyo_path_number_perm+0x237/0x580 [ 159.054470][ T8232] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 159.054505][ T8232] ? find_held_lock+0x2b/0x80 [ 159.054518][ T8232] ? hook_file_ioctl_common+0x145/0x410 [ 159.054539][ T8232] ? __fget_files+0x20e/0x3c0 [ 159.054559][ T8232] security_file_ioctl_compat+0x9b/0x240 [ 159.054578][ T8232] __ia32_compat_sys_ioctl+0xc3/0x370 [ 159.054600][ T8232] __do_fast_syscall_32+0x7c/0x3a0 [ 159.054620][ T8232] do_fast_syscall_32+0x32/0x80 [ 159.054637][ T8232] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 159.054653][ T8232] RIP: 0023:0xf705e579 [ 159.054664][ T8232] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 159.054676][ T8232] RSP: 002b:00000000f544e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 159.054689][ T8232] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000402c542c [ 159.054697][ T8232] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 159.054704][ T8232] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 159.054711][ T8232] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 159.054718][ T8232] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 159.054733][ T8232] [ 159.054739][ T8232] ERROR: Out of memory at tomoyo_realpath_from_path. [ 159.319089][ T10] IPVS: starting estimator thread 0... [ 159.323570][ T8244] tipc: Started in network mode [ 159.328970][ T8244] tipc: Node identity ac1414aa, cluster identity 4711 [ 159.332956][ T8244] tipc: Enabled bearer , priority 10 [ 159.426561][ T8245] IPVS: using max 41 ests per chain, 98400 per kthread [ 159.755625][ T8273] FAULT_INJECTION: forcing a failure. [ 159.755625][ T8273] name failslab, interval 1, probability 0, space 0, times 0 [ 159.761147][ T8273] CPU: 1 UID: 0 PID: 8273 Comm: syz.2.623 Not tainted syzkaller #0 PREEMPT(full) [ 159.761187][ T8273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 159.761198][ T8273] Call Trace: [ 159.761204][ T8273] [ 159.761211][ T8273] dump_stack_lvl+0x16c/0x1f0 [ 159.761239][ T8273] should_fail_ex+0x512/0x640 [ 159.761262][ T8273] ? fs_reclaim_acquire+0xae/0x150 [ 159.761286][ T8273] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 159.761309][ T8273] should_failslab+0xc2/0x120 [ 159.761332][ T8273] __kmalloc_noprof+0xd2/0x510 [ 159.761360][ T8273] tomoyo_realpath_from_path+0xc2/0x6e0 [ 159.761385][ T8273] ? tomoyo_profile+0x47/0x60 [ 159.761397][ T8273] tomoyo_path_number_perm+0x245/0x580 [ 159.761411][ T8273] ? tomoyo_path_number_perm+0x237/0x580 [ 159.761426][ T8273] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 159.761456][ T8273] ? find_held_lock+0x2b/0x80 [ 159.761469][ T8273] ? hook_file_ioctl_common+0x145/0x410 [ 159.761488][ T8273] ? __fget_files+0x20e/0x3c0 [ 159.761504][ T8273] security_file_ioctl_compat+0x9b/0x240 [ 159.761520][ T8273] __ia32_compat_sys_ioctl+0xc3/0x370 [ 159.761541][ T8273] __do_fast_syscall_32+0x7c/0x3a0 [ 159.761560][ T8273] do_fast_syscall_32+0x32/0x80 [ 159.761576][ T8273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 159.761591][ T8273] RIP: 0023:0xf70ce579 [ 159.761601][ T8273] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 159.761612][ T8273] RSP: 002b:00000000f54be55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 159.761624][ T8273] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000b704 [ 159.761631][ T8273] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 159.761638][ T8273] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 159.761644][ T8273] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 159.761651][ T8273] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 159.761665][ T8273] [ 159.761690][ T8273] ERROR: Out of memory at tomoyo_realpath_from_path. [ 160.337456][ T10] tipc: Node number set to 2886997162 [ 161.033145][ T8317] FAULT_INJECTION: forcing a failure. [ 161.033145][ T8317] name failslab, interval 1, probability 0, space 0, times 0 [ 161.040497][ T8317] CPU: 2 UID: 0 PID: 8317 Comm: syz.1.639 Not tainted syzkaller #0 PREEMPT(full) [ 161.040554][ T8317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 161.040566][ T8317] Call Trace: [ 161.040572][ T8317] [ 161.040581][ T8317] dump_stack_lvl+0x16c/0x1f0 [ 161.040608][ T8317] should_fail_ex+0x512/0x640 [ 161.040627][ T8317] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 161.040645][ T8317] should_failslab+0xc2/0x120 [ 161.040663][ T8317] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 161.040678][ T8317] ? __alloc_skb+0x2b2/0x380 [ 161.040697][ T8317] __alloc_skb+0x2b2/0x380 [ 161.040712][ T8317] ? __pfx___alloc_skb+0x10/0x10 [ 161.040726][ T8317] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 161.040744][ T8317] netlink_ack+0x15d/0xb80 [ 161.040768][ T8317] netlink_rcv_skb+0x332/0x420 [ 161.040785][ T8317] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 161.040811][ T8317] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 161.040834][ T8317] ? netlink_deliver_tap+0x1ae/0xd30 [ 161.040853][ T8317] netlink_unicast+0x5a7/0x870 [ 161.040872][ T8317] ? __pfx_netlink_unicast+0x10/0x10 [ 161.040889][ T8317] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 161.040911][ T8317] netlink_sendmsg+0x8d1/0xdd0 [ 161.040930][ T8317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.040949][ T8317] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 161.040966][ T8317] ____sys_sendmsg+0xa98/0xc70 [ 161.040980][ T8317] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.040991][ T8317] ? get_compat_msghdr+0x11a/0x170 [ 161.041014][ T8317] ___sys_sendmsg+0x134/0x1d0 [ 161.041032][ T8317] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.041055][ T8317] ? find_held_lock+0x2b/0x80 [ 161.041078][ T8317] __sys_sendmsg+0x16d/0x220 [ 161.041095][ T8317] ? __pfx___sys_sendmsg+0x10/0x10 [ 161.041118][ T8317] ? rcu_is_watching+0x12/0xc0 [ 161.041133][ T8317] __do_fast_syscall_32+0x7c/0x3a0 [ 161.041152][ T8317] do_fast_syscall_32+0x32/0x80 [ 161.041169][ T8317] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 161.041187][ T8317] RIP: 0023:0xf7f76579 [ 161.041198][ T8317] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 161.041211][ T8317] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 161.041223][ T8317] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 161.041231][ T8317] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 161.041238][ T8317] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 161.041245][ T8317] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 161.041252][ T8317] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 161.041267][ T8317] [ 161.557907][ T8324] fuse: Bad value for 'fd' [ 161.929395][ T8329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.641'. [ 162.385128][ T8334] netlink: 24 bytes leftover after parsing attributes in process `syz.1.644'. [ 162.726394][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 162.844239][ T8347] FAULT_INJECTION: forcing a failure. [ 162.844239][ T8347] name failslab, interval 1, probability 0, space 0, times 0 [ 162.849484][ T8347] CPU: 2 UID: 0 PID: 8347 Comm: syz.2.648 Not tainted syzkaller #0 PREEMPT(full) [ 162.849510][ T8347] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 162.849521][ T8347] Call Trace: [ 162.849527][ T8347] [ 162.849534][ T8347] dump_stack_lvl+0x16c/0x1f0 [ 162.849555][ T8347] should_fail_ex+0x512/0x640 [ 162.849577][ T8347] should_failslab+0xc2/0x120 [ 162.849594][ T8347] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 162.849610][ T8347] ? skb_clone+0x190/0x3f0 [ 162.849629][ T8347] skb_clone+0x190/0x3f0 [ 162.849646][ T8347] netlink_deliver_tap+0xabd/0xd30 [ 162.849666][ T8347] netlink_unicast+0x64c/0x870 [ 162.849685][ T8347] ? __pfx_netlink_unicast+0x10/0x10 [ 162.849702][ T8347] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 162.849723][ T8347] netlink_sendmsg+0x8d1/0xdd0 [ 162.849743][ T8347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.849762][ T8347] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 162.849779][ T8347] ____sys_sendmsg+0xa98/0xc70 [ 162.849793][ T8347] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.849803][ T8347] ? get_compat_msghdr+0x11a/0x170 [ 162.849826][ T8347] ___sys_sendmsg+0x134/0x1d0 [ 162.849843][ T8347] ? __pfx____sys_sendmsg+0x10/0x10 [ 162.849866][ T8347] ? find_held_lock+0x2b/0x80 [ 162.849888][ T8347] __sys_sendmsg+0x16d/0x220 [ 162.849905][ T8347] ? __pfx___sys_sendmsg+0x10/0x10 [ 162.849928][ T8347] ? rcu_is_watching+0x12/0xc0 [ 162.849942][ T8347] __do_fast_syscall_32+0x7c/0x3a0 [ 162.849961][ T8347] do_fast_syscall_32+0x32/0x80 [ 162.849978][ T8347] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 162.849994][ T8347] RIP: 0023:0xf70ce579 [ 162.850004][ T8347] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 162.850017][ T8347] RSP: 002b:00000000f54be55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 162.850030][ T8347] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 162.850043][ T8347] RDX: 0000000024044080 RSI: 0000000000000000 RDI: 0000000000000000 [ 162.850050][ T8347] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 162.850057][ T8347] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 162.850064][ T8347] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 162.850078][ T8347] [ 162.965399][ T10] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 162.969547][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.973085][ T10] usb 6-1: Product: syz [ 162.975228][ T10] usb 6-1: Manufacturer: syz [ 162.977277][ T10] usb 6-1: SerialNumber: syz [ 163.173072][ T8357] FAULT_INJECTION: forcing a failure. [ 163.173072][ T8357] name failslab, interval 1, probability 0, space 0, times 0 [ 163.177732][ T8357] CPU: 1 UID: 0 PID: 8357 Comm: syz.2.649 Not tainted syzkaller #0 PREEMPT(full) [ 163.177765][ T8357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 163.177774][ T8357] Call Trace: [ 163.177780][ T8357] [ 163.177785][ T8357] dump_stack_lvl+0x16c/0x1f0 [ 163.177810][ T8357] should_fail_ex+0x512/0x640 [ 163.177829][ T8357] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 163.177846][ T8357] should_failslab+0xc2/0x120 [ 163.177863][ T8357] __kmalloc_cache_noprof+0x6a/0x3e0 [ 163.177877][ T8357] ? ovs_flow_tbl_init+0x8b/0x600 [ 163.177896][ T8357] ovs_flow_tbl_init+0x8b/0x600 [ 163.177913][ T8357] ovs_dp_cmd_new+0x251/0xe60 [ 163.177934][ T8357] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 163.177954][ T8357] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 163.177977][ T8357] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 163.178003][ T8357] genl_family_rcv_msg_doit+0x209/0x2f0 [ 163.178025][ T8357] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 163.178057][ T8357] ? bpf_lsm_capable+0x9/0x10 [ 163.178069][ T8357] ? security_capable+0x7e/0x260 [ 163.178084][ T8357] ? ns_capable+0xd7/0x110 [ 163.178102][ T8357] genl_rcv_msg+0x55c/0x800 [ 163.178116][ T8357] ? __pfx_genl_rcv_msg+0x10/0x10 [ 163.178137][ T8357] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 163.178159][ T8357] netlink_rcv_skb+0x158/0x420 [ 163.178177][ T8357] ? __pfx_genl_rcv_msg+0x10/0x10 [ 163.178199][ T8357] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 163.178224][ T8357] ? netlink_deliver_tap+0x1ae/0xd30 [ 163.178245][ T8357] genl_rcv+0x28/0x40 [ 163.178263][ T8357] netlink_unicast+0x5a7/0x870 [ 163.178284][ T8357] ? __pfx_netlink_unicast+0x10/0x10 [ 163.178302][ T8357] ? __pfx___might_resched+0x10/0x10 [ 163.178322][ T8357] netlink_sendmsg+0x8d1/0xdd0 [ 163.178343][ T8357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.178364][ T8357] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 163.178382][ T8357] ____sys_sendmsg+0xa98/0xc70 [ 163.178398][ T8357] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.178410][ T8357] ? get_compat_msghdr+0x11a/0x170 [ 163.178435][ T8357] ___sys_sendmsg+0x134/0x1d0 [ 163.178454][ T8357] ? __pfx____sys_sendmsg+0x10/0x10 [ 163.178481][ T8357] ? find_held_lock+0x2b/0x80 [ 163.178505][ T8357] __sys_sendmsg+0x16d/0x220 [ 163.178524][ T8357] ? __pfx___sys_sendmsg+0x10/0x10 [ 163.178549][ T8357] ? rcu_is_watching+0x12/0xc0 [ 163.178566][ T8357] __do_fast_syscall_32+0x7c/0x3a0 [ 163.178587][ T8357] do_fast_syscall_32+0x32/0x80 [ 163.178605][ T8357] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 163.178622][ T8357] RIP: 0023:0xf70ce579 [ 163.178634][ T8357] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 163.178647][ T8357] RSP: 002b:00000000f547c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 163.178660][ T8357] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000000 [ 163.178668][ T8357] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 163.178676][ T8357] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 163.178683][ T8357] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 163.178691][ T8357] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 163.178707][ T8357] [ 163.480141][ T10] rtl8150 6-1:1.0: couldn't reset the device [ 163.482437][ T10] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 163.488443][ T10] usb 6-1: USB disconnect, device number 10 [ 163.856593][ T8367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.652'. [ 164.757953][ T8375] syzkaller1: entered promiscuous mode [ 164.757973][ T8375] syzkaller1: entered allmulticast mode [ 164.891923][ T8381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'. [ 166.460746][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.468738][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.931139][ T8428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.667'. [ 168.643738][ T8445] netlink: 'syz.3.673': attribute type 27 has an invalid length. [ 168.728629][ T8445] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.731230][ T8445] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.816558][ T8445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.823167][ T8445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.943143][ T92] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.947462][ T92] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.950117][ T92] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.952641][ T92] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.490655][ T8465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.679'. [ 170.446049][ T8473] overlay: ./file1 is not a directory [ 170.514758][ T8479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.681'. [ 170.584913][ T8479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.681'. [ 170.595835][ T8479] netlink: 2812 bytes leftover after parsing attributes in process `syz.2.681'. [ 171.440470][ T8490] sctp: [Deprecated]: syz.2.688 (pid 8490) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.440470][ T8490] Use struct sctp_sack_info instead [ 171.525158][ T8493] fuse: Unknown parameter '0x000000000000000a' [ 171.844452][ T8504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.692'. [ 172.417952][ T8510] netlink: 512 bytes leftover after parsing attributes in process `syz.0.693'. [ 172.892831][ T8520] bridge_slave_0: left allmulticast mode [ 172.894627][ T8520] bridge_slave_0: left promiscuous mode [ 172.903858][ T8520] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.925496][ T8520] bridge_slave_1: left allmulticast mode [ 172.927887][ T8520] bridge_slave_1: left promiscuous mode [ 172.946623][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 172.952901][ T8520] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.994177][ T8520] bond0: (slave bond_slave_0): Releasing backup interface [ 173.055326][ T8520] bond0: (slave bond_slave_1): Releasing backup interface [ 173.059986][ T8522] fuse: Unknown parameter '0x000000000000000a' [ 173.066927][ T8530] netlink: 'syz.0.695': attribute type 10 has an invalid length. [ 173.118339][ T8520] team0: Port device team_slave_0 removed [ 173.166164][ T8520] team0: Port device team_slave_1 removed [ 173.171252][ T8520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.175048][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.695'. [ 173.178434][ T8520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.183287][ T8520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.185817][ T8520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.207202][ T6061] vxcan1 speed is unknown, defaulting to 1000 [ 173.306563][ T8527] team0: Mode changed to "loadbalance" [ 173.347385][ T8530] team0: Port device bond0 added [ 173.509893][ T8531] team0 (unregistering): Port device bond0 removed [ 174.271482][ T8546] 9pnet_fd: Insufficient options for proto=fd [ 174.660166][ T8552] tipc: Failed to remove unknown binding: 66,1,1/2886997162:338034620/338034622 [ 174.663131][ T8552] tipc: Failed to remove unknown binding: 66,1,1/2886997162:338034620/338034622 [ 174.671203][ T8552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.166569][ T6042] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 175.253167][ T8571] overlay: ./file1 is not a directory [ 175.716329][ T6042] usb 7-1: Using ep0 maxpacket: 16 [ 175.990429][ T6042] usb 7-1: too many configurations: 123, using maximum allowed: 8 [ 176.134030][ T8577] netlink: 28 bytes leftover after parsing attributes in process `syz.1.714'. [ 176.243480][ T6042] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.253001][ T6042] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.259377][ T6042] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.264841][ T6042] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.269721][ T6042] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.274956][ T6042] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.280480][ T6042] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.285860][ T6042] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.291219][ T6042] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 176.294791][ T6042] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 176.298710][ T6042] usb 7-1: SerialNumber: syz [ 176.304297][ T6042] usb 7-1: config 0 descriptor?? [ 176.309890][ T6042] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input19 [ 176.518086][ T8558] input: syz1 as /devices/virtual/input/input20 [ 176.531292][ T5369] bcm5974 7-1:0.0: could not read from device [ 176.534960][ T5369] bcm5974 7-1:0.0: could not read from device [ 176.665881][ T5369] bcm5974 7-1:0.0: could not read from device [ 176.668816][ T6042] usb 7-1: USB disconnect, device number 8 [ 176.668878][ T5369] bcm5974 7-1:0.0: could not read from device [ 176.685943][ T6065] udevd[6065]: setting owner of /dev/bus/usb/007/008 to uid=0, gid=0 failed: No such file or directory [ 178.619354][ T5985] Process accounting resumed [ 178.635627][ T8621] input: syz0 as /devices/virtual/input/input21 [ 178.645949][ T8623] netlink: 32 bytes leftover after parsing attributes in process `syz.3.728'. [ 178.779183][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 178.980818][ T8629] wireguard0: entered promiscuous mode [ 178.983462][ T8629] wireguard0: entered allmulticast mode [ 179.551729][ T8643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.735'. [ 179.583631][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.624941][ T8643] FAULT_INJECTION: forcing a failure. [ 179.624941][ T8643] name failslab, interval 1, probability 0, space 0, times 0 [ 179.629705][ T8643] CPU: 3 UID: 0 PID: 8643 Comm: syz.0.735 Not tainted syzkaller #0 PREEMPT(full) [ 179.629726][ T8643] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 179.629734][ T8643] Call Trace: [ 179.629739][ T8643] [ 179.629745][ T8643] dump_stack_lvl+0x16c/0x1f0 [ 179.629769][ T8643] should_fail_ex+0x512/0x640 [ 179.629786][ T8643] ? fs_reclaim_acquire+0xae/0x150 [ 179.629804][ T8643] ? tomoyo_encode2+0x100/0x3e0 [ 179.629820][ T8643] should_failslab+0xc2/0x120 [ 179.629838][ T8643] __kmalloc_noprof+0xd2/0x510 [ 179.629854][ T8643] tomoyo_encode2+0x100/0x3e0 [ 179.629871][ T8643] tomoyo_encode+0x29/0x50 [ 179.629885][ T8643] tomoyo_realpath_from_path+0x18f/0x6e0 [ 179.629902][ T8643] ? tomoyo_profile+0x47/0x60 [ 179.629913][ T8643] tomoyo_path_number_perm+0x245/0x580 [ 179.629925][ T8643] ? tomoyo_path_number_perm+0x237/0x580 [ 179.629939][ T8643] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 179.629967][ T8643] ? find_held_lock+0x2b/0x80 [ 179.629979][ T8643] ? hook_file_ioctl_common+0x145/0x410 [ 179.629998][ T8643] ? __fget_files+0x20e/0x3c0 [ 179.630013][ T8643] security_file_ioctl_compat+0x9b/0x240 [ 179.630029][ T8643] __ia32_compat_sys_ioctl+0xc3/0x370 [ 179.630048][ T8643] __do_fast_syscall_32+0x7c/0x3a0 [ 179.630066][ T8643] do_fast_syscall_32+0x32/0x80 [ 179.630081][ T8643] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 179.630096][ T8643] RIP: 0023:0xf7ff6579 [ 179.630105][ T8643] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 179.630117][ T8643] RSP: 002b:00000000f550655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 179.630128][ T8643] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000c048aeca [ 179.630135][ T8643] RDX: 0000000080003680 RSI: 0000000000000000 RDI: 0000000000000000 [ 179.630141][ T8643] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 179.630147][ T8643] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 179.630153][ T8643] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 179.630166][ T8643] [ 179.630221][ T8643] ERROR: Out of memory at tomoyo_realpath_from_path. [ 179.734785][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.865069][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.990294][ T5981] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 180.008643][ T5981] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 180.015820][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.016311][ T5981] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 180.024908][ T5981] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 180.038168][ T5981] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 180.060400][ T8656] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 180.062567][ T8656] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 180.063869][ T8652] vxcan1 speed is unknown, defaulting to 1000 [ 180.070764][ T8656] vhci_hcd vhci_hcd.0: Device attached [ 180.081283][ T8657] vhci_hcd: connection closed [ 180.081542][ T1172] vhci_hcd: stop threads [ 180.086072][ T1172] vhci_hcd: release socket [ 180.087634][ T1172] vhci_hcd: disconnect device [ 180.105207][ T8660] tipc: Started in network mode [ 180.107605][ T8660] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 180.111432][ T8660] tipc: Enabled bearer , priority 10 [ 180.508593][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.515039][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.522513][ T61] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 180.530419][ T61] bond0 (unregistering): Released all slaves [ 180.540693][ T8652] lo speed is unknown, defaulting to 1000 [ 180.622945][ T61] : left promiscuous mode [ 180.778753][ T61] tipc: Disabling bearer [ 180.787072][ T61] tipc: Left network mode [ 180.817183][ T8678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.743'. [ 181.248087][ T6061] tipc: Node number set to 10005162 [ 181.391564][ T8652] chnl_net:caif_netlink_parms(): no params data found [ 181.694786][ T8700] smc: removing ib device syz1 [ 182.056384][ T5987] Bluetooth: hci2: command tx timeout [ 182.623624][ T8696] lo speed is unknown, defaulting to 1000 [ 182.629816][ T8696] lo speed is unknown, defaulting to 1000 [ 182.639703][ T8696] lo speed is unknown, defaulting to 1000 [ 182.797806][ T8696] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 182.979712][ T8696] lo speed is unknown, defaulting to 1000 [ 182.984196][ T8652] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.996514][ T8652] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.999009][ T8652] bridge_slave_0: entered allmulticast mode [ 183.021317][ T8652] bridge_slave_0: entered promiscuous mode [ 183.041472][ T8652] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.051030][ T8652] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.054463][ T8652] bridge_slave_1: entered allmulticast mode [ 183.087807][ T8652] bridge_slave_1: entered promiscuous mode [ 183.107219][ T8696] lo speed is unknown, defaulting to 1000 [ 183.239567][ T8696] lo speed is unknown, defaulting to 1000 [ 183.422632][ T8652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.459804][ T8696] lo speed is unknown, defaulting to 1000 [ 183.504774][ T8652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.643937][ T8696] lo speed is unknown, defaulting to 1000 [ 183.821607][ T8652] team0: Port device team_slave_0 added [ 183.831378][ T8652] team0: Port device team_slave_1 added [ 184.136531][ T5987] Bluetooth: hci2: command tx timeout [ 184.195612][ T8652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.199130][ T8652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.212032][ T8652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.225430][ T61] hsr_slave_0: left promiscuous mode [ 184.265201][ T61] hsr_slave_1: left promiscuous mode [ 184.273577][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.279218][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.282714][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.287505][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.367429][ T61] veth1_macvtap: left promiscuous mode [ 184.375111][ T61] veth0_macvtap: left promiscuous mode [ 184.378632][ T61] veth1_vlan: left promiscuous mode [ 184.383775][ T61] veth0_vlan: left promiscuous mode [ 184.434071][ T8741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.754'. [ 185.252549][ T8744] FAULT_INJECTION: forcing a failure. [ 185.252549][ T8744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.258943][ T8744] CPU: 3 UID: 0 PID: 8744 Comm: syz.3.755 Not tainted syzkaller #0 PREEMPT(full) [ 185.258961][ T8744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 185.258983][ T8744] Call Trace: [ 185.258989][ T8744] [ 185.258994][ T8744] dump_stack_lvl+0x16c/0x1f0 [ 185.259017][ T8744] should_fail_ex+0x512/0x640 [ 185.259038][ T8744] _copy_from_user+0x2e/0xd0 [ 185.259060][ T8744] get_compat_msghdr+0xa7/0x170 [ 185.259076][ T8744] ? __pfx_get_compat_msghdr+0x10/0x10 [ 185.259096][ T8744] ___sys_sendmsg+0x1ae/0x1d0 [ 185.259113][ T8744] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.259135][ T8744] ? find_held_lock+0x2b/0x80 [ 185.259158][ T8744] __sys_sendmsg+0x16d/0x220 [ 185.259173][ T8744] ? __pfx___sys_sendmsg+0x10/0x10 [ 185.259195][ T8744] ? rcu_is_watching+0x12/0xc0 [ 185.259210][ T8744] __do_fast_syscall_32+0x7c/0x3a0 [ 185.259228][ T8744] do_fast_syscall_32+0x32/0x80 [ 185.259244][ T8744] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 185.259259][ T8744] RIP: 0023:0xf705e579 [ 185.259268][ T8744] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 185.259280][ T8744] RSP: 002b:00000000f544e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 185.259297][ T8744] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 185.259307][ T8744] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 185.259317][ T8744] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 185.259326][ T8744] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 185.259336][ T8744] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 185.259359][ T8744] [ 185.260086][ T8744] netlink: 28 bytes leftover after parsing attributes in process `syz.3.755'. [ 185.329133][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.755'. [ 185.845633][ T61] team0 (unregistering): Port device team_slave_1 removed [ 185.961361][ T61] team0 (unregistering): Port device team_slave_0 removed [ 186.223245][ T5987] Bluetooth: hci2: command tx timeout [ 186.751487][ T8652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.755900][ T8652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.769069][ T8652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.778854][ T5985] lo speed is unknown, defaulting to 1000 [ 186.786564][ T5985] infiniband syz0: ib_query_port failed (-19) [ 186.815467][ T8754] netlink: 'syz.1.757': attribute type 1 has an invalid length. [ 186.819937][ T8754] netlink: 224 bytes leftover after parsing attributes in process `syz.1.757'. [ 186.879497][ T8652] hsr_slave_0: entered promiscuous mode [ 186.883900][ T8652] hsr_slave_1: entered promiscuous mode [ 187.318032][ T8652] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 187.335977][ T8652] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 187.353402][ T8652] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 187.361217][ T8773] netlink: 260 bytes leftover after parsing attributes in process `syz.0.761'. [ 187.384009][ T8652] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 187.428114][ T61] IPVS: stop unused estimator thread 0... [ 187.590752][ T8652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.653226][ T8652] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.677620][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.681337][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.724089][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.727291][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.048548][ T8652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.110269][ T8799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.178854][ T8799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.237929][ T8799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.296706][ T5987] Bluetooth: hci2: command tx timeout [ 188.367130][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 188.367177][ T40] audit: type=1326 audit(2000000015.609:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8812 comm="syz.3.765" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 188.394407][ T40] audit: type=1326 audit(2000000015.609:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8812 comm="syz.3.765" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 188.402684][ T40] audit: type=1326 audit(2000000015.619:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8812 comm="syz.3.765" exe="/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 188.413957][ T40] audit: type=1326 audit(2000000015.619:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8812 comm="syz.3.765" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 188.424166][ T40] audit: type=1326 audit(2000000015.619:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8812 comm="syz.3.765" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 188.446884][ T8652] veth0_vlan: entered promiscuous mode [ 188.476468][ T8652] veth1_vlan: entered promiscuous mode [ 188.625692][ T8652] veth0_macvtap: entered promiscuous mode [ 188.647594][ T8652] veth1_macvtap: entered promiscuous mode [ 188.815118][ T8652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.884044][ T8652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.924657][ T1172] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.928705][ T1172] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.934848][ T1172] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.963235][ T1172] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.248310][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.253159][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.280172][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.308111][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.362273][ T8835] overlayfs: missing 'lowerdir' [ 190.196831][ T34] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 190.336930][ T34] usb 6-1: device descriptor read/64, error -71 [ 190.576931][ T34] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 190.726368][ T34] usb 6-1: device descriptor read/64, error -71 [ 190.860621][ T34] usb usb6-port1: attempt power cycle [ 191.379149][ T34] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 191.410793][ T34] usb 6-1: device descriptor read/8, error -71 [ 191.657029][ T34] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 191.685718][ T34] usb 6-1: device descriptor read/8, error -71 [ 191.810436][ T34] usb usb6-port1: unable to enumerate USB device [ 192.915004][ T8899] netlink: 'syz.0.779': attribute type 1 has an invalid length. [ 192.917926][ T8899] netlink: 'syz.0.779': attribute type 4 has an invalid length. [ 192.931900][ T8899] lo: entered promiscuous mode [ 192.934320][ T8899] lo: entered allmulticast mode [ 193.177802][ T40] audit: type=1800 audit(2000000020.419:125): pid=8906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.781" name="bus" dev="overlay" ino=1051 res=0 errno=0 [ 193.201527][ T8906] evm: overlay not supported [ 193.376410][ T839] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 193.576732][ T839] usb 6-1: Using ep0 maxpacket: 16 [ 193.581691][ T839] usb 6-1: too many configurations: 123, using maximum allowed: 8 [ 193.732339][ T839] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.762713][ T839] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.768469][ T839] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.778791][ T839] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.788732][ T839] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.795619][ T839] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.812836][ T839] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.819299][ T839] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.824974][ T839] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 193.829676][ T839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 193.834187][ T839] usb 6-1: SerialNumber: syz [ 193.842305][ T839] usb 6-1: config 0 descriptor?? [ 193.850239][ T839] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input22 [ 194.073874][ T8902] input: syz1 as /devices/virtual/input/input23 [ 194.088985][ T5369] bcm5974 6-1:0.0: could not read from device [ 194.095355][ T5369] bcm5974 6-1:0.0: could not read from device [ 194.099622][ T839] usb 6-1: USB disconnect, device number 15 [ 194.159925][ T8915] netlink: 24 bytes leftover after parsing attributes in process `syz.0.783'. [ 194.196486][ T6061] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 194.368243][ T6061] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 194.374362][ T6061] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 194.378624][ T6061] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 194.384584][ T6061] usb 9-1: config 0 interface 0 has no altsetting 0 [ 194.388389][ T6061] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 194.392265][ T6061] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 194.397175][ T6061] usb 9-1: config 0 interface 0 has no altsetting 0 [ 194.401747][ T6061] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 194.406840][ T6061] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 194.411757][ T6061] usb 9-1: config 0 interface 0 has no altsetting 0 [ 194.416052][ T6061] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 194.420288][ T6061] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 194.425649][ T6061] usb 9-1: config 0 interface 0 has no altsetting 0 [ 194.431159][ T6061] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 194.435109][ T6061] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 194.439878][ T6061] usb 9-1: config 0 interface 0 has no altsetting 0 [ 194.444479][ T6061] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 194.447787][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 194.449501][ T6061] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 194.456090][ T6061] usb 9-1: config 0 interface 0 has no altsetting 0 [ 194.459957][ T6061] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 194.464179][ T6061] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 194.468901][ T6061] usb 9-1: config 0 interface 0 has no altsetting 0 [ 194.473302][ T6061] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 194.477498][ T6061] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 194.482752][ T6061] usb 9-1: config 0 interface 0 has no altsetting 0 [ 194.489006][ T6061] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 194.492940][ T6061] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 194.496830][ T6061] usb 9-1: Product: syz [ 194.498615][ T6061] usb 9-1: Manufacturer: syz [ 194.500159][ T6061] usb 9-1: SerialNumber: syz [ 194.503926][ T6061] usb 9-1: config 0 descriptor?? [ 194.513129][ T6061] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 194.601297][ T10] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 194.604678][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.608128][ T10] usb 5-1: Product: syz [ 194.609792][ T10] usb 5-1: Manufacturer: syz [ 194.611885][ T10] usb 5-1: SerialNumber: syz [ 195.126719][ T10] rtl8150 5-1:1.0: couldn't reset the device [ 195.127289][ T6042] usb 9-1: USB disconnect, device number 2 [ 195.129519][ T10] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 195.134094][ T6042] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 195.139671][ T10] usb 5-1: USB disconnect, device number 9 [ 195.837747][ T8932] /dev/sg0: Can't lookup blockdev [ 195.840049][ T8932] ubi: mtd0 is already attached to ubi8 [ 196.004642][ T8934] sctp: [Deprecated]: syz.1.788 (pid 8934) Use of struct sctp_assoc_value in delayed_ack socket option. [ 196.004642][ T8934] Use struct sctp_sack_info instead [ 197.249696][ T8962] netlink: 24 bytes leftover after parsing attributes in process `syz.4.795'. [ 197.516443][ T6042] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 197.669635][ T6042] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 197.672942][ T6042] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.158274][ T6042] usb 9-1: Product: syz [ 198.159868][ T6042] usb 9-1: Manufacturer: syz [ 198.161553][ T6042] usb 9-1: SerialNumber: syz [ 198.297264][ T40] audit: type=1800 audit(2000000025.539:126): pid=8990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.800" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 198.649345][ T6042] rtl8150 9-1:1.0: couldn't reset the device [ 198.656556][ T6042] rtl8150 9-1:1.0: probe with driver rtl8150 failed with error -5 [ 198.686455][ T6042] usb 9-1: USB disconnect, device number 3 [ 198.837216][ T8998] binder: 8997:8998 unknown command 0 [ 198.840012][ T8998] binder: 8997:8998 ioctl c0306201 80000080 returned -22 [ 198.853822][ T8998] netlink: 'syz.3.801': attribute type 1 has an invalid length. [ 198.857841][ T8998] netlink: 136 bytes leftover after parsing attributes in process `syz.3.801'. [ 198.861404][ T8998] netlink: 'syz.3.801': attribute type 2 has an invalid length. [ 198.864515][ T8998] netlink: 'syz.3.801': attribute type 1 has an invalid length. [ 198.870048][ T8998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.801'. [ 199.133409][ T9003] sctp: [Deprecated]: syz.0.803 (pid 9003) Use of struct sctp_assoc_value in delayed_ack socket option. [ 199.133409][ T9003] Use struct sctp_sack_info instead [ 199.561141][ T9026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.807'. [ 200.580516][ T9041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.809'. [ 200.897922][ T9052] usb usb7: usbfs: process 9052 (syz.0.813) did not claim interface 0 before use [ 201.082257][ T40] audit: type=1804 audit(2000000028.329:127): pid=9056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.814" name="/newroot/13/file1" dev="fuse" ino=1 res=1 errno=0 [ 201.732789][ T9072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.819'. [ 202.462793][ T9077] FAULT_INJECTION: forcing a failure. [ 202.462793][ T9077] name failslab, interval 1, probability 0, space 0, times 0 [ 202.478628][ T9077] CPU: 2 UID: 0 PID: 9077 Comm: syz.4.821 Not tainted syzkaller #0 PREEMPT(full) [ 202.478666][ T9077] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 202.478680][ T9077] Call Trace: [ 202.478692][ T9077] [ 202.478703][ T9077] dump_stack_lvl+0x16c/0x1f0 [ 202.478740][ T9077] should_fail_ex+0x512/0x640 [ 202.478768][ T9077] ? fs_reclaim_acquire+0xae/0x150 [ 202.478805][ T9077] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 202.478838][ T9077] should_failslab+0xc2/0x120 [ 202.478868][ T9077] __kmalloc_noprof+0xd2/0x510 [ 202.478896][ T9077] ? trace_kmalloc+0x2b/0xd0 [ 202.478926][ T9077] ? __kmalloc_noprof+0x242/0x510 [ 202.478957][ T9077] tomoyo_realpath_from_path+0xc2/0x6e0 [ 202.478993][ T9077] ? tomoyo_fill_path_info+0x233/0x420 [ 202.479023][ T9077] tomoyo_mount_acl+0x1ae/0x850 [ 202.479051][ T9077] ? bpf_ksym_find+0x124/0x1c0 [ 202.479078][ T9077] ? is_bpf_text_address+0x94/0x1a0 [ 202.479105][ T9077] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 202.479132][ T9077] ? __kernel_text_address+0xd/0x40 [ 202.479156][ T9077] ? unwind_get_return_address+0x59/0xa0 [ 202.479180][ T9077] ? arch_stack_walk+0xa6/0x100 [ 202.479250][ T9077] ? tomoyo_domain+0xbb/0x150 [ 202.479270][ T9077] ? tomoyo_profile+0x47/0x60 [ 202.479294][ T9077] tomoyo_mount_permission+0x16d/0x420 [ 202.479394][ T9077] ? tomoyo_mount_permission+0x14f/0x420 [ 202.479442][ T9077] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 202.479488][ T9077] security_sb_mount+0x9b/0x260 [ 202.479516][ T9077] path_mount+0x15f/0x2000 [ 202.479553][ T9077] ? __pfx_path_mount+0x10/0x10 [ 202.479582][ T9077] ? kmem_cache_free+0x2d1/0x4d0 [ 202.479610][ T9077] ? putname+0x154/0x1a0 [ 202.479636][ T9077] ? getname_flags.part.0+0x1c5/0x550 [ 202.479679][ T9077] ? __ia32_sys_mount+0x28b/0x310 [ 202.479709][ T9077] __ia32_sys_mount+0x28b/0x310 [ 202.479741][ T9077] ? __pfx___ia32_sys_mount+0x10/0x10 [ 202.479768][ T9077] ? rcu_is_watching+0x12/0xc0 [ 202.479795][ T9077] __do_fast_syscall_32+0x7c/0x3a0 [ 202.479827][ T9077] do_fast_syscall_32+0x32/0x80 [ 202.479859][ T9077] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 202.479890][ T9077] RIP: 0023:0xf701e579 [ 202.479908][ T9077] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 202.479931][ T9077] RSP: 002b:00000000f540e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 202.479951][ T9077] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000980 [ 202.479962][ T9077] RDX: 0000000000000000 RSI: 0000000000020025 RDI: 0000000000000000 [ 202.479971][ T9077] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 202.479978][ T9077] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 202.479986][ T9077] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 202.480004][ T9077] [ 202.480011][ T9077] ERROR: Out of memory at tomoyo_realpath_from_path. [ 202.614252][ T9087] FAULT_INJECTION: forcing a failure. [ 202.614252][ T9087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.615587][ T9087] [ 202.615596][ T9087] ====================================================== [ 202.615601][ T9087] WARNING: possible circular locking dependency detected [ 202.615605][ T9087] syzkaller #0 Not tainted [ 202.615611][ T9087] ------------------------------------------------------ SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 202.615615][ T9087] syz.3.824/9087 is trying to acquire lock: [ 202.615622][ T9087] ffffffff8e4ce6c0 (console_owner){-.-.}-{0:0}, at: vprintk_emit+0x4d4/0x6d0 [ 202.615650][ T9087] [ 202.615650][ T9087] but task is already holding lock: [ 202.615653][ T9087] ffff88802b23a458 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 202.615675][ T9087] [ 202.615675][ T9087] which lock already depends on the new lock. [ 202.615675][ T9087] [ 202.615678][ T9087] [ 202.615678][ T9087] the existing dependency chain (in reverse order) is: [ 202.615681][ T9087] [ 202.615681][ T9087] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 202.615694][ T9087] _raw_spin_lock_nested+0x31/0x40 [ 202.615707][ T9087] raw_spin_rq_lock_nested+0x29/0x130 [ 202.615716][ T9087] task_rq_lock+0xcf/0x490 [ 202.615724][ T9087] cgroup_move_task+0x81/0x2a0 [ 202.615735][ T9087] css_set_move_task+0x288/0x5f0 [ 202.615748][ T9087] cgroup_post_fork+0x201/0x9e0 [ 202.615758][ T9087] copy_process+0x5cfa/0x7690 [ 202.615770][ T9087] kernel_clone+0xfc/0x930 [ 202.615782][ T9087] user_mode_thread+0xc7/0x110 [ 202.615794][ T9087] rest_init+0x23/0x2b0 [ 202.615802][ T9087] start_kernel+0x3ee/0x4d0 [ 202.615813][ T9087] x86_64_start_reservations+0x18/0x30 [ 202.615824][ T9087] x86_64_start_kernel+0x130/0x190 [ 202.615834][ T9087] common_startup_64+0x13e/0x148 [ 202.615845][ T9087] [ 202.615845][ T9087] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 202.615857][ T9087] _raw_spin_lock_irqsave+0x3a/0x60 [ 202.615868][ T9087] try_to_wake_up+0xb7/0x1870 [ 202.615876][ T9087] __wake_up_common+0x135/0x1f0 [ 202.615889][ T9087] __wake_up+0x31/0x60 [ 202.615899][ T9087] tty_port_default_wakeup+0x2a/0x40 [ 202.615914][ T9087] serial8250_tx_chars+0x68e/0x860 [ 202.615929][ T9087] serial8250_handle_irq+0x761/0xcb0 [ 202.615944][ T9087] serial8250_default_handle_irq+0x9a/0x250 [ 202.615953][ T9087] serial8250_interrupt+0xf8/0x1b0 [ 202.615963][ T9087] __handle_irq_event_percpu+0x22c/0x7d0 [ 202.615972][ T9087] handle_irq_event+0xab/0x1e0 [ 202.615981][ T9087] handle_edge_irq+0x3ca/0x9e0 [ 202.615996][ T9087] __common_interrupt+0xcd/0x2f0 [ 202.616009][ T9087] common_interrupt+0xba/0xe0 [ 202.616017][ T9087] asm_common_interrupt+0x26/0x40 [ 202.616027][ T9087] pv_native_safe_halt+0xf/0x20 [ 202.616039][ T9087] default_idle+0x13/0x20 [ 202.616053][ T9087] default_idle_call+0x6d/0xb0 [ 202.616067][ T9087] do_idle+0x391/0x510 [ 202.616076][ T9087] cpu_startup_entry+0x4f/0x60 [ 202.616084][ T9087] start_secondary+0x21d/0x2b0 [ 202.616098][ T9087] common_startup_64+0x13e/0x148 [ 202.616108][ T9087] [ 202.616108][ T9087] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 202.616121][ T9087] _raw_spin_lock_irqsave+0x3a/0x60 [ 202.616165][ T9087] __wake_up+0x1c/0x60 [ 202.616174][ T9087] tty_port_default_wakeup+0x2a/0x40 [ 202.616188][ T9087] serial8250_tx_chars+0x68e/0x860 [ 202.616202][ T9087] serial8250_handle_irq+0x761/0xcb0 [ 202.616217][ T9087] serial8250_default_handle_irq+0x9a/0x250 [ 202.616226][ T9087] serial8250_interrupt+0xf8/0x1b0 [ 202.616235][ T9087] __handle_irq_event_percpu+0x22c/0x7d0 [ 202.616244][ T9087] handle_irq_event+0xab/0x1e0 [ 202.616253][ T9087] handle_edge_irq+0x3ca/0x9e0 [ 202.616267][ T9087] __common_interrupt+0xcd/0x2f0 [ 202.616280][ T9087] common_interrupt+0x61/0xe0 [ 202.616288][ T9087] asm_common_interrupt+0x26/0x40 [ 202.616297][ T9087] handle_softirqs+0x1dd/0x8e0 [ 202.616308][ T9087] __irq_exit_rcu+0x109/0x170 [ 202.616318][ T9087] irq_exit_rcu+0x9/0x30 [ 202.616328][ T9087] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 202.616340][ T9087] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 202.616350][ T9087] _raw_spin_unlock_irqrestore+0x31/0x80 [ 202.616361][ T9087] uart_write+0x2a4/0xb30 [ 202.616375][ T9087] n_tty_write+0x41c/0x11e0 [ 202.616384][ T9087] file_tty_write.constprop.0+0x504/0x9b0 [ 202.616397][ T9087] redirected_tty_write+0xd4/0x150 [ 202.616409][ T9087] vfs_write+0x7d0/0x11d0 [ 202.616422][ T9087] ksys_write+0x12a/0x250 [ 202.616432][ T9087] do_syscall_64+0xcd/0x490 [ 202.616445][ T9087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.616455][ T9087] [ 202.616455][ T9087] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 202.616468][ T9087] _raw_spin_lock_irqsave+0x3a/0x60 [ 202.616479][ T9087] serial8250_console_write+0x181/0x1890 [ 202.616489][ T9087] console_flush_all+0x801/0xc60 [ 202.616498][ T9087] console_unlock+0xd8/0x210 [ 202.616506][ T9087] vprintk_emit+0x418/0x6d0 [ 202.616514][ T9087] _printk+0xc7/0x100 [ 202.616527][ T9087] register_console+0xc2d/0x11b0 [ 202.616536][ T9087] univ8250_console_init+0x5f/0x90 [ 202.616548][ T9087] console_init+0x14f/0x680 [ 202.616565][ T9087] start_kernel+0x29f/0x4d0 [ 202.616575][ T9087] x86_64_start_reservations+0x18/0x30 [ 202.616585][ T9087] x86_64_start_kernel+0x130/0x190 [ 202.616595][ T9087] common_startup_64+0x13e/0x148 [ 202.616604][ T9087] [ 202.616604][ T9087] -> #0 (console_owner){-.-.}-{0:0}: [ 202.616617][ T9087] __lock_acquire+0x12a6/0x1ce0 [ 202.616629][ T9087] lock_acquire+0x179/0x350 [ 202.616640][ T9087] vprintk_emit+0x4e5/0x6d0 [ 202.616649][ T9087] _printk+0xc7/0x100 [ 202.616661][ T9087] should_fail_ex+0x4e7/0x640 [ 202.616675][ T9087] strncpy_from_user+0x3b/0x2e0 [ 202.616687][ T9087] strncpy_from_user_nofault+0x7f/0x180 [ 202.616700][ T9087] bpf_bprintf_prepare+0xe90/0x13f0 [ 202.616710][ T9087] bpf_trace_printk+0xda/0x190 [ 202.616723][ T9087] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 202.616731][ T9087] bpf_trace_run2+0x236/0x590 [ 202.616744][ T9087] __bpf_trace_contention_begin+0xc9/0x110 [ 202.616756][ T9087] trace_contention_begin.constprop.0+0xde/0x160 [ 202.616771][ T9087] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 202.616785][ T9087] do_raw_spin_lock+0x20e/0x2b0 [ 202.616799][ T9087] raw_spin_rq_lock_nested+0x7e/0x130 [ 202.616808][ T9087] __schedule+0x307/0x5de0 [ 202.616818][ T9087] preempt_schedule_common+0x44/0xc0 [ 202.616829][ T9087] preempt_schedule_thunk+0x16/0x30 [ 202.616844][ T9087] __mutex_lock+0x344/0x1060 [ 202.616856][ T9087] evdev_ioctl_compat+0x7e/0x1a0 [ 202.616871][ T9087] __ia32_compat_sys_ioctl+0x242/0x370 [ 202.616891][ T9087] __do_fast_syscall_32+0x7c/0x3a0 [ 202.616908][ T9087] do_fast_syscall_32+0x32/0x80 [ 202.616925][ T9087] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 202.616939][ T9087] [ 202.616939][ T9087] other info that might help us debug this: [ 202.616939][ T9087] [ 202.616942][ T9087] Chain exists of: [ 202.616942][ T9087] console_owner --> &p->pi_lock --> &rq->__lock [ 202.616942][ T9087] [ 202.616958][ T9087] Possible unsafe locking scenario: [ 202.616958][ T9087] [ 202.616962][ T9087] CPU0 CPU1 [ 202.616966][ T9087] ---- ---- [ 202.616970][ T9087] lock(&rq->__lock); [ 202.616979][ T9087] lock(&p->pi_lock); [ 202.616989][ T9087] lock(&rq->__lock); [ 202.616998][ T9087] lock(console_owner); [ 202.617004][ T9087] [ 202.617004][ T9087] *** DEADLOCK *** [ 202.617004][ T9087] [ 202.617006][ T9087] 3 locks held by syz.3.824/9087: [ 202.617012][ T9087] #0: ffff888044cae118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_ioctl_compat+0x7e/0x1a0 [ 202.617046][ T9087] #1: ffff88802b23a458 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 202.617074][ T9087] #2: ffffffff8e5c10a0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1bc/0x590 [ 202.617100][ T9087] [ 202.617100][ T9087] stack backtrace: [ 202.617107][ T9087] CPU: 0 UID: 0 PID: 9087 Comm: syz.3.824 Not tainted syzkaller #0 PREEMPT(full) [ 202.617119][ T9087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 202.617126][ T9087] Call Trace: [ 202.617130][ T9087] [ 202.617135][ T9087] dump_stack_lvl+0x116/0x1f0 [ 202.617150][ T9087] print_circular_bug+0x275/0x350 [ 202.617163][ T9087] check_noncircular+0x14c/0x170 [ 202.617177][ T9087] __lock_acquire+0x12a6/0x1ce0 [ 202.617193][ T9087] lock_acquire+0x179/0x350 [ 202.617206][ T9087] ? vprintk_emit+0x4d4/0x6d0 [ 202.617216][ T9087] ? vprintk_emit+0x4c2/0x6d0 [ 202.617227][ T9087] vprintk_emit+0x4e5/0x6d0 [ 202.617236][ T9087] ? vprintk_emit+0x4d4/0x6d0 [ 202.617247][ T9087] ? __pfx_vprintk_emit+0x10/0x10 [ 202.617257][ T9087] ? __pfx_bstr_printf+0x10/0x10 [ 202.617271][ T9087] _printk+0xc7/0x100 [ 202.617284][ T9087] ? __pfx__printk+0x10/0x10 [ 202.617298][ T9087] ? __pfx_bpf_trace_printk+0x10/0x10 [ 202.617314][ T9087] ? __pfx____ratelimit+0x10/0x10 [ 202.617327][ T9087] should_fail_ex+0x4e7/0x640 [ 202.617342][ T9087] strncpy_from_user+0x3b/0x2e0 [ 202.617355][ T9087] strncpy_from_user_nofault+0x7f/0x180 [ 202.617370][ T9087] bpf_bprintf_prepare+0xe90/0x13f0 [ 202.617381][ T9087] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 202.617394][ T9087] ? bpf_trace_run2+0x3e1/0x590 [ 202.617408][ T9087] bpf_trace_printk+0xda/0x190 [ 202.617421][ T9087] ? __pfx_bpf_trace_printk+0x10/0x10 [ 202.617435][ T9087] ? bpf_trace_run2+0x3e1/0x590 [ 202.617451][ T9087] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 202.617459][ T9087] bpf_trace_run2+0x236/0x590 [ 202.617473][ T9087] ? __pfx_bpf_trace_run2+0x10/0x10 [ 202.617489][ T9087] ? rb_commit+0x11f/0x9f0 [ 202.617499][ T9087] __bpf_trace_contention_begin+0xc9/0x110 [ 202.617513][ T9087] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 202.617528][ T9087] ? ring_buffer_unlock_commit+0x2e8/0x620 [ 202.617544][ T9087] ? trace_buffer_unlock_commit_regs+0xd7/0x550 [ 202.617564][ T9087] trace_contention_begin.constprop.0+0xde/0x160 [ 202.617586][ T9087] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 202.617606][ T9087] ? __lock_acquire+0xb97/0x1ce0 [ 202.617626][ T9087] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 202.617647][ T9087] ? __pfx_trace_event_raw_event_bpf_trace_printk+0x10/0x10 [ 202.617666][ T9087] ? evdev_ioctl_compat+0x7e/0x1a0 [ 202.617677][ T9087] do_raw_spin_lock+0x20e/0x2b0 [ 202.617693][ T9087] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 202.617708][ T9087] ? rcu_qs+0x2b/0xe0 [ 202.617717][ T9087] ? rcu_note_context_switch+0x192/0x1e00 [ 202.617728][ T9087] raw_spin_rq_lock_nested+0x7e/0x130 [ 202.617738][ T9087] ? preempt_schedule_common+0x44/0xc0 [ 202.617751][ T9087] __schedule+0x307/0x5de0 [ 202.617762][ T9087] ? find_held_lock+0x2b/0x80 [ 202.617773][ T9087] ? bpf_trace_run2+0x26b/0x590 [ 202.617795][ T9087] ? bpf_trace_run2+0x2ab/0x590 [ 202.617814][ T9087] ? lockdep_hardirqs_on+0x7c/0x110 [ 202.617834][ T9087] ? __pfx_bpf_trace_run2+0x10/0x10 [ 202.617855][ T9087] ? __pfx___schedule+0x10/0x10 [ 202.617871][ T9087] ? __lock_acquire+0xb97/0x1ce0 [ 202.617891][ T9087] ? evdev_ioctl_compat+0x7e/0x1a0 [ 202.617907][ T9087] ? __bpf_trace_contention_begin+0xc9/0x110 [ 202.617927][ T9087] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 202.617942][ T9087] ? preempt_schedule_thunk+0x16/0x30 [ 202.617955][ T9087] ? evdev_ioctl_compat+0x7e/0x1a0 [ 202.617968][ T9087] preempt_schedule_common+0x44/0xc0 [ 202.617987][ T9087] preempt_schedule_thunk+0x16/0x30 [ 202.618009][ T9087] __mutex_lock+0x344/0x1060 [ 202.618029][ T9087] ? do_vfs_ioctl+0x128/0x14f0 [ 202.618054][ T9087] ? __pfx___mutex_lock+0x10/0x10 [ 202.618080][ T9087] ? evdev_ioctl_compat+0x7e/0x1a0 [ 202.618096][ T9087] evdev_ioctl_compat+0x7e/0x1a0 [ 202.618117][ T9087] ? __pfx_evdev_ioctl_compat+0x10/0x10 [ 202.618137][ T9087] __ia32_compat_sys_ioctl+0x242/0x370 [ 202.618161][ T9087] __do_fast_syscall_32+0x7c/0x3a0 [ 202.618183][ T9087] do_fast_syscall_32+0x32/0x80 [ 202.618204][ T9087] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 202.618225][ T9087] RIP: 0023:0xf705e579 [ 202.618237][ T9087] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 202.618252][ T9087] RSP: 002b:00000000f544e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 202.618267][ T9087] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000040044590 [ 202.618277][ T9087] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 202.618287][ T9087] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 202.618296][ T9087] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 202.618305][ T9087] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 202.618318][ T9087] [ 203.104828][ T9087] CPU: 0 UID: 0 PID: 9087 Comm: syz.3.824 Not tainted syzkaller #0 PREEMPT(full) [ 203.104847][ T9087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 203.104854][ T9087] Call Trace: [ 203.104866][ T9087] [ 203.104872][ T9087] dump_stack_lvl+0x116/0x1f0 [ 203.104894][ T9087] should_fail_ex+0x512/0x640 [ 203.104914][ T9087] strncpy_from_user+0x3b/0x2e0 [ 203.104928][ T9087] strncpy_from_user_nofault+0x7f/0x180 [ 203.104951][ T9087] bpf_bprintf_prepare+0xe90/0x13f0 [ 203.104969][ T9087] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 203.104982][ T9087] ? bpf_trace_run2+0x3e1/0x590 [ 203.104998][ T9087] bpf_trace_printk+0xda/0x190 [ 203.105011][ T9087] ? __pfx_bpf_trace_printk+0x10/0x10 [ 203.105026][ T9087] ? bpf_trace_run2+0x3e1/0x590 [ 203.105041][ T9087] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 203.105051][ T9087] bpf_trace_run2+0x236/0x590 [ 203.105065][ T9087] ? __pfx_bpf_trace_run2+0x10/0x10 [ 203.105080][ T9087] ? rb_commit+0x11f/0x9f0 [ 203.105092][ T9087] __bpf_trace_contention_begin+0xc9/0x110 [ 203.105108][ T9087] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 203.105123][ T9087] ? ring_buffer_unlock_commit+0x2e8/0x620 [ 203.105138][ T9087] ? trace_buffer_unlock_commit_regs+0xd7/0x550 [ 203.105151][ T9087] trace_contention_begin.constprop.0+0xde/0x160 [ 203.105170][ T9087] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 203.105188][ T9087] ? __lock_acquire+0xb97/0x1ce0 [ 203.105203][ T9087] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 203.105217][ T9087] ? __pfx_trace_event_raw_event_bpf_trace_printk+0x10/0x10 [ 203.105234][ T9087] ? evdev_ioctl_compat+0x7e/0x1a0 [ 203.105248][ T9087] do_raw_spin_lock+0x20e/0x2b0 [ 203.105263][ T9087] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 203.105279][ T9087] ? rcu_qs+0x2b/0xe0 [ 203.105289][ T9087] ? rcu_note_context_switch+0x192/0x1e00 [ 203.105301][ T9087] raw_spin_rq_lock_nested+0x7e/0x130 [ 203.105313][ T9087] ? preempt_schedule_common+0x44/0xc0 [ 203.105326][ T9087] __schedule+0x307/0x5de0 [ 203.105338][ T9087] ? find_held_lock+0x2b/0x80 [ 203.105350][ T9087] ? bpf_trace_run2+0x26b/0x590 [ 203.105364][ T9087] ? bpf_trace_run2+0x2ab/0x590 [ 203.105378][ T9087] ? lockdep_hardirqs_on+0x7c/0x110 [ 203.105392][ T9087] ? __pfx_bpf_trace_run2+0x10/0x10 [ 203.105406][ T9087] ? __pfx___schedule+0x10/0x10 [ 203.105417][ T9087] ? __lock_acquire+0xb97/0x1ce0 [ 203.105431][ T9087] ? evdev_ioctl_compat+0x7e/0x1a0 [ 203.105502][ T9087] ? __bpf_trace_contention_begin+0xc9/0x110 [ 203.105522][ T9087] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 203.105537][ T9087] ? preempt_schedule_thunk+0x16/0x30 [ 203.105553][ T9087] ? evdev_ioctl_compat+0x7e/0x1a0 [ 203.105565][ T9087] preempt_schedule_common+0x44/0xc0 [ 203.105582][ T9087] preempt_schedule_thunk+0x16/0x30 [ 203.105597][ T9087] __mutex_lock+0x344/0x1060 [ 203.105612][ T9087] ? do_vfs_ioctl+0x128/0x14f0 [ 203.105630][ T9087] ? __pfx___mutex_lock+0x10/0x10 [ 203.105647][ T9087] ? evdev_ioctl_compat+0x7e/0x1a0 [ 203.105657][ T9087] evdev_ioctl_compat+0x7e/0x1a0 [ 203.105668][ T9087] ? __pfx_evdev_ioctl_compat+0x10/0x10 [ 203.105679][ T9087] __ia32_compat_sys_ioctl+0x242/0x370 [ 203.105696][ T9087] __do_fast_syscall_32+0x7c/0x3a0 [ 203.105712][ T9087] do_fast_syscall_32+0x32/0x80 [ 203.105726][ T9087] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 203.105740][ T9087] RIP: 0023:0xf705e579 [ 203.105749][ T9087] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 203.105761][ T9087] RSP: 002b:00000000f544e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 203.105772][ T9087] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000040044590 [ 203.105778][ T9087] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 203.105784][ T9087] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 203.105790][ T9087] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 203.105797][ T9087] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 203.105806][ T9087] [ 203.940670][ T92] bridge_slave_1: left allmulticast mode [ 203.942869][ T92] bridge_slave_1: left promiscuous mode [ 203.945149][ T92] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.948414][ T92] bridge_slave_0: left allmulticast mode [ 203.950401][ T92] bridge_slave_0: left promiscuous mode [ 203.952332][ T92] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.083367][ T92] bond0 (unregistering): (slave geneve2): Releasing active interface [ 204.300644][ T92] bond0 (unregistering): Released all slaves [ 204.308260][ T92] bond1 (unregistering): Released all slaves [ 204.363585][ T92] : left promiscuous mode [ 204.439016][ T92] tipc: Disabling bearer [ 204.451276][ T92] tipc: Left network mode [ 204.628552][ T92] hsr_slave_0: left promiscuous mode [ 204.631528][ T92] hsr_slave_1: left promiscuous mode [ 204.634468][ T92] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.640849][ T92] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.448195][ T92] team0 (unregistering): Port device team_slave_1 removed [ 205.535837][ T92] team0 (unregistering): Port device team_slave_0 removed [ 206.634921][ T92] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.700617][ T92] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.770951][ T92] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.841754][ T92] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.923944][ T92] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.991004][ T92] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.071473][ T92] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.151010][ T92] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.224206][ T92] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.260631][ T92] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.320795][ T92] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.391544][ T92] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.472062][ T92] bridge_slave_1: left allmulticast mode [ 207.474356][ T92] bridge_slave_1: left promiscuous mode [ 207.476863][ T92] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.480811][ T92] bridge_slave_0: left allmulticast mode [ 207.482823][ T92] bridge_slave_0: left promiscuous mode [ 207.484835][ T92] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.489781][ T92] bridge_slave_1: left allmulticast mode [ 207.491791][ T92] bridge_slave_1: left promiscuous mode [ 207.493684][ T92] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.498910][ T92] bridge_slave_0: left allmulticast mode [ 207.502493][ T92] bridge_slave_0: left promiscuous mode [ 207.505242][ T92] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.860324][ T92] bond0 (unregistering): Released all slaves [ 208.030919][ T92] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.037297][ T92] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.041756][ T92] bond0 (unregistering): Released all slaves [ 208.160421][ T92] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.165085][ T92] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.168942][ T92] bond0 (unregistering): Released all slaves [ 208.275581][ T92] : left promiscuous mode [ 208.817141][ T92] hsr_slave_0: left promiscuous mode [ 208.819849][ T92] hsr_slave_1: left promiscuous mode [ 208.825646][ T92] hsr_slave_0: left promiscuous mode [ 208.829062][ T92] hsr_slave_1: left promiscuous mode [ 208.831000][ T92] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.833552][ T92] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.837693][ T92] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.840387][ T92] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.845758][ T92] hsr_slave_0: left promiscuous mode [ 208.848403][ T92] hsr_slave_1: left promiscuous mode [ 208.850653][ T92] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.853449][ T92] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.859131][ T92] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.861736][ T92] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.872443][ T92] veth1_macvtap: left promiscuous mode [ 208.874922][ T92] veth0_macvtap: left promiscuous mode [ 208.877242][ T92] veth1_vlan: left promiscuous mode [ 208.878971][ T92] veth0_vlan: left promiscuous mode [ 208.881798][ T92] veth1_macvtap: left promiscuous mode [ 208.884152][ T92] veth0_macvtap: left promiscuous mode [ 208.886375][ T92] veth1_vlan: left promiscuous mode [ 208.888513][ T92] veth0_vlan: left promiscuous mode [ 208.891090][ T92] veth1_macvtap: left promiscuous mode [ 208.892824][ T92] veth0_macvtap: left promiscuous mode [ 208.895139][ T92] veth1_vlan: left promiscuous mode [ 208.898124][ T92] veth0_vlan: left promiscuous mode [ 209.708494][ T92] team0 (unregistering): Port device team_slave_1 removed [ 209.720553][ T92] team0 (unregistering): Port device team_slave_0 removed [ 210.104714][ T92] team0 (unregistering): Port device team_slave_1 removed [ 210.171173][ T92] team0 (unregistering): Port device team_slave_0 removed [ 211.309002][ T92] IPVS: stop unused estimator thread 0... VM DIAGNOSIS: 09:26:56 Registers: info registers vcpu 0 CPU#0 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85616e75 RDI=ffffffff9b0fc700 RBP=ffffffff9b0fc6c0 RSP=ffffc90003feeff0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff9b0fc6c0 R15=ffffffff85616e10 RIP=ffffffff85616e9f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880974c0000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000072a23000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=0000000000000000 RCX=ffffffff815fea6e RDX=1ffff11009b8182a RSI=ffffffff815fea78 RDI=ffff88804dc0c150 RBP=0000000000000004 RSP=ffffc9000d57f920 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=ffff88802b33ad58 R12=0000000000000001 R13=ffff88806ea56000 R14=0000000000000001 R15=ffff88804dc0c000 RIP=ffffffff8195e11e RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000006f06b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffea00017869c8 RBX=000000000000005a RCX=ffffffff82175b98 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000000 RBP=ffffea0001786980 RSP=ffffc9000350f4f0 R8 =0000000000000004 R9 =00000000000000de R10=000000000000005a R11=0000000000000000 R12=dffffc0000000000 R13=ffff88806ca802e0 R14=ffffea0001786980 R15=0000000000000000 RIP=ffffffff81bb041b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000051101000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73c4ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000001b6b54 RBX=0000000000000003 RCX=ffffffff8b90dbf9 RDX=ffffed10056a6656 RSI=ffffffff8c162d00 RDI=ffffffff8190ccb1 RBP=ffffed1003867000 RSP=ffffc9000048fdf8 R8 =0000000000000000 R9 =ffffed10056a6655 R10=ffff88802b5332ab R11=0000000000000001 R12=0000000000000003 R13=ffff88801c338000 R14=ffffffff90ab8890 R15=0000000000000000 RIP=ffffffff8b90c75f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000006c0b3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000