last executing test programs: 6.788463336s ago: executing program 2 (id=1140): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x3, 0x9, 0x6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000080)={0x81, 0x3, {0x0}, {}, 0x1}) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='personality\x00') r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x9, 0x40000) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000140)=0x5) r5 = syz_open_dev$evdev(&(0x7f0000000180), 0xfffff974, 0x115c80) ioctl$EVIOCGPROP(r5, 0x80404509, &(0x7f00000001c0)=""/76) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0x23c, 0xcc001) ioctl$USBDEVFS_IOCTL(r6, 0xc00c5512, &(0x7f0000000280)=@usbdevfs_disconnect={0x101}) r7 = memfd_secret(0x0) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f00000002c0)=0x80) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x80, @mcast1, 0x100}, @in6={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x4bbd}], 0x38) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r3, 0x0) syz_io_uring_setup(0x34a9, &(0x7f0000000340)={0x0, 0x22ec, 0x200, 0x3, 0x19b}, &(0x7f00000003c0), &(0x7f0000000400)=0x0) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='GPL\x00', 0xa418, 0x59, &(0x7f0000000540)=""/89, 0x40f00, 0x52, '\x00', 0x0, 0x1a, r7, 0x8, &(0x7f00000005c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0x3, 0xffff, 0x3}, 0x10, 0x2230a, r7, 0x0, &(0x7f0000000640)=[0x1, r7, r3, r7, r1, r3, r7, r7], 0x0, 0x10, 0x9, @void, @value}, 0x94) r11 = openat$null(0xffffff9c, &(0x7f0000000740), 0x40, 0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000007c0)=@IORING_OP_FILES_UPDATE={0x14, 0x20, 0x0, 0x0, 0x5, &(0x7f0000000780)=[r6, r7, r10, r3, r11, r7, r1, r5, r4], 0x9, 0x0, 0x1, {0x0, r12}}) openat$cdrom(0xffffff9c, &(0x7f0000000800), 0x100, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x5}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x800}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xffffffff}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x41) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f00000009c0), r11) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x7c, r13, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xb3d7}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000050) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000b00)={0x6, 0x0, [{0x7, 0x5, 0x0, 0x5, 0x21, 0x4, 0xffffffff}, {0x0, 0xffff, 0x0, 0x4, 0xe1, 0x0, 0x3}, {0xb, 0xb, 0x0, 0xb54, 0x380, 0x4, 0x5}, {0xa, 0x400, 0x9897395084909c52, 0x0, 0x7, 0x4, 0x6}, {0xd, 0x8, 0x4, 0x401, 0x9, 0xe63b, 0xd}, {0xd, 0x2, 0x0, 0x3, 0x3, 0x0, 0x2}]}) syz_usb_connect(0x5, 0x158, &(0x7f0000000c00)={{0x12, 0x1, 0x200, 0x40, 0xe8, 0x1c, 0xff, 0x45e, 0xf7, 0xe2ce, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x146, 0x3, 0xf, 0x1, 0x20, 0x5, [{{0x9, 0x4, 0x35, 0xff, 0x2, 0xad, 0x74, 0x8c, 0x1, [], [{{0x9, 0x5, 0xf, 0x13, 0x400, 0x5d, 0x5, 0x4, [@generic={0xa8, 0x4, "fc368a9be79ab95af5800c80eb71c9969e3098f07f743044bd15313f5b95e3ca3715aac51f095f0c7e321d8899dab896bb038fd8f622f509178da3cfe7226ea30061502d2bdd5f73fe3f41f1c202ea297280c8fafdbcda641ce315a6c4c5175eeced7cc1dbde5e4cd5d2436e88166fd41001f206e71a31a5f73b4f131e130c55ecce4e2903e2ef4dc93e7a3734e9fd76e9d90b61b4908faaf45d73c9ab0ed84597662c543372"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x200, 0x6, 0xf, 0x92, [@generic={0x34, 0x11, "b6d747cb69818ba5aef9450a9a40dbfe7ff832b27e98bacddd6247d00856ea3934063f8b8faa13e3f5a25a4610271e55a65a"}, @uac_iso={0x7, 0x25, 0x1, 0x41, 0x5, 0xe}]}}]}}, {{0x9, 0x4, 0x10, 0x2, 0x2, 0xc3, 0x5f, 0x0, 0x6, [@hid_hid={0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0x862}}], [{{0x9, 0x5, 0xd, 0x0, 0x40, 0xff, 0xb1, 0x10}}, {{0x9, 0x5, 0x2, 0x4, 0x240, 0x7, 0x95, 0x2}}]}}, {{0x9, 0x4, 0x84, 0xad, 0x0, 0x4b, 0x2b, 0xf3, 0x15, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0xfa}}, @hid_hid={0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0x853}}]}}]}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000d80)={0xa, 0x6, 0x300, 0x5, 0x4, 0x6, 0x20, 0x40}, 0x23, &(0x7f0000000dc0)={0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xb4, "655aa1bf42c0b36ff8bc28ee2548f587"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xdfefd7352393fdb1, 0x4, 0x2, 0x1}]}, 0x1, [{0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0xc08}}]}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000e80)={0x5, r6, 0x15, {0x81, 0xd}, 0x7}, 0x1) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r7) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000f40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000014c0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8a020000}, 0xc, &(0x7f0000001480)={&(0x7f0000000f80)={0x4e4, r14, 0x908, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x0, 0x5f}}}}, [@NL80211_ATTR_IE={0x17, 0x2a, [@erp={0x2a, 0x1}, @dsss={0x3, 0x1, 0xad}, @supported_rates={0x1, 0x5, [{0xb, 0x1}, {0xa66f4aa5e1a57806, 0x1}, {0x60}, {0x2}, {0x9, 0x1}]}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x7, 0xa5, 0x3}}]}, @NL80211_ATTR_IE={0x185, 0x2a, [@challenge={0x10, 0x1, 0x80}, @ssid={0x0, 0x1c, @random="c689dd45ccff75ce5099ebdc3a439a56c8ad1972d2ee927023ae6bad"}, @random={0x6, 0x71, "1da1d083e8614f7d532616b5da4b574d095a799518972acb78c64083e94d0be1d8ccd247f90cb765965088810dc8f59c92de93c30729229b9c63ca65d32fdb2fbf554ee911b68378c857c876607c749654aa463027fb68e948ec6f6942c0d2d62f5dd32ffee789cafa0f3397ded7358080"}, @random_vendor={0xdd, 0x18, "883a092918d71637e9f9de7ffb19ee92ed54f1e0ce57f951"}, @random={0xfd, 0xd1, "7ad773070f62d573819d2ec75ceeea8cfe04bf30b5b45eee4970178fca0cabb4ff436a517c3716208622446bdd9ed9bdbc2c68184c95a207218754d530310b81e45316f51443e68d76b37dcfa61ff949d03913f0d30aadf1155742fca7393a6d7127d4e211fc91bd85204a2b5f0c837f269ab27e5530cd8aeb3dbe420536c38ad6ba8b04cc25088529a94e0f30e1ef996d033b62a4421d93650b19c1d8c78cb4a7ba2493439e1be5cc0455c6bf5a0e86007ecbb73ca02550ec66b4df9c94f251fe2d4e1a54f5845fcf85a4c5cca36a1e44"}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x2a0, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x7c, 0x0, "2a526233366318b129faf67537d95719fe840d54f4c6b669d27c018cd201bb419da2635c60be575ab8a4d6d34f45fc8198ea139d5ae253318d8e2470089f315a3181aa7474d440650c4ff9abf1e59ffa982001da328a2163f1f569487d14482cf506632a657733da2b83510e3df1cf78110d5f51109b0e33"}, @NL80211_BAND_2GHZ={0x4e, 0x0, "8a3c07e15e6fbbc5425f30a8f4807fb07cf7a051385f017b3e4316412ed1b066239c965c29c25c1440f081be58fb135ccd7aace35add52e6f63df3dde428342743f9a0073142eff669c5"}, @NL80211_BAND_5GHZ={0xcf, 0x1, "fbd9320a8f8f28607791e2febfe90c4b35579ff3e836e2087a345b5be0adf62164cd0907846384f642ce525364d02e40dcadd9df1d5ae43b95eabd715f3723726c3f50f724a92d431b7d487a83778200cef4acdd17d05c1ee851063646675f02ddea00f3f14c6e1641d0230f6c4d33cbba92d6433043c4564a3d7a7afe8db3c87107898f55da735c5e0a5f1b839089c81b1f7abbfce31dbbc42b8c09cc807f670d27abf11f51bd53cc24bbfada4a606c5cd1342d86ef120415e5a6d643debe4dcb286acf3e4d5947c4461f"}, @NL80211_BAND_60GHZ={0xfe, 0x2, "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"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCAN_SSIDS={0x60, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x5, 0x0, @random="e2"}, {0x16, 0x0, @random="fdf1aaa949df6d9390612dd22327f707997e"}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x4e4}, 0x1, 0x0, 0x0, 0xc}, 0x20000040) semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, &(0x7f0000001500)=""/212) 6.285298122s ago: executing program 1 (id=1143): syz_open_dev$sndctrl(&(0x7f0000000100), 0xab3, 0x2d0142) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, r0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdir(&(0x7f00000002c0)='./file0\x00', 0x120) chdir(&(0x7f00000001c0)='./bus\x00') mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x700, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') chown(&(0x7f0000000280)='./file0\x00', 0x0, 0xffffffffffffffff) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000780)='./bus\x00') sendto$inet6(r4, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0xfffe, 0x0, 0x0, 0x54}, 0x9c) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 5.335878575s ago: executing program 1 (id=1153): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0x1], 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, &(0x7f00000015c0)="89ef1284c86555bfe69b541fc18b8f329814f57bd00b1b3a660bb38d58430a051059c1c370b570890937d18b73fe9e420f4cbc3542c63678") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)) socket$unix(0x1, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00'}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.365684034s ago: executing program 1 (id=1157): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r4, 0xc008aeba, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c000e362e00bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) unshare(0x2a020e80) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40440, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x94) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 3.719451009s ago: executing program 2 (id=1162): syz_emit_vhci(&(0x7f0000001fc0)=ANY=[@ANYBLOB="0408f305c90000"], 0x7) (async) syz_emit_vhci(&(0x7f0000001fc0)=ANY=[@ANYBLOB="0408f305c90000"], 0x7) syz_open_dev$radio(&(0x7f0000000400), 0x1, 0x2) (async) r0 = syz_open_dev$radio(&(0x7f0000000400), 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f00000008c0)={0x101, "3be2fef99570bde1ff5097f8a98a79e75112ac8b19c62e53070b5bf879726a8f"}) prlimit64(0x0, 0xe, 0x0, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x4004010) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$zero(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) r3 = openat$zero(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x10201, 0x4, 0x100000, 0x1000, &(0x7f0000361000/0x1000)=nil}) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f0000000100)={0x7, 0x200, 0x1}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000900)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv6={0x86dd, @gre_packet={0x5, 0x6, "d15cdc", 0x44, 0x2f, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x22eb}, {0x1, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x3}, 0x1, {0x100005}}}, {0x8, 0x22eb, 0x1, {{0x5, 0x2, 0x5, 0x2, 0x0, 0x3, 0x7, 0x6}, 0x2, {0x7, 0x3, 0x2, 0x2, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) 2.81434758s ago: executing program 2 (id=1165): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00008c8000/0x2000)=nil) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f0000005940)=[{{0x0, 0x0, 0x0}, 0x200}, {{&(0x7f0000000140)=@isdn, 0x80, &(0x7f0000000540)=[{&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f00000001c0)}, {0x0}, {&(0x7f00000004c0)=""/1, 0x1}, {0x0}], 0x5, &(0x7f0000000580)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001580)=""/251, 0xfb}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0x2, &(0x7f00000001c0)=""/54, 0x36}, 0x6}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f00000017c0)=""/108, 0x6c}, {&(0x7f0000001840)=""/157, 0x9d}, {&(0x7f0000001900)=""/197, 0xc5}, {&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000004440)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/177, 0xb1}, {&(0x7f0000001ac0)=""/233, 0xe9}, {&(0x7f0000001bc0)=""/248, 0xf8}, {&(0x7f0000001cc0)=""/56, 0x38}], 0x9, &(0x7f0000003dc0)=""/211, 0xd3}, 0xe}, {{&(0x7f0000003ec0)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000003f40)=""/95, 0x5f}], 0x1, &(0x7f0000004000)=""/230, 0xe6}, 0xf}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000004100)=""/118, 0x76}], 0x1, &(0x7f00000041c0)=""/221, 0xdd}, 0x1}, {{&(0x7f00000042c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, &(0x7f00000043c0)=[{&(0x7f0000005440)=""/231, 0xe7}, {&(0x7f0000004340)}, {&(0x7f0000000480)=""/48, 0x30}], 0x3}, 0x81}, {{0x0, 0x0, &(0x7f0000005900)=[{&(0x7f0000005640)=""/25, 0x19}, {&(0x7f0000005680)=""/140, 0x8c}, {&(0x7f0000005740)=""/184, 0xb8}, {&(0x7f0000005800)=""/92, 0x5c}, {&(0x7f0000005880)=""/68, 0x44}], 0x5}, 0x3}], 0x8, 0x2, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r5, 0x80089419, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000002c0)=0xa0000) r7 = dup(r6) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000040)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r6, 0x7ac, &(0x7f0000000100)={0x0}) write$UHID_CREATE2(r0, &(0x7f00000000c0)=ANY=[@ANYRES8=r3, @ANYRES32=r4, @ANYRES32=r0, @ANYRES8=r5, @ANYRES32=0x0, @ANYRES64=r3, @ANYRESOCT], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0xffffd000) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r8, &(0x7f0000000000)={{0x6, @rose}, [@default, @bcast, @netrom, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sendto(r8, 0x0, 0x0, 0x0, &(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x3, 0x4, 0x100, 0x2, {0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80}}}, 0x80) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000017c0), 0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x161b01, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) write$binfmt_misc(r11, &(0x7f0000000200), 0xfffffecc) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001800)={0x18, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.689063141s ago: executing program 1 (id=1169): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x19, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000003f0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f00000007c0)='map_files\x00') getdents64(r1, &(0x7f0000001fc0)=""/4086, 0xff6) 2.580525879s ago: executing program 0 (id=1170): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="50010000100013070000000000000000ff0200000000000000000007000000010000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac1414170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c"], 0x150}}, 0x0) 2.509540453s ago: executing program 0 (id=1171): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800800040000000000060006"], 0x4c}}, 0x0) 2.497365062s ago: executing program 0 (id=1172): ioperm(0x0, 0x2, 0x2) r0 = syz_io_uring_setup(0x5b8, &(0x7f00000001c0)={0x0, 0x7b5f, 0x1, 0x3, 0xd4}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000100)=0x8f19, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000100)={{0x0, 0xffe0}, 'syz1\x00', 0xd}) ioctl$UI_DEV_CREATE(r3, 0x5501) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000040)=""/54, 0x36}], 0x1) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = epoll_create1(0x0) fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) r9 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707d, 0x8, 0x4, 0x288, 0x0, r5}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000100)=0x0) ioprio_set$pid(0x2, r12, 0x4007) 1.919610931s ago: executing program 2 (id=1173): ioperm(0x0, 0x2, 0x2) r0 = syz_io_uring_setup(0x5b8, &(0x7f00000001c0)={0x0, 0x7b5f, 0x1, 0x3, 0xd4}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000100)=0x8f19, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000100)={{0x0, 0xffe0}, 'syz1\x00', 0xd}) ioctl$UI_DEV_CREATE(r3, 0x5501) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000040)=""/54, 0x36}], 0x1) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = epoll_create1(0x0) fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) r9 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707d, 0x8, 0x4, 0x288, 0x0, r5}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0x0) r11 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x200, 0x0, 0x0, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r11, 0x2def, 0x4000, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000100)=0x0) ioprio_set$pid(0x2, r14, 0x4007) 1.887886845s ago: executing program 3 (id=1174): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1be) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 1.738540674s ago: executing program 1 (id=1175): openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000000d08000440"], 0x80}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) syz_open_dev$loop(0x0, 0x2, 0x40000) syz_usb_connect$hid(0xf63067478e218e8, 0x36, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r0) 1.629005429s ago: executing program 3 (id=1176): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="020499060e0000002cbd7000fdffffff05000600000000000a0000000000000000000000000000034000000000000001000000000000000002000100000000000000ff0c02000060050005"], 0x70}, 0x1, 0x7}, 0x0) 1.628562163s ago: executing program 3 (id=1177): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r1, r2, 0x25, 0x0, @val=@netfilter={0x7, 0x1, 0xfff}}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000110000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 1.289696938s ago: executing program 3 (id=1178): syz_usbip_server_init(0x5) r0 = syz_io_uring_setup(0x24b9, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) fsopen(&(0x7f0000000040)='romfs\x00', 0x1) (async, rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (rerun: 64) io_uring_enter(r0, 0x353, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r4, 0x101, 0x6, &(0x7f0000000000)=0xffffffff, 0x4) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000c0110000060a010400000000000000000100000008000b400000000098110480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000601101800c00010062697477697365005011028008000340000000020800014000000014080002400000001204000480080002400000000b2811058004100100ba402f3b2cfdc8ed1d747bdb1780ed42b7980da9219ccb6af5ec15045a5b164ee3e7e0c08acc31ec047630ccf054dba5e49f1bf5eab7fe5638d29d1299cffc9d529dd21bc93033c240b77a236643bd44c42bfd389059f1e70d11a6d3f3b835ca25e7e82254ddd28b4863e902954efe69fd18902af9787db6aad0ab6edd554c9fa669f88f1613096c66611ec6447c1718112698b8cf48d217cb5da7ab5b5aae47b34c67bb8d8300a7e543ba18ce8865c2127985b692d0328750b223e02d4ac2689a3a0a17daa4e15d0b821a0a60e05746ef7bab0cf35a5093607a4af3088860e481b038b14669901b510863199e43805c206ea3d0b083dbde8d2daf92b64606ed977c2621ee5f4081167a95cc68a7ec060ee11a4af478baf87a164ac4b66e71b762e94222f904f6ab3639365a124afc09cc1518439a9eb9f3b4883b93b3a6b08e8ea53909e0cccf185eb50e78011ac36d95861dcf4c6459c1e473fa3c5b3b78839583098481b27ae1f3f5217f66a2a19973954ef1dbd453917fed048682f8e837ffc6a53782ebfa2886c9438b489622d914943d3bb51d6f6cdbee7ba0be1c519eecf81571c7b7d3481de2cd7e702d306a74b453e8d002fad9d59a0dc29cade79632329416735f8231f0e8e572555646b306c422309a26607d79c4df52738086b40abf34ea4aafa68ae26a6a23251963e103c21107318d563c5dbb756c80b264638e7c51848e5c31c538c01f7bc84210ecf214fb80217986a1e2402f87205f1ddb6a67132d24175e9053a7b45703874ff682d5c739177be46cebf6bbb0e708b3b2ba983cb764b03904e14f0a14462f72b1c8fb65e0f9af7e96a07c4e452281de7eaec4c14acc145176365f4f12bd497d301ba32d2b214d1c70cd08fa7bda7df085815456d9be0dc15708b0baf5da5e9eccd71abb8fef814233fa23dcdc5a44347577e7af076be8e0af245512e1e37b6015cae930a6cbb89fe05ac4b6c137a5f755515cd7a8c6a38e423cbf9da2119b16e4aec25c8e8ff0152d019c57c2c8a1f6ec1cff543943a392c6de978a23ce8a9897daa37803321cc672e88916c67ed460162e6b7d9e8b31353b8017d344f4e57576dd1332e355c1e382785ba14cc68aabab26d2fd26024e9f1b71fc4a906878a60d571674078774abbe0b9d9abddf636bd127bb870da2a79736744e0f59f36765d4205e69ec3b408ec63191e2c15a4c1c092eef1d5440393095113648b6ed0f88ec5fc80fb6c2870ccb8d802405812f00df195ec5262f17f953a903620cc6d686bc9a9a97f077780175df43436d9c8bec2c7210249b5bbe9aa0e8099cdef71eb1c9fb95b7fb6bc5aac4231e926d1c5cfef699d46eb258469992d67b431c63d83f6beb9f4eb37d19350d2f41461f9bf9d215ab53fadf7a8a189bf744279f59ea7b0b805a3a0956b2106db55938483f2029858ff0143fbb0665e454b60886f3ae3ed5cb82534ea1850b0bd68dda6ff1dc7ba7a8712aa643d7f2d46a5dcef6a20c3eb1704902974c63cb18df504fbe10ee2cb0cc8c00beb62eff8d2875c1c0d643456f93b8c2b89bf9e4f4f1eabb900c57cbf35072e3f8496c06c787500caa036b38e4ef7a4d8a964f2912d541bd69150beaf25473f633cd20185f7242d7278dd02583b5e197dda21484e44964b34a1579884155d651fca0b07ce3c4ea57899d0e3db428d7f11d4ada553b1d364ebe5fd59c608dbddf8410bc3ce024723150b69a8c1a99c6ff90ff74b6679ad0f71d9a545dc0c041790cc03e713dbdea36207d3ac6a93066e3e960bcbd13bfd32181e38e60f2f22f61a6f2366135c3c73b1cc3a036f46ec096e0f85ae7bfa80b773f2ceb048f32a22b19f22fc748ca7330eb0a07c12a6a0500ba965905f370c220969799f85bb0c582453bdf29aab069741e49a9850653458f33db7da0e8173e3b3f95365973da11564eead034640cc52eaf7581cea807835638b92dee7e22289dd234ae175fb6eca050d8356a9a0f1fd125e2bb184209c87a7da879df23fd0dffb78bf8a1cc3e3cef3a84394af93258bea7b17a4da9a0bfc38c3c2f76ad74a6abb2d6ba186ba4452c31567a6f677166ec3ccee7c2fc289d73a10b1c88c9614877b280b77aa6795fed2ea7f8c7606bfdddbdf42010f85a5731f084c1b451800158d2ac696639ba54023fa8fa5da51c5bb218a095575b87a92bcd6c9cfa845356345878c296cfc8dd72ee2692ecbd3beb28db176b57f02f8055a833273df7891092cce5dd1d6c7d65e47a44aff5fd3798617a8113a479b5ebcfd9f74c4dde04e8b2b43e732e15f768844b3a4061f59e1fc52feed30b26f52d5ff8d3f5dc0af2e6341f8cf029771932299910ab0159dcf11f40df736088a9b984edb3a44e49eb5edee2140e6ce5ce0a8730aca7070799beced5fad168358401f58a33692e3be3ede8cbfe7c6e9d1c83b70df943f6fefe8151af1e0e9e08e5f1d0c280808d44a82fcf0247b9da166f1fd041c1237cfb0b38700582a53a2f87103c8f422cdd10c51f47f2377d6166cfac53d2a000a4783bd88bf5e1e91e8e10ac714d19fd357adb6a1a12ee3df5e518672e3b8aa87d1ff685a7ebf205dd3096c76d7263dcf9878d3209c22f752c1731a88d16e7a564fbe2c0311006ac874ed3614e443702c2b4d0591a4408e10696a81792c10f598111a63f04765475679dd58d487da521000900165ef11af2633dc7204752279a3da77e23d23f274d1a937c19edbff3159f721bfd87b7d9d7ce114d2cfec0ccdd4efeb35f7d278c9a15c02a5e3d62ae4d8f1e46d5fd630c54444246db4fdf5b67ce3b00129d5e4ccd24762072bb713ae8c219269b54865e366e55f58542a8f7eb1a9d647a54b1be60fbe4dfea9d79baa04779090bf0fcfd2472796c764ac1c98c250f6983c6f86d842702259339900117ae191fe68b61affa54c2d43dddc8c88965a6e0c8a7e8fab1391e828c083a571271de686e3727a36cab568f83f6156b2b3c65846af0fde3406e876e639911d79cf6e5fc3a93dd7a6de541a3d5a0f73f94a7de108371bada5f3c8d40d3e4fe5e0addd567db977d38ea44307a487c6f0f92df3cf529f1765d72e293be1dc97b796592c6b711f0b81d45ba98f86194326fe812d70b7c7708ca7d5083fd1d05f60d19bc52e66513bc9abaaf0c29afaa77a30f422e3e0b04eb3617793a70a6d322d53772c02235322a4f76443ea9490ccb1c3c419e0a45db33f9bebe180e7972f54c453506fb435c69c02a45caee661a4920c2a8e137d7e0eacd655af77a62007d2af8c809fd524fc575db224385dda032d3f815ad9a7195a9704e023a0000000000000008d6b0caeea1d4c8a93d53cdca5dd40e7d17d973baccdd9c3266cb123841483c0184cb5d277b45a63d34c23539127c1431bd873074c798fbf6ed1522b9f5750f83492b9560f7cf4555f56f0f6ea6dc29d45b0ec68982161adaf7e8badf4b091a6d6ffeeb20eb8a89143c4b33b120dd607487e921f764a4938df947a6cb34319ce33025c17fe9d014f99a8fdf144f8f2a6291ebdb683102588599722c4f99a41843449cfd1fde9a55405bb8f8fbbd12def0e4f4755a776909c0579709ffe1bcaf5d9b91fcb40ac7d00c440d3a3fd39b44e865796be803d5eb70292bc9c896b0e1eeb6353aec3f12a8a1d2c9415ce5f933c91b9bb09b92995243b5404eda1a95113b49eef7f3dfdea4f7c0f64df74a63f233872a62894f9db9a793dbcc886ba54e178807d571df3f5608a8b18ddcc56758a5854ac4caaca247ccd06d533650c196341848e9e06e1c5bd033cbddeb435a1cf04bf1138f1131edc8e1fda9678118ba914392366af62d6caa5deefd260b886e9ed85ffcce605a11f877d55d0b4d17c25cae1ac79c6449e53763993fe55fdb10ad66a2e09bdf265e54cd7f8e3e1f2d65923d296814527532d2cd16e13ce279e10e6c35135b91c12d135d253371604fd99601d4ad929f32020221ecc978e7f493bada129ac7325b4bcd294a0448598fee2a4e793506a3b3e2141fd3a36cd8d9de1ffabb217104b84c1847a6ec169458b956fe4ec5ff12d6d8fb8cc20c6b165c341c812422f0b29ef7b27133ec9a3d7f69ee76e49422b49467a70eae24ed4a138686ef69f2a3d73936d16ba92fb8d48e7056f7d40f39a5cee6cca9709f262e666e30a5adf2592f71561075332a26401167f2a016dfb564d9da2b1baec8073b8f95d16ab64d0247925fd37670263f6f478af36a35877813079746bbac0f7088624880e4df8e8e356040d34c8653345a6f5f5ad8fc02d76b257b53c3dced351a4802c0a104b2ea2a6d502abb88f62d45fce6500c5856ffe51bd66a5f91d7544fc1c4608023cb113733bffc4ac8b7feaa84d7c3df9b9283974655e55d095f53d784f27f152ae16608fb397c864c223d11f11d23bcf7db000c59f9a7d040a2aa2973489e4b74a83d691c97309296c1ee27c6b9cfae7ed92db883aa3bc0ab72c0358168cf67e1cd97f89f0590d3d776bb9d2c023dbc295531b67fda099aac0515b108578cf1a870a1d3f7129b0df74bbabc40a2b71f9da1d238d3691606c22b748a3344ef1d039f2e531d806d06e83733ac8aa71dd940282c429e9b0785034ceca6c7ec0f3d2eff331a5ad368b30ee360311e9760c9cdbffdaa9030739e2a71968e765faa4bec8b130959ed5d516d446f4dd4d94553d76ea9179717ae18b8af01b5b49abeb00926b659f7134d3fbd9c246c121d727a47bf305b1c6a239689ad16d9bb323e65bf3772a9f59b2365ec477e813c162fa97e3f34db3bce0692688805b6f2ff8959cf536dc1396d56cd04b203fa020a4a72f806476f6b1eb91c5c0fa9e2ba8093e248450c880351d485c4f3cb4f23acb7499de7704bdab4256376444f957c4cfdf8dd9b5ae9029722af87c39a6d6b5e56dab6a78278abf39e5d1a636216f05c24dc428e54702f86da49f35c68f3f421bad3b12653c3bac48e1b2bd6824732109687cbe4ff66786f06b1b5bb217a161ee4e44d68a50200277dd9533412c6a04f3d0ebb26ee6e01a0a5a7c850b1a8f668ffc02ba2f0ece384090c19747ffee2a644fca0dab63b766a8d1e3ff81e483fa705f437813abdf13dcefa4e2d2487b493025209d5f4909bf0b6a9eabe088538160a3b6897a29825495e00522161c684fdb7345b6869a22c66898f8895ce019d430ce2afce388897a3cde8a45902c4be638a6d3e0a3d7b2e686981d35aba2dba7e602f75cbdc52dee9aedde418cb4f41a3c2e12b03f06b84563b7186b45540b2a009f5d3dda7b4e3aa68635231ed0db609a9ca83f4109e0fdc85351f088a28d0c00aa2b66f46d71a6a4686bcb392ea5cc3899ca0491ff3c94b976692e774ae4a6fccc0ddfd9a7f41810ab3b7ca6c2ad2a30f8c55ef3c9d149c3474240df15268586fdab08e5fc1d717a768d23ddbe5ece68503605af50d6d508bf2434c200aa5007f8425cc1c54d67ef0916b2c9ee6354fe533f46b9c959159f0ddddae5f431f155cd011068085c10f8fe01a804c7fe5e361f7c77ba0fb85839acb44c16e35a0ca508ea2058001b9da7f413e8a4b839c5cf315086528309ce5e38a85c9c514e231ddd12d6e655ae552fef22fea34755ff9e41f67e875d2ed024e9b24639a0866714c40205fdf2c398be9a3fa8b6b483f3cf9d848409fe12239776d15552cf017007ba2d1cb637cbdc9f8e145c8ea45a864a252e8c2f84a28eef00b7a8703b597130d26841194f9a7eeaf0eaae17cf1fb4768aa5b37e79c17643191775137d888287ec634d867e791b3fa1c0002800800034000000002080003400000000108000340000000043400028008000340000000010900020073797a30000000000900020073797a310000000008000180fffffffc080001808123f8b1d00001002843e8e4a48d9ab76884808f8fb340c4c051dce5c6f0695840f66b47f9bf3a5dd28a2aa1512b964323196d6adf32b7a9507aa8e483e6a721ff014b9cfbe8b037706d8b6a344cb70a809b1b4c03a1bc85291e051da5a8a98a020b93c31a7138c98d098b4b1ea8a781c93785ef221cc6171aea53a16dbaac0f4692e5274acc3cfff6a5c30893181ec415d633d7ccd52345d744585af5382a757d1850e26036c300222e91043d3c8803ebca477fc783c3645fede132f201ba447777c416e91a5762aff4a2b92feb20afdc19f98e0900010073797a30"], 0x1234}}, 0x0) 1.203495223s ago: executing program 1 (id=1179): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80000, 0x0) r3 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xbf, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0xa0, 0x2, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x2, 0xae, {0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0x3a1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x8, 0x7f}}, [{{0x9, 0x5, 0x2, 0x3, 0x630, 0x7, 0xe, 0x3}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0x7, 0x10, 0x4, 0x40, 0x5}, 0xec, &(0x7f0000000380)={0x5, 0xf, 0xec, 0x6, [@generic={0xae, 0x10, 0xa, "f2cb85a9681e2cbdfda0a44b0efcda575bc51a5a2ec41ca05cb7d59a5a33fcddcd55ccc7e78db575c75666522f6fc9aac0d548178a0da6d2c45a4ba83c2fa3ab33bbe9a8a29efb3fdcaf60f0e9547134f64fa4f58cc24d40a1f70e4c16ccf8c2ea583ec5b5620c16d9613cfc2b8afe581934c7dbc70f1f1ece42c7aa19fe38c6d86173b2c8f00422a9257e2dbbfeb3986faf7607fadb3b688052dfab37d805058944e068cbfbab51a74c81"}, @ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0xff, 0xf00f, 0x7, [0x3f00, 0xffffcf]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "36471c17221719204809174f72687b57"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x52, 0xf8, 0xc, 0x9, 0x7}]}, 0x3, [{0x50, &(0x7f0000000240)=@string={0x50, 0x3, "029ad4f06029bd5236b82a587b531a02d73b1a669e24e9cead5e624ec026002451f7422cad738daaa6fa0a989a42dd2d964c05cf9dddacac1408e7095cfb566ad950685afd72467de7f2bb31d462"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x423}}]}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) listxattr(&(0x7f0000000080)='./cgroup\x00', 0x0, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000700)={0x14, &(0x7f0000000500)={0x0, 0x10, 0x101, {0x101, 0x31, "86fc4f1c006a9b5ec2d39eafb3e450fd719b92e2b9565ec2269b22c81f2f613776b2a54990f62fac97ced1d046d64df91fa9a992f3fdbb7f392ab0caff16554936b52f07ec54336b301e425eece707e524ad72054777de7623d4850baed4e5d0663a543d7b2c09e00be001c10f3b7d3977266cca44c5ccfc75cbbbecc89791eae85e0b1d00ba3e48866bb0f508fb5d52bf4b1200f84f951bf910da9228a184f882d6387109f555fea1c8d971688bfa59a306d55d612740d487538c3d16b45356c6807a7d24a0c99c053e0605cf53c40129ceb43a9f940231a739cb7baa0179dcf075bed2c2add02b7fd823a8321bc5ff7cc9d7a727c738739b8de03c8b222b"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc04}}, &(0x7f0000000680)={0x0, 0x22, 0x24, {[@main=@item_4={0x3, 0x0, 0x8, "8c494990"}, @local=@item_4={0x3, 0x2, 0x1, "0b2316b3"}, @global=@item_4={0x3, 0x1, 0xa, "997be154"}, @local=@item_012={0x1, 0x2, 0x1, "d9"}, @main=@item_4={0x3, 0x0, 0x8, "0faecc3b"}, @local=@item_012={0x1, 0x2, 0xa, "8d"}, @main=@item_012={0x2, 0x0, 0xa, "a209"}, @global=@item_4={0x3, 0x1, 0x7, "c4ac93f8"}, @local=@item_012={0x0, 0x2, 0x9}, @main=@item_012={0x2, 0x0, 0xa, "c175"}]}}, &(0x7f00000006c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xf9, 0x1, {0x22, 0x527}}}}, &(0x7f0000000900)={0x18, &(0x7f0000000740)={0x20, 0x6, 0x55, "3932355102c516e13b9fe3c7c14de85ee8a110a5ed519151ff6d4e143155c91118e98df0a18d744a95822aa50d750d699ef5f992388fa17839612225bd9690b89690facbf1bd1b8c997f553cf35865bdf4fc143feb"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x1, 0x6f, "ff0253da3ab2c90b38808de2dca2ad214d07496c47fcbfcd1011f968278b26bd54447eb7126c780dad130b1f0fcffd13946bfbb5eb23dff8c946b26ed3e83eb0e2311c1656ed6dda942026b27f2e0f718bc9afa829aba59314ae1358932ef002249df7b241b8d62c382e390a440212"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x9}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}, @IFLA_BOND_USE_CARRIER={0x5}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x5}]}}}]}, 0x4c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="e184a3a012c727f3e89d55d8d1e28a31a51d8793c319fdb46000546b7491466ac07f000000000000000359d182c24f3013e0cfbe61f4601e1cf8639ae86656f8f34f3082b5348d7db29f735eec40904da6893a87900c459eb67067", 0x5b}], 0x1}, 0x20000001) 1.195936285s ago: executing program 0 (id=1180): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x13, 0x2}, @var={0x2, 0xfff9, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 1.139262299s ago: executing program 0 (id=1181): syz_usb_connect(0x3, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_usb_connect$cdc_ncm(0x3, 0x0, 0x0, &(0x7f0000000980)={0xa, &(0x7f0000000540)={0x32, 0x6, 0x0, 0x8, 0xfa, 0xfe, 0x10, 0xff}, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="0ce4363dd4b0a67e"]}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000740)=0x0, &(0x7f0000000780)=0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f4adff7b9a40000", 0x0, 0x8e1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0x0, 0x100}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffe]}, 0x45c) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) ioctl$TUNGETFILTER(r7, 0x801054db, 0x0) ioctl$UI_SET_PROPBIT(r6, 0x5501, 0x0) ioctl$UI_END_FF_UPLOAD(r6, 0x8000552c, 0x0) geteuid() openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8cb83, 0x0) 1.039017841s ago: executing program 2 (id=1182): syz_open_dev$sndctrl(&(0x7f0000000100), 0xab3, 0x2d0142) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, r0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdir(&(0x7f00000002c0)='./file0\x00', 0x120) chdir(&(0x7f00000001c0)='./bus\x00') mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x700, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') chown(&(0x7f0000000280)='./file0\x00', 0x0, 0xffffffffffffffff) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000780)='./bus\x00') sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0xfffe, 0x0, 0x0, 0x54}, 0x9c) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 738.873779ms ago: executing program 3 (id=1183): socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xfffffff3) write$ppp(0xffffffffffffffff, &(0x7f00000000c0)="d63765b02c76d30516b4f9821f82e3be85ca17ad75", 0x15) r0 = socket(0x1, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_RATE={0x0, 0x3, 0x3}]}, {0xfffffffffffffc22}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}}, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000100003050000000000000005d6000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$inet6_sctp(0xa, 0x801, 0x84) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/162, 0xa2}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 636.045914ms ago: executing program 3 (id=1184): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x40015b0b, &(0x7f0000000040)) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) r3 = syz_io_uring_setup(0x4927, &(0x7f0000000180)={0x0, 0x701, 0x10000, 0x0, 0x4a}, &(0x7f0000000080), &(0x7f0000000200)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000004, 0x11, r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000008400000061"], 0x1c, 0x4000}, 0x24000804) r5 = socket$inet6_udp(0xa, 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r4, &(0x7f00000002c0), &(0x7f0000000380), 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) 159.73343ms ago: executing program 2 (id=1185): futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f00000000c0), 0xc5000002) r0 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x308300, 0xdb, 0x2}, 0x18) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$vga_arbiter(r4, &(0x7f0000000080), 0xf) r5 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x12, 0x100000) ioctl$SIOCX25SCUDMATCHLEN(r5, 0x89e7, &(0x7f0000000100)={0x67}) r6 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r6, 0xab0a, 0x1000101) ioctl$NBD_SET_SOCK(r6, 0xab00, r3) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="02002bbd7000fbdbdf2511000063"], 0x14}}, 0x4040010) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r7, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8810}, 0x4001000) r8 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001800), 0x40000, 0x0) openat$kvm(0xffffff9c, &(0x7f00000003c0), 0x10003, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) ioctl$CDROM_CLEAR_OPTIONS(r8, 0x5321, 0x8) 0s ago: executing program 0 (id=1186): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000440)=0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000500), 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400fffc00000000082038851000000600000018000000", @ANYRES32, @ANYBLOB="00000000010300006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x1000, 0x2, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x657, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}}) r4 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x24}}, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000000c0)='ocfs2_dlmfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') mkdir(&(0x7f0000000040)='./bus\x00', 0x10b) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x2, 0x1, 0x604, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x14) kernel console output (not intermixed with test programs): end of device [ 97.494597][ T7553] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 97.498362][ T7553] syz.3.442: attempt to access beyond end of device [ 97.498362][ T7553] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 97.502145][ T7553] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 97.505057][ T7553] syz.3.442: attempt to access beyond end of device [ 97.505057][ T7553] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 97.508760][ T7553] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 97.511852][ T7553] syz.3.442: attempt to access beyond end of device [ 97.511852][ T7553] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 97.515693][ T7553] syz.3.442: attempt to access beyond end of device [ 97.515693][ T7553] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 97.519804][ T7553] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 97.522502][ T7553] syz.3.442: attempt to access beyond end of device [ 97.522502][ T7553] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 97.526401][ T7553] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 97.530435][ T7553] syz.3.442: attempt to access beyond end of device [ 97.530435][ T7553] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 97.534266][ T7553] syz.3.442: attempt to access beyond end of device [ 97.534266][ T7553] nbd3: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 97.538175][ T7553] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 97.541035][ T7553] syz.3.442: attempt to access beyond end of device [ 97.541035][ T7553] nbd3: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 97.544948][ T7553] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 97.547892][ T7553] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 97.715883][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 97.742338][ T7569] syzkaller0: entered promiscuous mode [ 97.743956][ T7569] syzkaller0: entered allmulticast mode [ 98.405484][ T7582] SET target dimension over the limit! [ 98.730985][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 99.287809][ T7597] team0: Unable to change to the same mode the team is in [ 99.756824][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 100.500862][ T7623] netlink: 'syz.2.460': attribute type 10 has an invalid length. [ 100.793253][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 100.889162][ T7629] Process accounting resumed [ 101.546241][ T7635] o2cb: This node has not been configured. [ 101.547982][ T7635] o2cb: Cluster check failed. Fix errors before retrying. [ 101.550134][ T7635] (syz.2.464,7635,2):user_dlm_register:674 ERROR: status = -22 [ 101.552306][ T7635] (syz.2.464,7635,2):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "bus" [ 101.811002][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 102.453054][ T7676] Process accounting resumed [ 102.848040][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 102.968067][ T833] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 103.052523][ T7688] netlink: 28 bytes leftover after parsing attributes in process `syz.1.477'. [ 103.055250][ T7688] netlink: 24 bytes leftover after parsing attributes in process `syz.1.477'. [ 103.061531][ T7688] bond0: entered promiscuous mode [ 103.063792][ T7688] batadv_slave_1: entered promiscuous mode [ 103.065870][ T7688] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 103.068258][ T7688] Cannot create hsr debugfs directory [ 103.069947][ T7688] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 103.118047][ T833] usb 8-1: Using ep0 maxpacket: 8 [ 103.122373][ T833] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 103.125470][ T833] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 103.128145][ T833] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.136654][ T833] usb 8-1: config 0 descriptor?? [ 103.195304][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.481'. [ 103.198021][ T7703] netlink: 24 bytes leftover after parsing attributes in process `syz.1.481'. [ 103.203491][ T7703] vxcan3: entered promiscuous mode [ 103.205018][ T7703] vxcan3: entered allmulticast mode [ 103.344889][ T833] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 103.854374][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.474'. [ 103.857018][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.474'. [ 103.887997][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 104.928082][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 105.282814][ T7737] Process accounting resumed [ 105.711493][ T5985] usb 8-1: USB disconnect, device number 2 [ 105.839540][ T7745] netlink: 20 bytes leftover after parsing attributes in process `syz.3.492'. [ 105.886603][ T7752] syzkaller0: entered promiscuous mode [ 105.889043][ T7752] syzkaller0: entered allmulticast mode [ 105.978035][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 106.874133][ T7761] o2cb: This node has not been configured. [ 106.877061][ T7761] o2cb: Cluster check failed. Fix errors before retrying. [ 106.879439][ T7761] (syz.0.497,7761,0):user_dlm_register:674 ERROR: status = -22 [ 106.881657][ T7761] (syz.0.497,7761,0):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "bus" [ 107.010613][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 107.229734][ T7764] input: syz1 as /devices/virtual/input/input8 [ 108.048070][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 108.489871][ T7790] Process accounting resumed [ 108.992709][ T7803] sit0: entered promiscuous mode [ 108.994349][ T7803] vlan2: entered promiscuous mode [ 108.997070][ T7803] sit0: left promiscuous mode [ 109.088107][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 109.233952][ T7810] 9pnet_virtio: no channels available for device syz [ 109.839162][ T7820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.513'. [ 109.969418][ T6008] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 110.046320][ T7826] tipc: Started in network mode [ 110.047796][ T7826] tipc: Node identity ac1414aa, cluster identity 4711 [ 110.051380][ T7826] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 110.053661][ T7826] tipc: Enabled bearer , priority 10 [ 110.128073][ T6008] usb 7-1: Using ep0 maxpacket: 16 [ 110.129307][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 110.135795][ T6008] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 110.138641][ T6008] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.141647][ T6008] usb 7-1: Product: syz [ 110.146136][ T7832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.517'. [ 110.166629][ T6008] usb 7-1: Manufacturer: syz [ 110.171923][ T6008] usb 7-1: SerialNumber: syz [ 110.185362][ T6008] r8152-cfgselector 7-1: Unknown version 0x0000 [ 110.185666][ T7832] netlink: 24 bytes leftover after parsing attributes in process `syz.1.517'. [ 110.187303][ T6008] r8152-cfgselector 7-1: config 0 descriptor?? [ 110.190780][ T7832] netlink: 84 bytes leftover after parsing attributes in process `syz.1.517'. [ 110.198082][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 110.338004][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 110.488023][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 110.628077][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 110.701627][ T7846] Process accounting resumed [ 110.768315][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 110.827589][ T7841] syz.2.511 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 110.908001][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 111.002083][ T6008] r8152-cfgselector 7-1: Unknown version 0x0000 [ 111.004019][ T6008] r8152-cfgselector 7-1: bad CDC descriptors [ 111.008095][ T6008] r8152-cfgselector 7-1: USB disconnect, device number 3 [ 111.050060][ T833] tipc: Node number set to 2886997162 [ 111.178021][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 111.198009][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 111.417451][ T7852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.522'. [ 112.324620][ T7879] Process accounting resumed [ 112.805525][ T7885] netlink: 700 bytes leftover after parsing attributes in process `syz.0.530'. [ 113.008751][ T7890] loop6: detected capacity change from 0 to 524287999 [ 113.011156][ C0] blk_print_req_error: 2 callbacks suppressed [ 113.011165][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.015558][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.017891][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.020530][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.022965][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.025634][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.028112][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.030907][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.033833][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.037217][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.039734][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.042259][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.044644][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.047264][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.049793][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.052410][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.054665][ T7890] ldm_validate_partition_table(): Disk read failed. [ 113.056716][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.059382][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.061871][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.064490][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.067023][ T7890] Dev loop6: unable to read RDB block 8 [ 113.069040][ T7890] loop6: unable to read partition table [ 113.070757][ T7890] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 113.073503][ T78] loop: Write error at byte offset 1, length 4096. [ 113.781157][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.535'. [ 114.243646][ T7923] netlink: 28 bytes leftover after parsing attributes in process `syz.1.539'. [ 114.246240][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.539'. [ 114.522732][ T7934] Process accounting resumed [ 114.672408][ T7935] netlink: 48 bytes leftover after parsing attributes in process `syz.1.544'. [ 115.088076][ C3] net_ratelimit: 7 callbacks suppressed [ 115.088089][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 115.328082][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 115.373590][ T7955] netlink: 36 bytes leftover after parsing attributes in process `syz.3.548'. [ 115.432035][ T7956] netlink: 'syz.3.548': attribute type 4 has an invalid length. [ 115.434314][ T7956] netlink: 17 bytes leftover after parsing attributes in process `syz.3.548'. [ 115.649655][ T7956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.548'. [ 116.128094][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 116.371872][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 116.482023][ T7998] FAULT_INJECTION: forcing a failure. [ 116.482023][ T7998] name failslab, interval 1, probability 0, space 0, times 0 [ 116.486721][ T7998] CPU: 3 UID: 0 PID: 7998 Comm: syz.3.559 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 116.489660][ T7998] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 116.492585][ T7998] Call Trace: [ 116.493528][ T7998] [ 116.494365][ T7998] dump_stack_lvl+0x16c/0x1f0 [ 116.495685][ T7998] should_fail_ex+0x497/0x5b0 [ 116.496995][ T7998] ? fs_reclaim_acquire+0xae/0x150 [ 116.498404][ T7998] should_failslab+0xc2/0x120 [ 116.499726][ T7998] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 116.501346][ T7998] ? __pfx___lock_acquire+0x10/0x10 [ 116.502787][ T7998] ? __d_alloc+0x35/0x8c0 [ 116.504005][ T7998] __d_alloc+0x35/0x8c0 [ 116.505173][ T7998] d_alloc+0x4a/0x1e0 [ 116.506308][ T7998] d_alloc_parallel+0xe9/0x12b0 [ 116.507667][ T7998] ? __pfx_lock_release+0x10/0x10 [ 116.509069][ T7998] ? trace_lock_acquire+0x14e/0x1f0 [ 116.510526][ T7998] ? __pfx_d_alloc_parallel+0x10/0x10 [ 116.512046][ T7998] ? lockdep_init_map_type+0x16d/0x7d0 [ 116.513573][ T7998] ? lockdep_init_map_type+0x16d/0x7d0 [ 116.515085][ T7998] proc_fill_cache+0x2eb/0x470 [ 116.516449][ T7998] ? __pfx_proc_pid_instantiate+0x10/0x10 [ 116.518019][ T7998] ? __pfx_proc_fill_cache+0x10/0x10 [ 116.519472][ T7998] ? __pfx_vsnprintf+0x10/0x10 [ 116.520825][ T7998] ? snprintf+0xc8/0x100 [ 116.521992][ T7998] proc_pid_readdir+0x3c5/0x830 [ 116.523357][ T7998] ? __pfx_proc_pid_readdir+0x10/0x10 [ 116.524868][ T7998] ? qrtr_endpoint_post+0x10e0/0x1380 [ 116.526387][ T7998] proc_root_readdir+0xa1/0xd0 [ 116.527697][ T7998] iterate_dir+0x52f/0xb40 [ 116.528949][ T7998] __ia32_sys_getdents64+0x148/0x2c0 [ 116.530419][ T7998] ? __pfx___ia32_sys_getdents64+0x10/0x10 [ 116.532033][ T7998] ? __pfx_filldir64+0x10/0x10 [ 116.533355][ T7998] __do_fast_syscall_32+0x73/0x120 [ 116.534775][ T7998] do_fast_syscall_32+0x32/0x80 [ 116.536148][ T7998] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 116.537922][ T7998] RIP: 0023:0xf7fa7579 [ 116.539069][ T7998] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 116.544426][ T7998] RSP: 002b:00000000f50d555c EFLAGS: 00000296 ORIG_RAX: 00000000000000dc [ 116.546704][ T7998] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000020000800 [ 116.549034][ T7998] RDX: 0000000000000ff9 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.551301][ T7998] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 116.553582][ T7998] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 116.555861][ T7998] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 116.558154][ T7998] [ 116.748897][ T7999] 9pnet_fd: Insufficient options for proto=fd [ 117.139800][ T8011] FAULT_INJECTION: forcing a failure. [ 117.139800][ T8011] name failslab, interval 1, probability 0, space 0, times 0 [ 117.143573][ T8011] CPU: 2 UID: 0 PID: 8011 Comm: syz.3.564 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 117.146490][ T8011] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 117.146499][ T8011] Call Trace: [ 117.146504][ T8011] [ 117.146508][ T8011] dump_stack_lvl+0x16c/0x1f0 [ 117.146526][ T8011] should_fail_ex+0x497/0x5b0 [ 117.146539][ T8011] ? fs_reclaim_acquire+0xae/0x150 [ 117.146553][ T8011] should_failslab+0xc2/0x120 [ 117.146568][ T8011] __kmalloc_node_noprof+0xd1/0x520 [ 117.159611][ T8011] ? __vmalloc_node_range_noprof+0x3d8/0x1530 [ 117.161382][ T8011] __vmalloc_node_range_noprof+0x3d8/0x1530 [ 117.163083][ T8011] ? translate_table+0x6b0/0x1f00 [ 117.164541][ T8011] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 117.166310][ T8011] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 117.168110][ T8011] ? __vmap_pages_range_noflush+0x431/0x700 [ 117.168289][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 117.169892][ T8011] ? translate_table+0x6b0/0x1f00 [ 117.173374][ T8011] vmalloc_node_noprof+0x6f/0x90 [ 117.174831][ T8011] ? translate_table+0x6b0/0x1f00 [ 117.176305][ T8011] translate_table+0x6b0/0x1f00 [ 117.177792][ T8011] ? do_replace_finish+0xe7/0x22b0 [ 117.179278][ T8011] ? mark_lock+0xb5/0xc60 [ 117.180544][ T8011] ? __pfx_translate_table+0x10/0x10 [ 117.182105][ T8011] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 117.183933][ T8011] ? do_replace_finish+0xe7/0x22b0 [ 117.185444][ T8011] do_replace_finish+0x9a7/0x22b0 [ 117.186913][ T8011] ? __pfx_do_replace_finish+0x10/0x10 [ 117.188491][ T8011] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 117.190221][ T8011] ? vfree+0x311/0x950 [ 117.191456][ T8011] ? compat_do_replace+0x353/0x750 [ 117.192959][ T8011] compat_do_replace+0x4c7/0x750 [ 117.194388][ T8011] ? __pfx_compat_do_replace+0x10/0x10 [ 117.195917][ T8011] ? aa_get_newest_label+0x376/0x680 [ 117.197441][ T8011] ? __pfx_aa_get_newest_label+0x10/0x10 [ 117.199054][ T8011] ? bpf_lsm_capable+0x9/0x10 [ 117.200416][ T8011] ? security_capable+0x7e/0x260 [ 117.201865][ T8011] do_ebt_set_ctl+0x4af/0x580 [ 117.203217][ T8011] ? sockopt_release_sock+0x52/0x60 [ 117.204736][ T8011] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 117.206239][ T8011] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 117.207800][ T8011] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 117.209545][ T8011] nf_setsockopt+0x8a/0xf0 [ 117.210842][ T8011] ip_setsockopt+0xcb/0xf0 [ 117.212173][ T8011] udp_setsockopt+0x7d/0xd0 [ 117.213506][ T8011] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 117.215227][ T8011] do_sock_setsockopt+0x222/0x480 [ 117.216686][ T8011] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 117.218273][ T8011] ? lock_acquire+0x2f/0xb0 [ 117.219588][ T8011] __sys_setsockopt+0x1a0/0x230 [ 117.220998][ T8011] __ia32_sys_setsockopt+0xbc/0x160 [ 117.222515][ T8011] ? lockdep_hardirqs_on+0x7c/0x110 [ 117.224162][ T8011] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 117.226088][ T8011] __do_fast_syscall_32+0x73/0x120 [ 117.227572][ T8011] do_fast_syscall_32+0x32/0x80 [ 117.228997][ T8011] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.230822][ T8011] RIP: 0023:0xf7fa7579 [ 117.232059][ T8011] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 117.237577][ T8011] RSP: 002b:00000000f50f655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 117.239983][ T8011] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 117.242256][ T8011] RDX: 0000000000000080 RSI: 0000000020000000 RDI: 00000000000000e0 [ 117.244610][ T8011] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 117.246857][ T8011] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 117.249066][ T8011] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.251347][ T8011] [ 117.254752][ T8015] Cannot find add_set index 0 as target [ 117.263538][ T8011] warn_alloc: 1 callbacks suppressed [ 117.263555][ T8011] syz.3.564: vmalloc error: size 4096, failed to allocated page array size 8, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 117.272705][ T8011] CPU: 3 UID: 0 PID: 8011 Comm: syz.3.564 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 117.276968][ T8011] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 117.281274][ T8011] Call Trace: [ 117.282628][ T8011] [ 117.283842][ T8011] dump_stack_lvl+0x16c/0x1f0 [ 117.285763][ T8011] warn_alloc+0x24d/0x3a0 [ 117.287516][ T8011] ? __pfx_warn_alloc+0x10/0x10 [ 117.289459][ T8011] ? dump_stack_lvl+0x1a1/0x1f0 [ 117.291488][ T8011] ? rcu_is_watching+0x12/0xc0 [ 117.293433][ T8011] ? trace_kmalloc+0x2d/0xd0 [ 117.295320][ T8011] ? __kmalloc_node_noprof+0x23d/0x520 [ 117.297546][ T8011] __vmalloc_node_range_noprof+0x1105/0x1530 [ 117.299991][ T8011] ? translate_table+0x6b0/0x1f00 [ 117.302081][ T8011] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 117.304612][ T8011] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 117.307118][ T8011] ? __vmap_pages_range_noflush+0x431/0x700 [ 117.309554][ T8011] ? translate_table+0x6b0/0x1f00 [ 117.311585][ T8011] vmalloc_node_noprof+0x6f/0x90 [ 117.313573][ T8011] ? translate_table+0x6b0/0x1f00 [ 117.315612][ T8011] translate_table+0x6b0/0x1f00 [ 117.317602][ T8011] ? do_replace_finish+0xe7/0x22b0 [ 117.319640][ T8011] ? mark_lock+0xb5/0xc60 [ 117.321363][ T8011] ? __pfx_translate_table+0x10/0x10 [ 117.323441][ T8011] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 117.325951][ T8011] ? do_replace_finish+0xe7/0x22b0 [ 117.328026][ T8011] do_replace_finish+0x9a7/0x22b0 [ 117.330073][ T8011] ? __pfx_do_replace_finish+0x10/0x10 [ 117.332122][ T8011] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 117.334563][ T8011] ? vfree+0x311/0x950 [ 117.336266][ T8011] ? compat_do_replace+0x353/0x750 [ 117.338349][ T8011] compat_do_replace+0x4c7/0x750 [ 117.340350][ T8011] ? __pfx_compat_do_replace+0x10/0x10 [ 117.342499][ T8011] ? aa_get_newest_label+0x376/0x680 [ 117.344575][ T8011] ? __pfx_aa_get_newest_label+0x10/0x10 [ 117.346799][ T8011] ? bpf_lsm_capable+0x9/0x10 [ 117.348700][ T8011] ? security_capable+0x7e/0x260 [ 117.350698][ T8011] do_ebt_set_ctl+0x4af/0x580 [ 117.352588][ T8011] ? sockopt_release_sock+0x52/0x60 [ 117.354699][ T8011] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 117.356812][ T8011] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 117.358945][ T8011] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 117.361366][ T8011] nf_setsockopt+0x8a/0xf0 [ 117.363074][ T8011] ip_setsockopt+0xcb/0xf0 [ 117.364783][ T8011] udp_setsockopt+0x7d/0xd0 [ 117.366527][ T8011] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 117.368939][ T8011] do_sock_setsockopt+0x222/0x480 [ 117.370449][ T8011] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 117.372046][ T8011] ? lock_acquire+0x2f/0xb0 [ 117.373567][ T8011] __sys_setsockopt+0x1a0/0x230 [ 117.375210][ T8011] __ia32_sys_setsockopt+0xbc/0x160 [ 117.376722][ T8011] ? lockdep_hardirqs_on+0x7c/0x110 [ 117.378217][ T8011] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 117.380709][ T8011] __do_fast_syscall_32+0x73/0x120 [ 117.382817][ T8011] do_fast_syscall_32+0x32/0x80 [ 117.384573][ T8011] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.386422][ T8011] RIP: 0023:0xf7fa7579 [ 117.387594][ T8011] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 117.394364][ T8011] RSP: 002b:00000000f50f655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 117.397356][ T8011] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 117.399908][ T8011] RDX: 0000000000000080 RSI: 0000000020000000 RDI: 00000000000000e0 [ 117.402691][ T8011] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 117.405688][ T8011] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 117.408581][ T8011] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.411567][ T8011] [ 117.414049][ T8011] Mem-Info: [ 117.415441][ T8011] active_anon:15016 inactive_anon:196 isolated_anon:0 [ 117.415441][ T8011] active_file:1304 inactive_file:47305 isolated_file:0 [ 117.415441][ T8011] unevictable:1768 dirty:329 writeback:0 [ 117.415441][ T8011] slab_reclaimable:8200 slab_unreclaimable:55033 [ 117.415441][ T8011] mapped:30097 shmem:11932 pagetables:700 [ 117.415441][ T8011] sec_pagetables:302 bounce:0 [ 117.415441][ T8011] kernel_misc_reclaimable:0 [ 117.415441][ T8011] free:40695 free_pcp:5576 free_cma:0 [ 117.417985][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 117.432208][ T8011] Node 0 active_anon:4648kB inactive_anon:784kB active_file:292kB inactive_file:9876kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:7396kB dirty:36kB writeback:0kB shmem:4860kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9676kB pagetables:1000kB sec_pagetables:1140kB all_unreclaimable? yes [ 117.446338][ T8011] Node 1 active_anon:56716kB inactive_anon:0kB active_file:4924kB inactive_file:179344kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:112992kB dirty:1280kB writeback:0kB shmem:44168kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3036kB pagetables:1800kB sec_pagetables:68kB all_unreclaimable? no [ 117.456626][ T8011] Node 0 DMA free:2948kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:268kB local_pcp:52kB free_cma:0kB [ 117.465468][ T8011] lowmem_reserve[]: 0 273 0 0 0 [ 117.466971][ T8011] Node 0 DMA32 free:17856kB boost:0kB min:13904kB low:17380kB high:20856kB reserved_highatomic:4096KB active_anon:4636kB inactive_anon:784kB active_file:292kB inactive_file:9876kB unevictable:3536kB writepending:36kB present:1032196kB managed:306300kB mlocked:0kB bounce:0kB free_pcp:1552kB local_pcp:344kB free_cma:0kB [ 117.475480][ T8011] lowmem_reserve[]: 0 0 0 0 0 [ 117.476925][ T8011] Node 1 DMA32 free:133736kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:56816kB inactive_anon:0kB active_file:4924kB inactive_file:179344kB unevictable:3536kB writepending:1280kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:27352kB local_pcp:1196kB free_cma:0kB [ 117.485957][ T8011] lowmem_reserve[]: 0 0 0 0 0 [ 117.487337][ T8011] Node 0 DMA: 125*4kB (UM) 58*8kB (UM) 28*16kB (UM) 20*32kB (UM) 6*64kB (UM) 2*128kB (M) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2948kB [ 117.492629][ T8011] Node 0 DMA32: 18*4kB (MH) 43*8kB (UMEH) 19*16kB (ME) 88*32kB (UMEH) 71*64kB (UMEH) 18*128kB (UE) 11*256kB (UME) 5*512kB (UME) 2*1024kB (M) 0*2048kB 0*4096kB = 17808kB [ 117.499615][ T8011] Node 1 DMA32: 7*4kB (UE) 10*8kB (E) 2*16kB (UM) 2*32kB (ME) 2*64kB (ME) 3*128kB (UME) 3*256kB (UME) 18*512kB (UME) 6*1024kB (UM) 3*2048kB (UME) 27*4096kB (UME) = 133580kB [ 117.505165][ T8011] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 117.508288][ T8011] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 117.511068][ T8011] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 117.513923][ T8011] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 117.516691][ T8011] 60867 total pagecache pages [ 117.518229][ T8011] 0 pages in swap cache [ 117.519889][ T8011] Free swap = 124984kB [ 117.521721][ T8011] Total swap = 124996kB [ 117.523522][ T8011] 524155 pages RAM [ 117.525181][ T8011] 0 pages HighMem/MovableOnly [ 117.527198][ T8011] 206677 pages reserved [ 117.529331][ T8011] 0 pages cma reserved [ 117.619638][ T8029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.567'. [ 117.845908][ T8038] netlink: 48 bytes leftover after parsing attributes in process `syz.0.572'. [ 117.883479][ T8040] sit0: entered promiscuous mode [ 117.885155][ T8040] vlan3: entered promiscuous mode [ 117.887700][ T8040] sit0: left promiscuous mode [ 118.197027][ T8047] Process accounting resumed [ 118.208087][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 118.230337][ T8049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.576'. [ 118.448113][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 118.701267][ T8058] syzkaller1: entered promiscuous mode [ 118.703328][ T8058] syzkaller1: entered allmulticast mode [ 119.258021][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 119.455007][ T8078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.585'. [ 119.474930][ T8078] netlink: 24 bytes leftover after parsing attributes in process `syz.1.585'. [ 119.478012][ T8078] netlink: 84 bytes leftover after parsing attributes in process `syz.1.585'. [ 119.497984][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 119.828872][ T39] audit: type=1326 audit(2000000017.780:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.1.589" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 119.848423][ T39] audit: type=1326 audit(2000000017.780:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.1.589" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 119.854710][ T39] audit: type=1326 audit(2000000017.780:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.1.589" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 119.863003][ T39] audit: type=1326 audit(2000000017.780:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.1.589" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 119.869546][ T39] audit: type=1326 audit(2000000017.780:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.1.589" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 119.872240][ T8100] : renamed from bond0 (while UP) [ 119.877506][ T39] audit: type=1326 audit(2000000017.780:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.1.589" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 119.884147][ T39] audit: type=1326 audit(2000000017.780:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.1.589" exe="/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 119.892287][ T39] audit: type=1326 audit(2000000017.780:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.1.589" exe="/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 119.898858][ T39] audit: type=1326 audit(2000000017.780:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.1.589" exe="/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 119.905946][ T39] audit: type=1326 audit(2000000017.780:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.1.589" exe="/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 120.288058][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 120.528023][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 120.626075][ T8111] FAULT_INJECTION: forcing a failure. [ 120.626075][ T8111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.630098][ T8111] CPU: 3 UID: 0 PID: 8111 Comm: syz.2.592 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 120.633336][ T8111] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 120.636623][ T8111] Call Trace: [ 120.637637][ T8111] [ 120.638528][ T8111] dump_stack_lvl+0x16c/0x1f0 [ 120.640015][ T8111] should_fail_ex+0x497/0x5b0 [ 120.641464][ T8111] _copy_to_user+0x32/0xd0 [ 120.642871][ T8111] simple_read_from_buffer+0xd0/0x160 [ 120.644509][ T8111] proc_fail_nth_read+0x198/0x270 [ 120.646108][ T8111] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 120.647806][ T8111] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 120.649526][ T8111] vfs_read+0x1df/0xbe0 [ 120.650779][ T8111] ? __fget_files+0x1fc/0x3a0 [ 120.652239][ T8111] ? __pfx___mutex_lock+0x10/0x10 [ 120.653796][ T8111] ? __pfx_vfs_read+0x10/0x10 [ 120.655248][ T8111] ? __fget_files+0x206/0x3a0 [ 120.656718][ T8111] ksys_read+0x12b/0x250 [ 120.657998][ T8111] ? __pfx_ksys_read+0x10/0x10 [ 120.659468][ T8111] __do_fast_syscall_32+0x73/0x120 [ 120.661068][ T8111] do_fast_syscall_32+0x32/0x80 [ 120.662515][ T8111] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 120.664436][ T8111] RIP: 0023:0xf7f56579 [ 120.665824][ T8111] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 120.672773][ T8111] RSP: 002b:00000000f50a6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 120.676044][ T8111] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f50a6620 [ 120.679036][ T8111] RDX: 000000000000000f RSI: 00000000f73e3ff4 RDI: 0000000000000000 [ 120.682171][ T8111] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 120.685240][ T8111] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 120.688227][ T8111] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 120.691359][ T8111] [ 120.694481][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.594'. [ 120.717742][ T8117] loop6: detected capacity change from 0 to 524287999 [ 120.730620][ C2] blk_print_req_error: 5 callbacks suppressed [ 120.730630][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.735006][ C2] buffer_io_error: 3 callbacks suppressed [ 120.735014][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.739006][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.742485][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.745981][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.749644][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.752819][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.756249][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.759571][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.762237][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.765052][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.767660][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.770312][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.772952][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.775692][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.778333][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.782176][ T8117] ldm_validate_partition_table(): Disk read failed. [ 120.784226][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.786950][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.789492][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.792224][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.795327][ T8117] Dev loop6: unable to read RDB block 0 [ 120.797217][ T8117] loop6: unable to read partition table [ 120.798768][ T7643] loop: Write error at byte offset 1, length 4096. [ 120.801125][ T8117] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 120.829463][ T8123] netlink: 20 bytes leftover after parsing attributes in process `syz.2.597'. [ 120.833178][ T8123] geneve0: entered allmulticast mode [ 121.337995][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 121.578009][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 121.686676][ T8129] netlink: 20 bytes leftover after parsing attributes in process `syz.2.599'. [ 121.829450][ T8138] block nbd2: shutting down sockets [ 121.843106][ T8138] syz.2.602: attempt to access beyond end of device [ 121.843106][ T8138] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 121.846955][ T8138] syz.2.602: attempt to access beyond end of device [ 121.846955][ T8138] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 121.851052][ T8138] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 121.853935][ T8138] syz.2.602: attempt to access beyond end of device [ 121.853935][ T8138] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 121.857634][ T8138] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 121.862144][ T8138] syz.2.602: attempt to access beyond end of device [ 121.862144][ T8138] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 121.865902][ T8138] syz.2.602: attempt to access beyond end of device [ 121.865902][ T8138] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 121.869756][ T8138] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 121.872652][ T8138] syz.2.602: attempt to access beyond end of device [ 121.872652][ T8138] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 121.876418][ T8138] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 121.879567][ T8138] syz.2.602: attempt to access beyond end of device [ 121.879567][ T8138] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 121.883334][ T8138] syz.2.602: attempt to access beyond end of device [ 121.883334][ T8138] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 121.887067][ T8138] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 121.890197][ T8138] syz.2.602: attempt to access beyond end of device [ 121.890197][ T8138] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 121.894099][ T8138] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 121.897664][ T8138] syz.2.602: attempt to access beyond end of device [ 121.897664][ T8138] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 121.901502][ T8138] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 121.904409][ T8138] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 121.907718][ T8138] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 122.034460][ T8145] team0: Unable to change to the same mode the team is in [ 122.368005][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 122.499490][ T8159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.609'. [ 122.608181][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 122.700610][ T8164] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 122.702867][ T8164] UDF-fs: Scanning with blocksize 2048 failed [ 122.714522][ T8164] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 122.716799][ T8164] UDF-fs: Scanning with blocksize 4096 failed [ 123.401503][ T8181] netlink: 'syz.1.614': attribute type 10 has an invalid length. [ 123.408024][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 123.614140][ T8188] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 123.648013][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 123.790083][ T8200] FAULT_INJECTION: forcing a failure. [ 123.790083][ T8200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.794773][ T8200] CPU: 3 UID: 0 PID: 8200 Comm: syz.2.620 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 123.798263][ T8200] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 123.801295][ T8200] Call Trace: [ 123.802327][ T8200] [ 123.803199][ T8200] dump_stack_lvl+0x16c/0x1f0 [ 123.804605][ T8200] should_fail_ex+0x497/0x5b0 [ 123.805978][ T8200] _copy_from_user+0x2e/0xd0 [ 123.807336][ T8200] compat_do_replace+0x281/0x750 [ 123.808786][ T8200] ? lock_acquire.part.0+0x11b/0x380 [ 123.810517][ T8200] ? __pfx_compat_do_replace+0x10/0x10 [ 123.812622][ T8200] ? aa_get_newest_label+0x376/0x680 [ 123.814670][ T8200] ? __pfx_aa_get_newest_label+0x10/0x10 [ 123.816829][ T8200] ? bpf_lsm_capable+0x9/0x10 [ 123.818422][ T8200] ? security_capable+0x7e/0x260 [ 123.820253][ T8200] do_ebt_set_ctl+0x4af/0x580 [ 123.822179][ T8200] ? sockopt_release_sock+0x52/0x60 [ 123.824255][ T8200] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 123.826214][ T8200] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 123.828131][ T8200] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 123.830241][ T8200] nf_setsockopt+0x8a/0xf0 [ 123.831891][ T8200] ip_setsockopt+0xcb/0xf0 [ 123.833607][ T8200] udp_setsockopt+0x7d/0xd0 [ 123.835391][ T8200] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 123.837091][ T8200] do_sock_setsockopt+0x222/0x480 [ 123.838527][ T8200] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 123.840132][ T8200] ? lock_acquire+0x2f/0xb0 [ 123.841454][ T8200] __sys_setsockopt+0x1a0/0x230 [ 123.843103][ T8200] __ia32_sys_setsockopt+0xbc/0x160 [ 123.845176][ T8200] ? lockdep_hardirqs_on+0x7c/0x110 [ 123.847244][ T8200] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 123.849894][ T8200] __do_fast_syscall_32+0x73/0x120 [ 123.851939][ T8200] do_fast_syscall_32+0x32/0x80 [ 123.853862][ T8200] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 123.856363][ T8200] RIP: 0023:0xf7f56579 [ 123.857915][ T8200] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 123.864183][ T8200] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 123.867425][ T8200] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 123.869963][ T8200] RDX: 0000000000000080 RSI: 0000000020000000 RDI: 00000000000000e0 [ 123.872226][ T8200] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 123.874462][ T8200] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 123.877286][ T8200] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 123.880406][ T8200] [ 123.920836][ T8203] netlink: 28 bytes leftover after parsing attributes in process `syz.2.621'. [ 124.114780][ T8206] team0: Unable to change to the same mode the team is in [ 124.458035][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 124.633006][ T8221] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 124.634922][ T8221] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 124.637087][ T8221] vhci_hcd vhci_hcd.0: Device attached [ 124.645999][ T8222] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 124.647888][ T8222] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 124.650547][ T8222] vhci_hcd vhci_hcd.0: Device attached [ 124.668896][ T8224] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(9) [ 124.670779][ T8224] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 124.672992][ T8224] vhci_hcd vhci_hcd.0: Device attached [ 124.684523][ T8228] vhci_hcd: connection closed [ 124.684664][ T8223] vhci_hcd: connection closed [ 124.686139][ T8225] vhci_hcd: connection closed [ 124.688163][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 124.690871][ T164] vhci_hcd: stop threads [ 124.696246][ T164] vhci_hcd: release socket [ 124.697565][ T164] vhci_hcd: disconnect device [ 124.700030][ T164] vhci_hcd: stop threads [ 124.701272][ T164] vhci_hcd: release socket [ 124.702569][ T164] vhci_hcd: disconnect device [ 124.709973][ T164] vhci_hcd: stop threads [ 124.711229][ T164] vhci_hcd: release socket [ 124.712559][ T164] vhci_hcd: disconnect device [ 124.726453][ T8232] input: syz1 as /devices/virtual/input/input10 [ 124.882226][ T8250] syzkaller0: entered promiscuous mode [ 124.884017][ T8250] syzkaller0: entered allmulticast mode [ 125.488220][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 125.568038][ T5953] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.571887][ T5946] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 125.615928][ T8261] netlink: 28 bytes leftover after parsing attributes in process `syz.2.636'. [ 125.618621][ T8261] netlink: 24 bytes leftover after parsing attributes in process `syz.2.636'. [ 125.728005][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 125.760869][ T8267] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 125.763361][ T8267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.791867][ T8268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.639'. [ 125.796091][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.639'. [ 126.429572][ T8282] loop6: detected capacity change from 0 to 524287999 [ 126.431857][ C2] blk_print_req_error: 6 callbacks suppressed [ 126.431866][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.436317][ C2] buffer_io_error: 4 callbacks suppressed [ 126.436323][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.436722][ T8284] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 126.438286][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.442942][ T8284] netlink: 24 bytes leftover after parsing attributes in process `syz.2.643'. [ 126.443401][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.450676][ T5953] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 126.451021][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.455391][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.458097][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.460720][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.463113][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.465697][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.468927][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.471903][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.474455][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.477096][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.480269][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.482892][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.485190][ T8282] ldm_validate_partition_table(): Disk read failed. [ 126.485464][ C3] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.490198][ C2] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.493008][ T7644] loop: Write error at byte offset 1, length 4096. [ 126.494942][ C3] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 126.497392][ C3] Buffer I/O error on dev loop6, logical block 1, async page read [ 126.500054][ T8282] Dev loop6: unable to read RDB block 8 [ 126.501918][ T8282] loop6: unable to read partition table [ 126.503660][ T8282] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 126.528043][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 126.548875][ T8287] fuse: Bad value for 'rootmode' [ 126.768060][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 127.062049][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.655'. [ 127.577984][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 127.648072][ T5953] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.759628][ T8343] team0: Unable to change to the same mode the team is in [ 127.808083][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 127.872359][ T8346] syzkaller0: entered promiscuous mode [ 127.874721][ T8346] syzkaller0: entered allmulticast mode [ 127.953217][ T8348] netlink: 36 bytes leftover after parsing attributes in process `syz.0.661'. [ 128.608023][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 128.858276][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 129.056977][ T8350] netlink: 'syz.0.661': attribute type 4 has an invalid length. [ 129.060850][ T8350] netlink: 17 bytes leftover after parsing attributes in process `syz.0.661'. [ 129.066685][ T8351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.661'. [ 129.122945][ T8359] netlink: 156 bytes leftover after parsing attributes in process `syz.2.663'. [ 129.125563][ T8359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.663'. [ 129.589131][ T8378] overlayfs: missing 'lowerdir' [ 129.726457][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.671'. [ 130.056387][ T8417] FAULT_INJECTION: forcing a failure. [ 130.056387][ T8417] name failslab, interval 1, probability 0, space 0, times 0 [ 130.060202][ T8417] CPU: 3 UID: 0 PID: 8417 Comm: syz.0.679 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 130.063227][ T8417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.066319][ T8417] Call Trace: [ 130.067335][ T8417] [ 130.068201][ T8417] dump_stack_lvl+0x16c/0x1f0 [ 130.069577][ T8417] should_fail_ex+0x497/0x5b0 [ 130.070962][ T8417] ? fs_reclaim_acquire+0xae/0x150 [ 130.072452][ T8417] should_failslab+0xc2/0x120 [ 130.073816][ T8417] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 130.075386][ T8417] ? security_inode_alloc+0x3b/0x2b0 [ 130.076938][ T8417] security_inode_alloc+0x3b/0x2b0 [ 130.078426][ T8417] inode_init_always_gfp+0xce4/0x1030 [ 130.080036][ T8417] alloc_inode+0x82/0x230 [ 130.081309][ T8417] new_inode+0x22/0x210 [ 130.082520][ T8417] proc_pid_make_inode+0x22/0x160 [ 130.083981][ T8417] proc_pid_make_base_inode.constprop.0+0x25/0x180 [ 130.085847][ T8417] proc_pid_instantiate+0x51/0x1e0 [ 130.087338][ T8417] proc_fill_cache+0x362/0x470 [ 130.088735][ T8417] ? __pfx_proc_pid_instantiate+0x10/0x10 [ 130.090367][ T8417] ? __pfx_proc_fill_cache+0x10/0x10 [ 130.091897][ T8417] ? __pfx_vsnprintf+0x10/0x10 [ 130.093271][ T8417] ? snprintf+0xc8/0x100 [ 130.094578][ T8417] proc_pid_readdir+0x3c5/0x830 [ 130.096008][ T8417] ? __pfx_proc_pid_readdir+0x10/0x10 [ 130.097571][ T8417] ? qrtr_endpoint_post+0x10e0/0x1380 [ 130.099125][ T8417] proc_root_readdir+0xa1/0xd0 [ 130.100527][ T8417] iterate_dir+0x52f/0xb40 [ 130.101823][ T8417] __ia32_sys_getdents64+0x148/0x2c0 [ 130.103341][ T8417] ? __pfx___ia32_sys_getdents64+0x10/0x10 [ 130.105034][ T8417] ? __pfx_filldir64+0x10/0x10 [ 130.106431][ T8417] __do_fast_syscall_32+0x73/0x120 [ 130.107906][ T8417] do_fast_syscall_32+0x32/0x80 [ 130.109518][ T8417] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 130.111370][ T8417] RIP: 0023:0xf7f31579 [ 130.112574][ T8417] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 130.118096][ T8417] RSP: 002b:00000000f506555c EFLAGS: 00000296 ORIG_RAX: 00000000000000dc [ 130.120488][ T8417] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000020000800 [ 130.122742][ T8417] RDX: 0000000000000ff9 RSI: 0000000000000000 RDI: 0000000000000000 [ 130.125087][ T8417] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 130.127421][ T8417] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 130.129716][ T8417] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 130.131991][ T8417] [ 130.688015][ C3] net_ratelimit: 2 callbacks suppressed [ 130.688026][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 130.928100][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 131.356650][ T8443] SET target dimension over the limit! [ 131.360280][ T8448] __nla_validate_parse: 1 callbacks suppressed [ 131.360290][ T8448] netlink: 20 bytes leftover after parsing attributes in process `syz.1.688'. [ 131.612949][ T8459] overlayfs: missing 'lowerdir' [ 131.694345][ T8461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.693'. [ 131.738040][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 131.791365][ T8465] o2cb: This node has not been configured. [ 131.793148][ T8465] o2cb: Cluster check failed. Fix errors before retrying. [ 131.795277][ T8465] (syz.3.692,8465,3):user_dlm_register:674 ERROR: status = -22 [ 131.797722][ T8465] (syz.3.692,8465,0):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "bus" [ 131.968052][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 132.241672][ T8467] input: syz1 as /devices/virtual/input/input11 [ 132.607433][ T8479] netlink: 20 bytes leftover after parsing attributes in process `syz.3.697'. [ 132.767992][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 132.950534][ T8492] siw: device registration error -23 [ 133.008172][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 133.277274][ T8499] xt_connbytes: Forcing CT accounting to be enabled [ 133.279278][ T8499] Cannot find del_set index 0 as target [ 133.808077][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 133.885687][ T8508] syzkaller0: entered promiscuous mode [ 133.887669][ T8508] syzkaller0: entered allmulticast mode [ 134.057991][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 134.848023][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 134.879594][ T8530] netlink: 32 bytes leftover after parsing attributes in process `syz.0.709'. [ 134.928014][ T5946] Bluetooth: hci3: command 0x0c1a tx timeout [ 135.056121][ T8518] netlink: 20 bytes leftover after parsing attributes in process `syz.2.707'. [ 135.061588][ T8530] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 135.064230][ T8530] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 135.066734][ T8530] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 135.069296][ T8530] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 135.087225][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.711'. [ 135.089827][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 135.224798][ T8542] netlink: 28 bytes leftover after parsing attributes in process `syz.3.713'. [ 135.227369][ T8542] netlink: 24 bytes leftover after parsing attributes in process `syz.3.713'. [ 135.241426][ T8542] bond0: entered promiscuous mode [ 135.245554][ T8542] batadv_slave_1: entered promiscuous mode [ 135.247815][ T8542] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 135.251104][ T8542] Cannot create hsr debugfs directory [ 135.252836][ T8542] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 135.639694][ T8553] Process accounting resumed [ 135.888048][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 136.016642][ T8558] input: syz1 as /devices/virtual/input/input12 [ 136.128053][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 136.253526][ T8569] netlink: 20 bytes leftover after parsing attributes in process `syz.3.719'. [ 136.327284][ T8572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.860301][ T8584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.723'. [ 136.885744][ T8584] syzkaller0: entered promiscuous mode [ 136.887381][ T8584] syzkaller0: entered allmulticast mode [ 136.937995][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 137.168018][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 137.254543][ T8594] netlink: 404 bytes leftover after parsing attributes in process `syz.0.726'. [ 137.968044][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 138.208570][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 138.630299][ T8631] ALSA: mixer_oss: invalid index 80000 [ 138.755092][ T8641] netlink: 36 bytes leftover after parsing attributes in process `syz.2.741'. [ 138.822850][ T8644] netlink: 'syz.2.741': attribute type 4 has an invalid length. [ 138.825161][ T8644] netlink: 17 bytes leftover after parsing attributes in process `syz.2.741'. [ 138.837488][ T8644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.741'. [ 139.007994][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 139.154569][ T8624] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 139.156888][ T8624] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 139.159030][ T8624] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 139.160948][ T8624] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 139.248071][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 139.572989][ T8657] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 139.575585][ T8657] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 139.783441][ T8661] netlink: 20 bytes leftover after parsing attributes in process `syz.3.745'. [ 139.916424][ T8671] 9pnet_virtio: no channels available for device syz [ 139.934996][ T39] kauditd_printk_skb: 680 callbacks suppressed [ 139.935008][ T39] audit: type=1804 audit(2000000037.880:697): pid=8671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.748" name="/newroot/184/file0/bus/file0" dev="overlay" ino=1033 res=1 errno=0 [ 140.058011][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 140.287989][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 140.448077][ T5946] Bluetooth: hci0: command 0x0c1a tx timeout [ 141.088000][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 141.168092][ T5946] Bluetooth: hci3: command 0x0c1a tx timeout [ 141.168401][ T5958] Bluetooth: hci1: command 0x0c1a tx timeout [ 141.173749][ T5953] Bluetooth: hci2: command 0x0c1a tx timeout [ 141.266378][ T8715] Cannot find map_set index 0 as target [ 141.328017][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 141.644053][ T8733] wireguard0: entered promiscuous mode [ 141.645689][ T8733] wireguard0: entered allmulticast mode [ 141.767525][ T8742] netlink: 63 bytes leftover after parsing attributes in process `syz.3.769'. [ 141.913079][ T8751] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 141.919184][ T8751] netlink: 24 bytes leftover after parsing attributes in process `syz.1.772'. [ 141.925301][ T5953] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 141.963248][ T8753] loop6: detected capacity change from 0 to 524287999 [ 141.965438][ C3] blk_print_req_error: 3 callbacks suppressed [ 141.965446][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 141.967255][ T8754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.771'. [ 141.969903][ C3] buffer_io_error: 1 callbacks suppressed [ 141.969911][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 141.972013][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 141.979113][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 141.983486][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 141.986120][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 141.992268][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 141.994883][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 141.997273][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 141.999921][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 142.002562][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.005208][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 142.008970][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.011624][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 142.014154][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.016788][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 142.019116][ T8753] ldm_validate_partition_table(): Disk read failed. [ 142.021187][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.023830][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 142.026410][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.029999][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 142.034110][ T8753] Dev loop6: unable to read RDB block 8 [ 142.034135][ T7643] loop: Write error at byte offset 1, length 4096. [ 142.038581][ T8753] loop6: unable to read partition table [ 142.040246][ T8753] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 142.093831][ T8757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.774'. [ 142.129081][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 142.237597][ T8764] netlink: 48 bytes leftover after parsing attributes in process `syz.1.775'. [ 142.368019][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 142.423817][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.777'. [ 142.617307][ T8776] netlink: 28 bytes leftover after parsing attributes in process `syz.1.780'. [ 142.620302][ T8776] netlink: 24 bytes leftover after parsing attributes in process `syz.1.780'. [ 142.728780][ T8781] syzkaller0: entered promiscuous mode [ 142.730417][ T8781] syzkaller0: entered allmulticast mode [ 143.168093][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 143.408041][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 143.715341][ T8807] siw: device registration error -23 [ 144.001214][ T8814] netlink: 28 bytes leftover after parsing attributes in process `syz.3.790'. [ 144.004797][ T8814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.790'. [ 144.208027][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 144.448118][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 144.493143][ T8822] netlink: 168 bytes leftover after parsing attributes in process `syz.3.792'. [ 144.743581][ T8827] netlink: 'syz.3.794': attribute type 4 has an invalid length. [ 144.824517][ T8834] fuse: Unknown parameter 'groupie' [ 145.247999][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 145.420062][ T8854] Process accounting resumed [ 145.656767][ T8856] Process accounting resumed [ 146.288034][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 146.289060][ T8873] input: syz1 as /devices/virtual/input/input13 [ 146.448316][ T8879] block nbd1: shutting down sockets [ 146.488601][ T8879] bio_check_eod: 2 callbacks suppressed [ 146.488612][ T8879] syz.1.808: attempt to access beyond end of device [ 146.488612][ T8879] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 146.511252][ T8879] syz.1.808: attempt to access beyond end of device [ 146.511252][ T8879] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 146.514972][ T8879] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 146.517751][ T8879] syz.1.808: attempt to access beyond end of device [ 146.517751][ T8879] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 146.522871][ T8882] nbd1: detected capacity change from 0 to 7982 [ 146.525017][ T8879] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 146.541682][ T6482] ldm_validate_partition_table(): Disk read failed. [ 146.544579][ T8879] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 146.549994][ T6482] Dev nbd1: unable to read RDB block 0 [ 146.554510][ T6482] nbd1: unable to read partition table [ 146.559838][ T6482] ldm_validate_partition_table(): Disk read failed. [ 146.568772][ T8879] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1994, location=1994 [ 146.572322][ T6482] Dev nbd1: unable to read RDB block 0 [ 146.572544][ T8879] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1738, location=1738 [ 146.574712][ T6482] nbd1: unable to read partition table [ 146.577081][ T8879] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1993, location=1993 [ 146.583027][ T8879] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1737, location=1737 [ 146.586098][ T8879] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1992, location=1992 [ 146.590052][ T8879] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1736, location=1736 [ 146.593064][ T8879] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1844, location=1844 [ 146.597026][ T8879] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1588, location=1588 [ 146.600751][ T8879] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1842, location=1842 [ 146.603814][ T8879] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1586, location=1586 [ 146.606656][ T8879] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 146.610429][ T8879] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 146.614011][ T8879] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=996, location=996 [ 146.616924][ T8879] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=740, location=740 [ 146.620053][ T8879] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=995, location=995 [ 146.623561][ T8879] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=739, location=739 [ 146.626488][ T8879] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=994, location=994 [ 146.629447][ T8879] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=738, location=738 [ 146.636618][ T8879] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=846, location=846 [ 146.647211][ T8879] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=590, location=590 [ 146.652863][ T8879] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=844, location=844 [ 146.657885][ T8879] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=588, location=588 [ 146.663270][ T8879] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 146.666145][ T8879] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 147.337989][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 147.989721][ T8916] overlayfs: missing 'workdir' [ 148.378029][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 148.481332][ T8928] netlink: 'syz.1.822': attribute type 12 has an invalid length. [ 148.536196][ T8929] FAULT_INJECTION: forcing a failure. [ 148.536196][ T8929] name failslab, interval 1, probability 0, space 0, times 0 [ 148.539895][ T8929] CPU: 1 UID: 0 PID: 8929 Comm: syz.3.821 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 148.542938][ T8929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 148.545933][ T8929] Call Trace: [ 148.546906][ T8929] [ 148.547786][ T8929] dump_stack_lvl+0x16c/0x1f0 [ 148.549140][ T8929] should_fail_ex+0x497/0x5b0 [ 148.550686][ T8929] ? fs_reclaim_acquire+0xae/0x150 [ 148.552194][ T8929] should_failslab+0xc2/0x120 [ 148.553553][ T8929] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 148.555181][ T8929] ? d_alloc_parallel+0x6b8/0x12b0 [ 148.556635][ T8929] ? proc_alloc_inode+0x25/0x200 [ 148.558051][ T8929] ? __pfx_proc_alloc_inode+0x10/0x10 [ 148.559607][ T8929] proc_alloc_inode+0x25/0x200 [ 148.561018][ T8929] alloc_inode+0x5d/0x230 [ 148.562277][ T8929] new_inode+0x22/0x210 [ 148.563444][ T8929] proc_pid_make_inode+0x22/0x160 [ 148.564903][ T8929] proc_pid_make_base_inode.constprop.0+0x25/0x180 [ 148.566706][ T8929] proc_pid_instantiate+0x51/0x1e0 [ 148.568216][ T8929] proc_fill_cache+0x362/0x470 [ 148.569581][ T8929] ? __pfx_proc_pid_instantiate+0x10/0x10 [ 148.571238][ T8929] ? __pfx_proc_fill_cache+0x10/0x10 [ 148.572760][ T8929] ? __pfx_vsnprintf+0x10/0x10 [ 148.574147][ T8929] ? snprintf+0xc8/0x100 [ 148.575382][ T8929] proc_pid_readdir+0x3c5/0x830 [ 148.576823][ T8929] ? __pfx_proc_pid_readdir+0x10/0x10 [ 148.578340][ T8929] ? qrtr_endpoint_post+0x10e0/0x1380 [ 148.579855][ T8929] proc_root_readdir+0xa1/0xd0 [ 148.581256][ T8929] iterate_dir+0x52f/0xb40 [ 148.582525][ T8929] __ia32_sys_getdents64+0x148/0x2c0 [ 148.584003][ T8929] ? __pfx___ia32_sys_getdents64+0x10/0x10 [ 148.585691][ T8929] ? __pfx_filldir64+0x10/0x10 [ 148.587072][ T8929] __do_fast_syscall_32+0x73/0x120 [ 148.588562][ T8929] do_fast_syscall_32+0x32/0x80 [ 148.589945][ T8929] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 148.591770][ T8929] RIP: 0023:0xf7fa7579 [ 148.592972][ T8929] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 148.598407][ T8929] RSP: 002b:00000000f50d555c EFLAGS: 00000296 ORIG_RAX: 00000000000000dc [ 148.600749][ T8929] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000020000800 [ 148.602992][ T8929] RDX: 0000000000000ff9 RSI: 0000000000000000 RDI: 0000000000000000 [ 148.605204][ T8929] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 148.607403][ T8929] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 148.609663][ T8929] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 148.611933][ T8929] [ 148.763443][ T8943] input: syz1 as /devices/virtual/input/input14 [ 149.418019][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 149.698934][ T8982] Cannot find add_set index 0 as target [ 149.945522][ T8990] overlayfs: missing 'workdir' [ 150.169080][ T8992] input: syz1 as /devices/virtual/input/input15 [ 150.288038][ T30] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 150.448189][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 150.448467][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 150.453665][ T30] usb 6-1: config 0 has no interfaces? [ 150.455265][ T30] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 150.458014][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.469369][ T30] usb 6-1: config 0 descriptor?? [ 151.073563][ T9008] tipc: Started in network mode [ 151.074992][ T9008] tipc: Node identity ac1414aa, cluster identity 4711 [ 151.076971][ T9008] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 151.079182][ T30] IPVS: starting estimator thread 0... [ 151.082750][ T9008] tipc: Enabled bearer , priority 10 [ 151.168050][ T9009] IPVS: using max 38 ests per chain, 91200 per kthread [ 151.218012][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 151.358016][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 151.498005][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 151.498018][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 151.516400][ T9015] Cannot find add_set index 0 as target [ 151.564544][ T9019] program syz.0.839 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.612782][ T9023] __nla_validate_parse: 1 callbacks suppressed [ 151.612792][ T9023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.840'. [ 151.637994][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 151.778014][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 151.928014][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 152.078861][ T30] tipc: Node number set to 2886997162 [ 152.096643][ T9036] Cannot find del_set index 0 as target [ 152.227992][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 152.507995][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 152.528159][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 152.766475][ T30] usb 6-1: USB disconnect, device number 4 [ 153.047994][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 153.282274][ T9057] Process accounting resumed [ 153.898828][ T5953] Bluetooth: hci0: Invalid handle: 0x73c2 > 0x0eff [ 154.162858][ T9078] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 155.194385][ T9108] Process accounting resumed [ 156.058453][ T9128] netlink: 'syz.1.869': attribute type 1 has an invalid length. [ 156.061196][ T9127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.868'. [ 156.061708][ T9128] netlink: 'syz.1.869': attribute type 1 has an invalid length. [ 156.323078][ T30] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz1 [ 156.688060][ C3] net_ratelimit: 6 callbacks suppressed [ 156.688070][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 156.863479][ T9144] sit0: entered promiscuous mode [ 156.865164][ T9144] vlan3: entered promiscuous mode [ 156.867685][ T9144] sit0: left promiscuous mode [ 156.973356][ T9154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.875'. [ 157.138048][ T30] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 157.177993][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 157.298033][ T30] usb 8-1: Using ep0 maxpacket: 16 [ 157.300818][ T30] usb 8-1: config 0 has no interfaces? [ 157.304765][ T30] usb 8-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=ec.89 [ 157.307349][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.309858][ T30] usb 8-1: Product: syz [ 157.311962][ T30] usb 8-1: Manufacturer: syz [ 157.318052][ T30] usb 8-1: SerialNumber: syz [ 157.320887][ T30] usb 8-1: config 0 descriptor?? [ 157.728024][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 157.820245][ T1459] usb 8-1: USB disconnect, device number 3 [ 158.208002][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 158.286204][ T9163] FAULT_INJECTION: forcing a failure. [ 158.286204][ T9163] name failslab, interval 1, probability 0, space 0, times 0 [ 158.298240][ T9163] CPU: 3 UID: 0 PID: 9163 Comm: syz.1.879 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 158.301277][ T9163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 158.304328][ T9163] Call Trace: [ 158.305289][ T9163] [ 158.306133][ T9163] dump_stack_lvl+0x16c/0x1f0 [ 158.307457][ T9163] should_fail_ex+0x497/0x5b0 [ 158.308782][ T9163] ? fs_reclaim_acquire+0xae/0x150 [ 158.310208][ T9163] should_failslab+0xc2/0x120 [ 158.311784][ T9163] __kmalloc_noprof+0xce/0x4f0 [ 158.313534][ T9163] ? memcg_list_lru_alloc+0x29f/0x730 [ 158.315484][ T9163] ? find_held_lock+0x2d/0x110 [ 158.317243][ T9163] memcg_list_lru_alloc+0x29f/0x730 [ 158.319130][ T9163] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 158.321213][ T9163] ? get_mem_cgroup_from_objcg+0x183/0x330 [ 158.323328][ T9163] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 158.325422][ T9163] __memcg_slab_post_alloc_hook+0x12c/0x9b0 [ 158.327621][ T9163] ? kasan_save_track+0x14/0x30 [ 158.329413][ T9163] kmem_cache_alloc_lru_noprof+0x30d/0x3b0 [ 158.331599][ T9163] ? __d_alloc+0x35/0x8c0 [ 158.333193][ T9163] __d_alloc+0x35/0x8c0 [ 158.334761][ T9163] ? __pfx_mqueue_fill_super+0x10/0x10 [ 158.336766][ T9163] d_make_root+0x3e/0x90 [ 158.338391][ T9163] mqueue_fill_super+0x13a/0x210 [ 158.340446][ T9163] get_tree_nodev+0xda/0x190 [ 158.342166][ T9163] mqueue_get_tree+0xf1/0x130 [ 158.343919][ T9163] vfs_get_tree+0x8f/0x380 [ 158.345567][ T9163] ? refcount_dec_and_lock+0x32/0xc0 [ 158.347524][ T9163] fc_mount+0x16/0xc0 [ 158.349022][ T9163] mq_init_ns+0x426/0x620 [ 158.350746][ T9163] copy_ipcs+0x383/0x610 [ 158.352323][ T9163] ? copy_utsname+0xab/0x480 [ 158.354032][ T9163] create_new_namespaces+0x20a/0xad0 [ 158.356003][ T9163] ? security_capable+0x7e/0x260 [ 158.357851][ T9163] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 158.359918][ T9163] ksys_unshare+0x45d/0xa40 [ 158.361606][ T9163] ? __pfx_ksys_unshare+0x10/0x10 [ 158.363460][ T9163] ? ksys_write+0x1ba/0x250 [ 158.365163][ T9163] __ia32_sys_unshare+0x30/0x40 [ 158.366972][ T9163] __do_fast_syscall_32+0x73/0x120 [ 158.368870][ T9163] do_fast_syscall_32+0x32/0x80 [ 158.370677][ T9163] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.372720][ T9163] RIP: 0023:0xf7f50579 [ 158.373901][ T9163] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 158.379485][ T9163] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000136 [ 158.381905][ T9163] RAX: ffffffffffffffda RBX: 000000000c000000 RCX: 0000000000000000 [ 158.384187][ T9163] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 158.387230][ T9163] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.390380][ T9163] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 158.393574][ T9163] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.396572][ T9163] [ 158.397663][ C3] vkms_vblank_simulate: vblank timer overrun [ 158.556727][ T9173] netlink: 28 bytes leftover after parsing attributes in process `syz.1.883'. [ 158.767990][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 158.904766][ T9181] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 159.257988][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 159.411102][ T9186] netlink: 20 bytes leftover after parsing attributes in process `syz.3.887'. [ 159.714337][ T9199] input: syz1 as /devices/virtual/input/input17 [ 159.729260][ T9205] batman_adv: batadv0: Adding interface: ip6gretap1 [ 159.731281][ T9205] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.740766][ T9205] batman_adv: batadv0: Interface activated: ip6gretap1 [ 159.808033][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 159.995428][ T9220] netlink: 20 bytes leftover after parsing attributes in process `syz.2.897'. [ 160.288059][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 160.814406][ T9248] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 160.842063][ T9247] netlink: 56 bytes leftover after parsing attributes in process `syz.1.901'. [ 160.845100][ T9247] 9pnet_virtio: no channels available for device syz [ 160.847987][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 161.080417][ T9255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.902'. [ 161.107215][ T9255] netlink: 24 bytes leftover after parsing attributes in process `syz.1.902'. [ 161.110191][ T9255] netlink: 84 bytes leftover after parsing attributes in process `syz.1.902'. [ 161.328057][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 161.539923][ T9265] Process accounting resumed [ 161.808105][ T5953] Bluetooth: hci3: command 0x0c1a tx timeout [ 161.897988][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 162.324295][ T9269] Set syz1 is full, maxelem 65536 reached [ 162.368076][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 162.928015][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 163.034438][ T9295] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 163.408010][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 163.744913][ T9338] Cannot find add_set index 0 as target [ 163.833942][ T39] audit: type=1326 audit(2000000061.774:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9339 comm="syz.1.929" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 163.846836][ T39] audit: type=1326 audit(2000000061.784:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9339 comm="syz.1.929" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 163.857218][ T39] audit: type=1326 audit(2000000061.784:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9339 comm="syz.1.929" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 163.869729][ T39] audit: type=1326 audit(2000000061.784:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9339 comm="syz.1.929" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 163.879817][ T39] audit: type=1326 audit(2000000061.784:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9339 comm="syz.1.929" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 163.885815][ T39] audit: type=1326 audit(2000000061.784:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9339 comm="syz.1.929" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 163.897998][ T39] audit: type=1326 audit(2000000061.784:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9339 comm="syz.1.929" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 163.904236][ T39] audit: type=1326 audit(2000000061.784:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9339 comm="syz.1.929" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 163.910815][ T39] audit: type=1326 audit(2000000061.784:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9339 comm="syz.1.929" exe="/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 163.916915][ T39] audit: type=1326 audit(2000000061.784:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9339 comm="syz.1.929" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f50579 code=0x7ffc0000 [ 163.968072][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 163.979210][ T9361] FAULT_INJECTION: forcing a failure. [ 163.979210][ T9361] name failslab, interval 1, probability 0, space 0, times 0 [ 163.982899][ T9361] CPU: 0 UID: 0 PID: 9361 Comm: syz.2.936 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 163.985943][ T9361] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 163.988924][ T9361] Call Trace: [ 163.989897][ T9361] [ 163.990779][ T9361] dump_stack_lvl+0x16c/0x1f0 [ 163.992168][ T9361] should_fail_ex+0x497/0x5b0 [ 163.993538][ T9361] ? fs_reclaim_acquire+0xae/0x150 [ 163.995036][ T9361] should_failslab+0xc2/0x120 [ 163.996415][ T9361] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 163.998356][ T9361] ? proc_alloc_inode+0x25/0x200 [ 164.000357][ T9361] ? __pfx_proc_alloc_inode+0x10/0x10 [ 164.002496][ T9361] proc_alloc_inode+0x25/0x200 [ 164.004450][ T9361] alloc_inode+0x5d/0x230 [ 164.006215][ T9361] new_inode+0x22/0x210 [ 164.007629][ T9361] proc_pid_make_inode+0x22/0x160 [ 164.009104][ T9361] proc_map_files_instantiate+0x72/0x1a0 [ 164.010744][ T9361] proc_fill_cache+0x362/0x470 [ 164.012131][ T9361] ? __pfx_proc_map_files_instantiate+0x10/0x10 [ 164.013915][ T9361] ? __pfx_proc_fill_cache+0x10/0x10 [ 164.015446][ T9361] ? __pfx_vsnprintf+0x10/0x10 [ 164.016838][ T9361] ? mas_next_node+0x7c1/0xf40 [ 164.018231][ T9361] ? snprintf+0xc8/0x100 [ 164.019598][ T9361] ? __pfx___might_resched+0x10/0x10 [ 164.021112][ T9361] proc_map_files_readdir+0x8e6/0xb10 [ 164.022648][ T9361] ? __pfx_proc_map_files_readdir+0x10/0x10 [ 164.024356][ T9361] ? lock_acquire+0x2f/0xb0 [ 164.025669][ T9361] ? iterate_dir+0x424/0xb40 [ 164.027006][ T9361] ? rwsem_down_write_slowpath+0x370/0x12a0 [ 164.028736][ T9361] ? apparmor_file_permission+0x251/0x400 [ 164.030371][ T9361] iterate_dir+0x52f/0xb40 [ 164.032007][ T9361] __ia32_sys_getdents64+0x148/0x2c0 [ 164.034124][ T9361] ? __pfx___ia32_sys_getdents64+0x10/0x10 [ 164.036446][ T9361] ? __pfx_filldir64+0x10/0x10 [ 164.038407][ T9361] __do_fast_syscall_32+0x73/0x120 [ 164.040483][ T9361] do_fast_syscall_32+0x32/0x80 [ 164.042463][ T9361] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 164.044603][ T9361] RIP: 0023:0xf7f56579 [ 164.045777][ T9361] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 164.051199][ T9361] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 00000000000000dc [ 164.053570][ T9361] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020001fc0 [ 164.055829][ T9361] RDX: 0000000000000ff6 RSI: 0000000000000000 RDI: 0000000000000000 [ 164.058065][ T9361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 164.060301][ T9361] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 164.062556][ T9361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 164.064753][ T9361] [ 164.143599][ T9370] hfs: can't find a HFS filesystem on dev sr0 [ 164.154041][ T9370] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 164.156196][ T9370] overlayfs: failed to set xattr on upper [ 164.157814][ T9370] overlayfs: ...falling back to redirect_dir=nofollow. [ 164.161332][ T9370] overlayfs: ...falling back to uuid=null. [ 164.240338][ T9380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.943'. [ 164.298336][ T9384] netlink: 'syz.0.942': attribute type 6 has an invalid length. [ 164.329600][ T9384] netlink: 36 bytes leftover after parsing attributes in process `syz.0.942'. [ 164.398092][ T72] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 164.426600][ T9392] netlink: 20 bytes leftover after parsing attributes in process `syz.0.947'. [ 164.447989][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 164.588064][ T72] usb 7-1: Using ep0 maxpacket: 32 [ 164.591754][ T72] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 164.594815][ T72] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 164.598994][ T72] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 164.602671][ T72] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 164.606199][ T72] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 164.610206][ T72] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 164.615076][ T72] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 164.618612][ T72] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.626278][ T72] usb 7-1: config 0 descriptor?? [ 164.838185][ T72] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 164.846842][ T72] usb 7-1: USB disconnect, device number 4 [ 164.872332][ T72] usblp0: removed [ 164.904952][ T9412] overlayfs: failed to resolve './file0/file0': -2 [ 165.008099][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 165.054351][ T9417] netlink: 'syz.1.954': attribute type 2 has an invalid length. [ 165.056597][ T9417] netlink: 'syz.1.954': attribute type 9 has an invalid length. [ 165.059349][ T9417] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.954'. [ 165.102314][ T9417] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2758444543 (5516889086 ns) > initial count (4205064 ns). Using initial count to start timer. [ 165.378039][ T72] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 165.498006][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 165.538109][ T72] usb 7-1: Using ep0 maxpacket: 32 [ 165.541406][ T72] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 165.545724][ T72] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 165.549158][ T72] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 165.552539][ T72] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 165.556056][ T72] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 165.559941][ T72] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 165.564743][ T72] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 165.568232][ T72] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.575693][ T72] usb 7-1: config 0 descriptor?? [ 165.693743][ T9441] FAULT_INJECTION: forcing a failure. [ 165.693743][ T9441] name failslab, interval 1, probability 0, space 0, times 0 [ 165.697380][ T9441] CPU: 3 UID: 0 PID: 9441 Comm: syz.1.961 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 165.700414][ T9441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 165.703464][ T9441] Call Trace: [ 165.704451][ T9441] [ 165.705325][ T9441] dump_stack_lvl+0x16c/0x1f0 [ 165.706703][ T9441] should_fail_ex+0x497/0x5b0 [ 165.708081][ T9441] ? fs_reclaim_acquire+0xae/0x150 [ 165.709572][ T9441] should_failslab+0xc2/0x120 [ 165.710982][ T9441] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 165.712719][ T9441] ? __pfx___lock_acquire+0x10/0x10 [ 165.714238][ T9441] ? __d_alloc+0x35/0x8c0 [ 165.715500][ T9441] __d_alloc+0x35/0x8c0 [ 165.716734][ T9441] d_alloc+0x4a/0x1e0 [ 165.717911][ T9441] d_alloc_parallel+0xe9/0x12b0 [ 165.719329][ T9441] ? __pfx_lock_release+0x10/0x10 [ 165.720794][ T9441] ? trace_lock_acquire+0x14e/0x1f0 [ 165.722321][ T9441] ? __pfx_d_alloc_parallel+0x10/0x10 [ 165.723918][ T9441] ? lockdep_init_map_type+0x16d/0x7d0 [ 165.725502][ T9441] ? lockdep_init_map_type+0x16d/0x7d0 [ 165.727083][ T9441] proc_fill_cache+0x2eb/0x470 [ 165.728495][ T9441] ? __pfx_proc_pid_instantiate+0x10/0x10 [ 165.730153][ T9441] ? __pfx_proc_fill_cache+0x10/0x10 [ 165.731715][ T9441] ? __pfx_vsnprintf+0x10/0x10 [ 165.733108][ T9441] ? snprintf+0xc8/0x100 [ 165.734367][ T9441] proc_pid_readdir+0x3c5/0x830 [ 165.735786][ T9441] ? __pfx_proc_pid_readdir+0x10/0x10 [ 165.737334][ T9441] ? qrtr_endpoint_post+0x10e0/0x1380 [ 165.738884][ T9441] proc_root_readdir+0xa1/0xd0 [ 165.740283][ T9441] iterate_dir+0x52f/0xb40 [ 165.741590][ T9441] __ia32_sys_getdents64+0x148/0x2c0 [ 165.743117][ T9441] ? __pfx___ia32_sys_getdents64+0x10/0x10 [ 165.744884][ T9441] ? __pfx_filldir64+0x10/0x10 [ 165.746294][ T9441] __do_fast_syscall_32+0x73/0x120 [ 165.747794][ T9441] do_fast_syscall_32+0x32/0x80 [ 165.749217][ T9441] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 165.751060][ T9441] RIP: 0023:0xf7f50579 [ 165.752257][ T9441] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 165.757799][ T9441] RSP: 002b:00000000f508555c EFLAGS: 00000296 ORIG_RAX: 00000000000000dc [ 165.760205][ T9441] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000020000800 [ 165.762504][ T9441] RDX: 0000000000000ff9 RSI: 0000000000000000 RDI: 0000000000000000 [ 165.764779][ T9441] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 165.767057][ T9441] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 165.769337][ T9441] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 165.771639][ T9441] [ 165.784037][ T72] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 166.058016][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 166.338044][ T5958] Bluetooth: hci1: unexpected cc 0x2027 length: 44 > 1 [ 166.340549][ T5958] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 166.341671][ T5989] usb 7-1: USB disconnect, device number 5 [ 166.353562][ T5989] usblp0: removed [ 166.435457][ T9467] netlink: 'syz.3.967': attribute type 2 has an invalid length. [ 167.088061][ C3] net_ratelimit: 1 callbacks suppressed [ 167.088074][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 167.568054][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 167.779184][ T9504] team0: Unable to change to the same mode the team is in [ 167.984273][ T9511] netlink: 'syz.2.981': attribute type 1 has an invalid length. [ 167.992394][ T9511] netlink: 224 bytes leftover after parsing attributes in process `syz.2.981'. [ 168.128033][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 168.244074][ T9519] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 168.249156][ T9519] netlink: 24 bytes leftover after parsing attributes in process `syz.3.984'. [ 168.273599][ T5958] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 168.480265][ T9528] Cannot find add_set index 0 as target [ 168.530578][ T9530] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 168.608037][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 168.661964][ T9534] 9pnet_virtio: no channels available for device syz [ 169.168055][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 169.179042][ T9545] input: syz1 as /devices/virtual/input/input18 [ 169.502704][ T9557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.992'. [ 169.658032][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 169.723459][ T9569] netlink: 28 bytes leftover after parsing attributes in process `syz.3.996'. [ 169.726145][ T9569] netlink: 24 bytes leftover after parsing attributes in process `syz.3.996'. [ 169.836288][ T9573] mkiss: ax0: crc mode is auto. [ 170.208052][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 170.688007][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 170.964256][ T9597] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 171.173380][ T9605] syzkaller0: entered promiscuous mode [ 171.175018][ T9605] syzkaller0: entered allmulticast mode [ 171.194082][ T9608] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1004'. [ 171.194124][ T9603] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1004'. [ 171.247991][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 171.338624][ T9612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1006'. [ 171.731225][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 171.978120][ T5953] Bluetooth: hci3: command 0x0c1a tx timeout [ 172.297994][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 172.351466][ T9619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1008'. [ 172.368573][ T9621] netlink: 'syz.2.1009': attribute type 10 has an invalid length. [ 172.396318][ T9623] sit0: entered promiscuous mode [ 172.397825][ T9623] vlan2: entered promiscuous mode [ 172.400435][ T9623] sit0: left promiscuous mode [ 172.542516][ T9635] syz.1.1010: attempt to access beyond end of device [ 172.542516][ T9635] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 172.546253][ T9635] syz.1.1010: attempt to access beyond end of device [ 172.546253][ T9635] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 172.550756][ T9635] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 172.554388][ T9635] syz.1.1010: attempt to access beyond end of device [ 172.554388][ T9635] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 172.558244][ T9635] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 172.561307][ T9635] syz.1.1010: attempt to access beyond end of device [ 172.561307][ T9635] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 172.565016][ T9635] syz.1.1010: attempt to access beyond end of device [ 172.565016][ T9635] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 172.569021][ T9635] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 172.571817][ T9635] syz.1.1010: attempt to access beyond end of device [ 172.571817][ T9635] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 172.575631][ T9635] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 172.578613][ T9635] syz.1.1010: attempt to access beyond end of device [ 172.578613][ T9635] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 172.582361][ T9635] syz.1.1010: attempt to access beyond end of device [ 172.582361][ T9635] nbd1: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 172.586061][ T9635] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 172.589063][ T9635] syz.1.1010: attempt to access beyond end of device [ 172.589063][ T9635] nbd1: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 172.593662][ T9635] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 172.596390][ T9635] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 172.631146][ T9637] input: syz1 as /devices/virtual/input/input19 [ 172.768026][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 173.257238][ T5958] block nbd1: Receive control failed (result -32) [ 173.259472][ T9625] block nbd1: shutting down sockets [ 173.328064][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 173.334457][ T9654] siw: device registration error -23 [ 173.335331][ T9656] netlink: 'syz.1.1018': attribute type 12 has an invalid length. [ 173.560189][ T9662] FAULT_INJECTION: forcing a failure. [ 173.560189][ T9662] name failslab, interval 1, probability 0, space 0, times 0 [ 173.564453][ T9662] CPU: 3 UID: 0 PID: 9662 Comm: syz.1.1019 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 173.567563][ T9662] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 173.571155][ T9662] Call Trace: [ 173.572135][ T9662] [ 173.572993][ T9662] dump_stack_lvl+0x16c/0x1f0 [ 173.574379][ T9662] should_fail_ex+0x497/0x5b0 [ 173.575645][ T9662] ? fs_reclaim_acquire+0xae/0x150 [ 173.577001][ T9662] should_failslab+0xc2/0x120 [ 173.578333][ T9662] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 173.580336][ T9662] ? lockref_get+0x15/0x50 [ 173.582174][ T9662] ? alloc_vfsmnt+0x23/0x710 [ 173.584049][ T9662] ? __pfx_wake_up_var+0x10/0x10 [ 173.586053][ T9662] alloc_vfsmnt+0x23/0x710 [ 173.587798][ T9662] vfs_create_mount+0x93/0x500 [ 173.589737][ T9662] fc_mount+0x9a/0xc0 [ 173.591331][ T9662] mq_init_ns+0x426/0x620 [ 173.593098][ T9662] copy_ipcs+0x383/0x610 [ 173.594788][ T9662] ? copy_utsname+0xab/0x480 [ 173.596644][ T9662] create_new_namespaces+0x20a/0xad0 [ 173.598792][ T9662] ? security_capable+0x7e/0x260 [ 173.600787][ T9662] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 173.603051][ T9662] ksys_unshare+0x45d/0xa40 [ 173.604859][ T9662] ? __pfx_ksys_unshare+0x10/0x10 [ 173.606802][ T9662] ? ksys_write+0x1ba/0x250 [ 173.608600][ T9662] __ia32_sys_unshare+0x30/0x40 [ 173.610569][ T9662] __do_fast_syscall_32+0x73/0x120 [ 173.612639][ T9662] do_fast_syscall_32+0x32/0x80 [ 173.614092][ T9662] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 173.615981][ T9662] RIP: 0023:0xf7f50579 [ 173.617599][ T9662] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 173.625019][ T9662] RSP: 002b:00000000f508555c EFLAGS: 00000296 ORIG_RAX: 0000000000000136 [ 173.628361][ T9662] RAX: ffffffffffffffda RBX: 000000000c000000 RCX: 0000000000000000 [ 173.631098][ T9662] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 173.633370][ T9662] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 173.635652][ T9662] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 173.637912][ T9662] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 173.640695][ T9662] [ 173.641816][ C3] vkms_vblank_simulate: vblank timer overrun [ 173.808007][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 174.058047][ T35] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 174.217599][ T35] usb 6-1: config 1 interface 0 altsetting 253 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 174.223010][ T35] usb 6-1: config 1 interface 0 has no altsetting 0 [ 174.228393][ T35] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 174.241010][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.243854][ T35] usb 6-1: Product: syz [ 174.245774][ T35] usb 6-1: Manufacturer: syz [ 174.247510][ T35] usb 6-1: SerialNumber: syz [ 174.368045][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 174.692174][ T9689] FAULT_INJECTION: forcing a failure. [ 174.692174][ T9689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.697613][ T9689] CPU: 2 UID: 0 PID: 9689 Comm: syz.0.1023 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 174.701613][ T9689] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 174.705308][ T9689] Call Trace: [ 174.706349][ T9689] [ 174.707241][ T9689] dump_stack_lvl+0x16c/0x1f0 [ 174.708667][ T9689] should_fail_ex+0x497/0x5b0 [ 174.710087][ T9689] _copy_from_user+0x2e/0xd0 [ 174.711503][ T9689] kstrtouint_from_user+0xd7/0x1c0 [ 174.712994][ T9689] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 174.714696][ T9689] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 174.716417][ T9689] proc_fail_nth_write+0x84/0x250 [ 174.717950][ T9689] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 174.719617][ T9689] ? ksys_write+0x12b/0x250 [ 174.720977][ T9689] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 174.722657][ T9689] vfs_write+0x24c/0x1150 [ 174.723953][ T9689] ? __fget_files+0x1fc/0x3a0 [ 174.725399][ T9689] ? __pfx___mutex_lock+0x10/0x10 [ 174.726884][ T9689] ? __pfx_vfs_write+0x10/0x10 [ 174.728319][ T9689] ? __fget_files+0x206/0x3a0 [ 174.729702][ T9689] ksys_write+0x12b/0x250 [ 174.730981][ T9689] ? __pfx_ksys_write+0x10/0x10 [ 174.732451][ T9689] __do_fast_syscall_32+0x73/0x120 [ 174.733951][ T9689] do_fast_syscall_32+0x32/0x80 [ 174.735417][ T9689] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 174.737291][ T9689] RIP: 0023:0xf7f31579 [ 174.738496][ T9689] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 174.745115][ T9689] RSP: 002b:00000000f5065590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 174.747991][ T9689] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 00000000f5065620 [ 174.750211][ T9689] RDX: 0000000000000001 RSI: 00000000f73c3ff4 RDI: 0000000000000000 [ 174.752530][ T9689] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 174.754853][ T9689] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 174.757229][ T9689] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 174.759612][ T9689] [ 174.848015][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 174.921146][ T35] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 175.111175][ T9] usb 6-1: USB disconnect, device number 5 [ 175.130947][ T9] usblp0: removed [ 175.163379][ T9704] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1029'. [ 175.199340][ T9706] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1030'. [ 175.231940][ T9708] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1031'. [ 175.328548][ T9711] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1032'. [ 175.331333][ T9711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1032'. [ 175.418058][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 175.689968][ T9725] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1037'. [ 175.766782][ T9726] netlink: 'syz.0.1037': attribute type 4 has an invalid length. [ 175.770980][ T9726] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1037'. [ 175.796262][ T9726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1037'. [ 175.888074][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 176.259223][ T9740] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1041'. [ 176.368937][ T9743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1042'. [ 176.458039][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 176.629325][ T9757] syzkaller0: entered promiscuous mode [ 176.644549][ T9757] syzkaller0: entered allmulticast mode [ 176.928096][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 177.498032][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 177.971771][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 178.361356][ T9792] syzkaller0: entered promiscuous mode [ 178.363516][ T9792] syzkaller0: entered allmulticast mode [ 178.528008][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 178.979025][ T9811] ALSA: mixer_oss: invalid index 80000 [ 179.010376][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 179.128513][ T9813] Process accounting resumed [ 179.568030][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 179.830255][ T9826] 9pnet_fd: Insufficient options for proto=fd [ 179.832340][ T9826] 9pnet_fd: Insufficient options for proto=fd [ 179.876648][ T9829] Process accounting resumed [ 180.048002][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 180.066329][ T9835] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 180.077362][ T5958] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 180.180683][ T9838] input: syz1 as /devices/virtual/input/input20 [ 180.618020][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 180.722465][ T9859] netdevsim netdevsim2: Direct firmware load for printk failed with error -2 [ 180.726166][ T9859] netdevsim netdevsim2: Falling back to sysfs fallback for: printk [ 181.088009][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 181.355554][ T9851] [U] vÔ3 [ 181.610121][ T9905] input: syz1 as /devices/virtual/input/input21 [ 181.648014][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 181.899303][ T9915] input: syz1 as /devices/virtual/input/input22 [ 182.099633][ T9925] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 182.128020][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 182.347619][ T9928] syzkaller0: entered promiscuous mode [ 182.355566][ T9928] syzkaller0: entered allmulticast mode [ 182.688037][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 182.931574][ T9933] __nla_validate_parse: 8 callbacks suppressed [ 182.931587][ T9933] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1089'. [ 183.092579][ T9937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1090'. [ 183.179538][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 183.738103][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 183.984911][ T9931] netlink: 798 bytes leftover after parsing attributes in process `syz.0.1088'. [ 183.988142][ T9935] netlink: 'syz.1.1089': attribute type 4 has an invalid length. [ 183.991077][ T9935] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1089'. [ 183.994589][ T9940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1089'. [ 184.083660][ T9950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1095'. [ 184.115924][ T9941] geneve0: left allmulticast mode [ 184.118415][ T9941] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.120990][ T9941] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.123602][ T9941] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.126143][ T9941] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.218033][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 184.768079][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 185.247999][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 185.808041][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 186.024089][ T9988] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 186.061913][ T9991] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1105'. [ 186.297999][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 186.425228][ T9996] sctp: [Deprecated]: syz.3.1106 (pid 9996) Use of int in max_burst socket option. [ 186.425228][ T9996] Use struct sctp_assoc_value instead [ 186.605101][T10003] input: syz1 as /devices/virtual/input/input23 [ 186.848072][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 187.328001][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 187.468081][ T5989] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 187.491062][T10025] loop6: detected capacity change from 0 to 524287999 [ 187.498489][ C2] blk_print_req_error: 99 callbacks suppressed [ 187.498498][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 187.502748][ C2] buffer_io_error: 70 callbacks suppressed [ 187.502755][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.506634][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 187.509231][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.511962][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 187.514483][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.517984][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 187.520535][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.522867][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 187.525488][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.527848][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 187.530432][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.533360][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 187.535891][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.539332][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 187.542752][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.546240][T10025] ldm_validate_partition_table(): Disk read failed. [ 187.550713][ C2] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 187.551447][T10027] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1114'. [ 187.558016][ C2] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 187.561155][ T164] loop: Write error at byte offset 1, length 4096. [ 187.564380][ C2] Buffer I/O error on dev loop6, logical block 1, async page read [ 187.566633][ C2] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 187.569141][T10025] Dev loop6: unable to read RDB block 8 [ 187.572751][T10025] loop6: unable to read partition table [ 187.578331][T10025] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 187.594391][ T5356] ldm_validate_partition_table(): Disk read failed. [ 187.598753][ T5356] Dev loop6: unable to read RDB block 0 [ 187.601596][ T5356] loop6: unable to read partition table [ 187.619159][T10031] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1115'. [ 187.638035][ T5989] usb 6-1: Using ep0 maxpacket: 8 [ 187.640365][T10035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1116'. [ 187.640760][ T5989] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.646752][ T5989] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1040, setting to 1024 [ 187.650143][ T5989] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 187.650773][T10031] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 187.653122][ T5989] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 187.653136][ T5989] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 187.663994][T10031] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 187.664664][ T5989] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 187.667387][T10031] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 187.670597][ T5989] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.670614][ T5989] usb 6-1: Product: syz [ 187.670625][ T5989] usb 6-1: Manufacturer: syz [ 187.670638][ T5989] usb 6-1: SerialNumber: syz [ 187.682554][T10031] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 187.851636][T10039] netlink: 'syz.0.1117': attribute type 12 has an invalid length. [ 187.897992][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 187.976049][ T39] kauditd_printk_skb: 20 callbacks suppressed [ 187.976064][ T39] audit: type=1326 audit(2000000085.914:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10048 comm="syz.0.1119" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x0 [ 188.090460][ T5989] cdc_ncm 6-1:1.0: bind() failure [ 188.093623][ T5989] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 188.096067][ T5989] cdc_ncm 6-1:1.1: bind() failure [ 188.106614][ T5989] usb 6-1: USB disconnect, device number 6 [ 188.368083][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 188.525075][T10065] __nla_validate_parse: 1 callbacks suppressed [ 188.525087][T10065] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1122'. [ 188.564886][T10067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1123'. [ 188.928102][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 189.102883][T10085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1129'. [ 189.122300][T10090] sit0: entered promiscuous mode [ 189.124159][T10090] vlan2: entered promiscuous mode [ 189.127069][T10090] sit0: left promiscuous mode [ 189.403988][T10096] SET target dimension over the limit! [ 189.418069][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 189.572825][T10103] FAULT_INJECTION: forcing a failure. [ 189.572825][T10103] name failslab, interval 1, probability 0, space 0, times 0 [ 189.579665][T10103] CPU: 0 UID: 0 PID: 10103 Comm: syz.3.1134 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 189.582781][T10103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 189.585847][T10103] Call Trace: [ 189.586776][T10103] [ 189.587652][T10103] dump_stack_lvl+0x16c/0x1f0 [ 189.589056][T10103] should_fail_ex+0x497/0x5b0 [ 189.590421][T10103] ? fs_reclaim_acquire+0xae/0x150 [ 189.591906][T10103] should_failslab+0xc2/0x120 [ 189.593270][T10103] __kmalloc_noprof+0xce/0x4f0 [ 189.594799][T10103] ? __register_sysctl_table+0xb4/0x18c0 [ 189.596437][T10103] __register_sysctl_table+0xb4/0x18c0 [ 189.598005][T10103] ? rcu_is_watching+0x12/0xc0 [ 189.599467][T10103] ? trace_kmalloc+0x2d/0xd0 [ 189.600843][T10103] ? __pfx___register_sysctl_table+0x10/0x10 [ 189.602575][T10103] ? setup_mq_sysctls+0x5d/0x230 [ 189.604030][T10103] setup_mq_sysctls+0x13d/0x230 [ 189.605462][T10103] copy_ipcs+0x479/0x610 [ 189.606689][T10103] ? copy_utsname+0xab/0x480 [ 189.608045][T10103] create_new_namespaces+0x20a/0xad0 [ 189.609599][T10103] ? security_capable+0x7e/0x260 [ 189.611065][T10103] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 189.612694][T10103] ksys_unshare+0x45d/0xa40 [ 189.614028][T10103] ? __pfx_ksys_unshare+0x10/0x10 [ 189.615549][T10103] ? ksys_write+0x1ba/0x250 [ 189.616868][T10103] __ia32_sys_unshare+0x30/0x40 [ 189.618277][T10103] __do_fast_syscall_32+0x73/0x120 [ 189.619797][T10103] do_fast_syscall_32+0x32/0x80 [ 189.621230][T10103] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 189.623054][T10103] RIP: 0023:0xf7fa7579 [ 189.624262][T10103] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 189.631269][T10103] RSP: 002b:00000000f50f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000136 [ 189.633727][T10103] RAX: ffffffffffffffda RBX: 000000000c000000 RCX: 0000000000000000 [ 189.636715][T10103] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 189.639031][T10103] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 189.641418][T10103] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 189.643749][T10103] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 189.646083][T10103] [ 189.814857][T10113] netlink: 798 bytes leftover after parsing attributes in process `syz.3.1137'. [ 189.968025][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 190.228618][ T30] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 190.318880][T10133] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 190.458012][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 190.460449][ T30] usb 7-1: device descriptor read/64, error -71 [ 190.598380][T10139] 9pnet_virtio: no channels available for device syz [ 190.708156][ T30] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 190.782030][T10141] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1144'. [ 190.858441][ T30] usb 7-1: device descriptor read/64, error -71 [ 190.969208][ T30] usb usb7-port1: attempt power cycle [ 191.008023][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 191.011302][T10157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1151'. [ 191.368056][ T30] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 191.398634][ T30] usb 7-1: device descriptor read/8, error -71 [ 191.488040][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 191.799692][T10174] Process accounting resumed [ 191.818066][ T30] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 191.859189][ T30] usb 7-1: device descriptor read/8, error -71 [ 191.978773][ T30] usb usb7-port1: unable to enumerate USB device [ 192.057995][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 192.421327][T10189] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1159'. [ 192.425644][T10189] nbd: illegal input index -28 [ 192.527986][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 192.817644][T10194] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.820345][T10194] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.822814][T10194] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.825299][T10194] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.904050][T10194] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 192.906737][T10194] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 192.909622][T10194] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 192.912279][T10194] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 192.913833][T10199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1162'. [ 193.097998][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 193.521576][T10208] input: syz0 as /devices/virtual/input/input24 [ 193.577995][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 193.895178][T10217] tipc: Enabling of bearer rejected, already enabled [ 193.924320][T10219] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1168'. [ 193.997198][T10223] netlink: 'syz.3.1168': attribute type 4 has an invalid length. [ 193.999983][T10223] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1168'. [ 194.012850][T10223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1168'. [ 194.121800][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1171'. [ 194.128024][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 194.226783][T10233] input: syz1 as /devices/virtual/input/input25 [ 194.607992][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 194.668351][ T39] audit: type=1326 audit(2000000092.614:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10212 comm="syz.2.1165" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7fc00000 [ 194.778716][T10242] input: syz1 as /devices/virtual/input/input26 [ 195.167993][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 195.333846][T10263] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 195.335763][T10263] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 195.339497][T10263] vhci_hcd vhci_hcd.0: Device attached [ 195.346986][T10264] vhci_hcd: connection closed [ 195.347187][ T64] vhci_hcd: stop threads [ 195.350697][ T64] vhci_hcd: release socket [ 195.352158][ T64] vhci_hcd: disconnect device [ 195.648028][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 195.698080][ T35] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 195.728226][ T30] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 195.802318][T10277] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 195.838129][ T35] usb 6-1: device descriptor read/64, error -71 [ 195.897269][ T30] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 195.901199][ T30] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 195.904207][ T30] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 195.906133][T10279] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1183'. [ 195.906805][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.910607][T10279] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1183'. [ 195.920158][T10273] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 195.937561][ T30] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 196.078128][ T35] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 196.177061][ T39] audit: type=1326 audit(2000000094.114:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10272 comm="syz.0.1181" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 196.185092][ T39] audit: type=1326 audit(2000000094.124:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10272 comm="syz.0.1181" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f315a7 code=0x7ffc0000 [ 196.192987][ T39] audit: type=1326 audit(2000000094.124:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10272 comm="syz.0.1181" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 196.203017][ T39] audit: type=1326 audit(2000000094.124:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10272 comm="syz.0.1181" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 196.210797][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 196.213524][ T39] audit: type=1326 audit(2000000094.124:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10272 comm="syz.0.1181" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f315a7 code=0x7ffc0000 [ 196.221379][ T39] audit: type=1326 audit(2000000094.124:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10272 comm="syz.0.1181" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 196.229178][ T35] usb 6-1: device descriptor read/64, error -71 [ 196.231668][ T39] audit: type=1326 audit(2000000094.124:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10272 comm="syz.0.1181" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 196.239497][ T39] audit: type=1326 audit(2000000094.124:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10272 comm="syz.0.1181" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f315a7 code=0x7ffc0000 [ 196.247252][ T39] audit: type=1326 audit(2000000094.124:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10272 comm="syz.0.1181" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000 [ 196.278073][ T832] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 196.337226][T10273] input: syz0 as /devices/virtual/input/input27 [ 196.348424][ T35] usb usb6-port1: attempt power cycle [ 196.438027][ T832] usb 8-1: Using ep0 maxpacket: 8 [ 196.441349][ T832] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 196.444840][ T832] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 196.447990][ T832] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 196.451514][ T832] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.457266][ T832] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 196.460188][ T832] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.625921][ T30] usb 5-1: USB disconnect, device number 2 [ 196.665373][ T832] usb 8-1: GET_CAPABILITIES returned 0 [ 196.666987][ T832] usbtmc 8-1:16.0: can't read capabilities [ 196.688027][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 196.692463][T10284] [ 196.693428][T10284] ====================================================== [ 196.696098][T10284] WARNING: possible circular locking dependency detected [ 196.698752][T10284] 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 Not tainted [ 196.702547][T10284] ------------------------------------------------------ [ 196.705342][T10284] syz.2.1185/10284 is trying to acquire lock: [ 196.707103][T10284] ffff88801d9010b8 (&eq->sysfs_lock){+.+.}-{4:4}, at: elevator_disable+0xb5/0x490 [ 196.709742][T10284] [ 196.709742][T10284] but task is already holding lock: [ 196.711864][T10284] ffff88804350acf8 (&q->sysfs_lock){+.+.}-{4:4}, at: __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 196.715018][T10284] [ 196.715018][T10284] which lock already depends on the new lock. [ 196.715018][T10284] [ 196.718198][T10284] [ 196.718198][T10284] the existing dependency chain (in reverse order) is: [ 196.720795][T10284] [ 196.720795][T10284] -> #5 (&q->sysfs_lock){+.+.}-{4:4}: [ 196.722968][T10284] __mutex_lock+0x19b/0xa60 [ 196.724440][T10284] __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 196.726317][T10284] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 196.728152][T10284] nbd_start_device+0x15b/0xd70 [ 196.729689][T10284] nbd_ioctl+0x21a/0xfd0 [ 196.731071][T10284] compat_blkdev_ioctl+0x2f7/0x750 [ 196.732680][T10284] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 196.732950][ T35] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 196.734338][T10284] __do_fast_syscall_32+0x73/0x120 [ 196.738102][T10284] do_fast_syscall_32+0x32/0x80 [ 196.739661][T10284] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 196.741626][T10284] [ 196.741626][T10284] -> #4 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 196.744115][T10284] blk_mq_submit_bio+0x1fb6/0x24c0 [ 196.745693][T10284] __submit_bio+0x384/0x540 [ 196.747146][T10284] submit_bio_noacct_nocheck+0x698/0xd70 [ 196.748413][ T35] usb 6-1: device descriptor read/8, error -71 [ 196.748825][T10288] syz.2.1185: attempt to access beyond end of device [ 196.748825][T10288] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 196.748930][T10288] syz.2.1185: attempt to access beyond end of device [ 196.748930][T10288] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 196.748961][T10288] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 196.748963][T10284] submit_bio_noacct+0x93a/0x1e20 [ 196.748980][T10284] mpage_readahead+0x41d/0x590 [ 196.748994][T10284] read_pages+0x1a8/0xdc0 [ 196.749003][T10284] page_cache_ra_unbounded+0x3dc/0x750 [ 196.749013][T10284] force_page_cache_ra+0x24b/0x340 [ 196.749023][T10284] page_cache_sync_ra+0x110/0x9c0 [ 196.749033][T10284] filemap_get_pages+0xd7b/0x1be0 [ 196.749047][T10284] filemap_read+0x3ca/0xd70 [ 196.749058][T10284] blkdev_read_iter+0x187/0x480 [ 196.749072][T10284] vfs_read+0x87f/0xbe0 [ 196.749082][T10284] ksys_read+0x12b/0x250 [ 196.749091][T10284] do_syscall_64+0xcd/0x250 [ 196.749103][T10284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.749115][T10284] [ 196.749115][T10284] -> #3 (mapping.invalidate_lock#2){.+.+}-{4:4}: [ 196.749132][T10284] down_read+0x9a/0x330 [ 196.749145][T10284] filemap_fault+0x62c/0x2820 [ 196.749157][T10284] __do_fault+0x10a/0x490 [ 196.749166][T10284] do_pte_missing+0xebd/0x3e00 [ 196.749179][T10284] __handle_mm_fault+0x103c/0x2a40 [ 196.749191][T10284] handle_mm_fault+0x3fa/0xaa0 [ 196.749202][T10284] __get_user_pages+0x8d9/0x3b50 [ 196.749214][T10284] populate_vma_page_range+0x27f/0x3a0 [ 196.749226][T10284] __mm_populate+0x1d6/0x380 [ 196.749237][T10284] do_mlock+0x40a/0x7d0 [ 196.749249][T10284] __ia32_sys_mlock+0x57/0x80 [ 196.749262][T10284] __do_fast_syscall_32+0x73/0x120 [ 196.749274][T10284] do_fast_syscall_32+0x32/0x80 [ 196.749285][T10284] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 196.749300][T10284] [ 196.749300][T10284] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 196.749313][T10284] __might_fault+0x11b/0x190 [ 196.749326][T10284] _copy_from_user+0x29/0xd0 [ 196.749339][T10284] compat_blk_trace_setup+0xc9/0x200 [ 196.749351][T10284] blk_trace_ioctl+0x24a/0x290 [ 196.749362][T10284] compat_blkdev_ioctl+0x13c/0x750 [ 196.749375][T10284] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 196.749383][T10284] __do_fast_syscall_32+0x73/0x120 [ 196.749395][T10284] do_fast_syscall_32+0x32/0x80 [ 196.749407][T10284] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 196.749421][T10284] [ 196.749421][T10284] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 196.749434][T10284] __mutex_lock+0x19b/0xa60 [ 196.749446][T10284] blk_mq_exit_sched+0xd1/0x310 [ 196.749457][T10284] elevator_disable+0xc0/0x490 [ 196.749470][T10284] __blk_mq_update_nr_hw_queues+0x3bb/0x1460 [ 196.749479][T10284] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 196.749488][T10284] nbd_start_device+0x15b/0xd70 [ 196.749499][T10284] nbd_ioctl+0x21a/0xfd0 [ 196.749510][T10284] compat_blkdev_ioctl+0x2f7/0x750 [ 196.749522][T10284] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 196.749530][T10284] __do_fast_syscall_32+0x73/0x120 [ 196.749542][T10284] do_fast_syscall_32+0x32/0x80 [ 196.749554][T10284] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 196.749568][T10284] [ 196.749568][T10284] -> #0 (&eq->sysfs_lock){+.+.}-{4:4}: [ 196.749580][T10284] __lock_acquire+0x249e/0x3c40 [ 196.749590][T10284] lock_acquire.part.0+0x11b/0x380 [ 196.749598][T10284] __mutex_lock+0x19b/0xa60 [ 196.749609][T10284] elevator_disable+0xb5/0x490 [ 196.749621][T10284] __blk_mq_update_nr_hw_queues+0x3bb/0x1460 [ 196.749630][T10284] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 196.749639][T10284] nbd_start_device+0x15b/0xd70 [ 196.749649][T10284] nbd_ioctl+0x21a/0xfd0 [ 196.749660][T10284] compat_blkdev_ioctl+0x2f7/0x750 [ 196.749672][T10284] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 196.749681][T10284] __do_fast_syscall_32+0x73/0x120 [ 196.749692][T10284] do_fast_syscall_32+0x32/0x80 [ 196.749704][T10284] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 196.749718][T10284] [ 196.749718][T10284] other info that might help us debug this: [ 196.749718][T10284] [ 196.749721][T10284] Chain exists of: [ 196.749721][T10284] &eq->sysfs_lock --> &q->q_usage_counter(io)#50 --> &q->sysfs_lock [ 196.749721][T10284] [ 196.749739][T10284] Possible unsafe locking scenario: [ 196.749739][T10284] [ 196.749742][T10284] CPU0 CPU1 [ 196.749744][T10284] ---- ---- [ 196.749747][T10284] lock(&q->sysfs_lock); [ 196.749753][T10284] lock(&q->q_usage_counter(io)#50); [ 196.749762][T10284] lock(&q->sysfs_lock); [ 196.749768][T10284] lock(&eq->sysfs_lock); [ 196.749774][T10284] [ 196.749774][T10284] *** DEADLOCK *** [ 196.749774][T10284] [ 196.749777][T10284] 5 locks held by syz.2.1185/10284: [ 196.749782][T10284] #0: ffff8880243c3198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x151/0xfd0 [ 196.749807][T10284] #1: ffff8880243c30d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x20/0x40 [ 196.749830][T10284] #2: ffff88804350a7c8 (&q->q_usage_counter(io)#51){+.+.}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x1460 [ 196.749856][T10284] #3: ffff88804350a800 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x1460 [ 196.749881][T10284] #4: ffff88804350acf8 (&q->sysfs_lock){+.+.}-{4:4}, at: __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 196.749903][T10284] [ 196.749903][T10284] stack backtrace: [ 196.749908][T10284] CPU: 1 UID: 0 PID: 10284 Comm: syz.2.1185 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 196.749920][T10284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 196.749926][T10284] Call Trace: [ 196.749930][T10284] [ 196.749935][T10284] dump_stack_lvl+0x116/0x1f0 [ 196.749949][T10284] print_circular_bug+0x41c/0x610 [ 196.749966][T10284] check_noncircular+0x31a/0x400 [ 196.749981][T10284] ? __pfx_check_noncircular+0x10/0x10 [ 196.749996][T10284] ? lockdep_lock+0xc6/0x200 [ 196.750009][T10284] ? __pfx_lockdep_lock+0x10/0x10 [ 196.750022][T10284] ? __lock_acquire+0xcc5/0x3c40 [ 196.750032][T10284] __lock_acquire+0x249e/0x3c40 [ 196.750044][T10284] ? __pfx___lock_acquire+0x10/0x10 [ 196.750056][T10284] ? find_held_lock+0x2d/0x110 [ 196.750075][T10284] lock_acquire.part.0+0x11b/0x380 [ 196.750086][T10284] ? elevator_disable+0xb5/0x490 [ 196.750101][T10284] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 196.750111][T10284] ? rcu_is_watching+0x12/0xc0 [ 196.750125][T10284] ? trace_lock_acquire+0x14e/0x1f0 [ 196.750138][T10284] ? elevator_disable+0xb5/0x490 [ 196.750153][T10284] ? lock_acquire+0x2f/0xb0 [ 196.750162][T10284] ? elevator_disable+0xb5/0x490 [ 196.750177][T10284] __mutex_lock+0x19b/0xa60 [ 196.750191][T10284] ? elevator_disable+0xb5/0x490 [ 196.750206][T10284] ? elevator_disable+0xb5/0x490 [ 196.750220][T10284] ? __pfx___mutex_lock+0x10/0x10 [ 196.750233][T10284] ? __pfx_blk_mq_sched_free_rqs+0x10/0x10 [ 196.750246][T10284] ? mark_held_locks+0x9f/0xe0 [ 196.750262][T10284] ? elevator_disable+0xb5/0x490 [ 196.750275][T10284] elevator_disable+0xb5/0x490 [ 196.750289][T10284] __blk_mq_update_nr_hw_queues+0x3bb/0x1460 [ 196.750299][T10284] ? lock_acquire.part.0+0x11b/0x380 [ 196.750309][T10284] ? __mutex_trylock_common+0xea/0x250 [ 196.750319][T10284] ? __pfx___mutex_trylock_common+0x10/0x10 [ 196.750329][T10284] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 196.750339][T10284] ? rcu_is_watching+0x12/0xc0 [ 196.750350][T10284] ? __pfx___blk_mq_update_nr_hw_queues+0x10/0x10 [ 196.750361][T10284] ? __pfx___mutex_trylock_common+0x10/0x10 [ 196.750370][T10284] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 196.750380][T10284] ? __pfx___mutex_lock+0x10/0x10 [ 196.750393][T10284] ? trace_contention_end+0xee/0x140 [ 196.750402][T10284] ? __mutex_lock+0x1cc/0xa60 [ 196.750414][T10284] ? nbd_ioctl+0x151/0xfd0 [ 196.750426][T10284] ? __pfx___mutex_lock+0x10/0x10 [ 196.750439][T10284] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 196.750448][T10284] nbd_start_device+0x15b/0xd70 [ 196.750461][T10284] ? bpf_lsm_capable+0x9/0x10 [ 196.750472][T10284] nbd_ioctl+0x21a/0xfd0 [ 196.750484][T10284] ? __pfx_nbd_ioctl+0x10/0x10 [ 196.750496][T10284] ? __pfx_lock_release+0x10/0x10 [ 196.750505][T10284] ? trace_lock_acquire+0x14e/0x1f0 [ 196.750519][T10284] ? __pfx_nbd_ioctl+0x10/0x10 [ 196.750530][T10284] compat_blkdev_ioctl+0x2f7/0x750 [ 196.750543][T10284] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 196.750557][T10284] ? __fget_files+0x206/0x3a0 [ 196.750569][T10284] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 196.750582][T10284] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 196.750593][T10284] __do_fast_syscall_32+0x73/0x120 [ 196.750606][T10284] do_fast_syscall_32+0x32/0x80 [ 196.750619][T10284] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 196.750634][T10284] RIP: 0023:0xf7f56579 [ 196.750643][T10284] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 196.750653][T10284] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 196.750663][T10284] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ab03 [ 196.750669][T10284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 196.750675][T10284] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 196.750681][T10284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.750687][T10284] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 196.750695][T10284] [ 196.832322][T10290] o2cb: This node has not been configured. [ 196.833726][T10288] syz.2.1185: attempt to access beyond end of device [ 196.833726][T10288] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 196.834634][T10290] o2cb: Cluster check failed. Fix errors before retrying. [ 196.834645][T10290] (syz.0.1186,10290,3):user_dlm_register:674 ERROR: status = -22 [ 196.834659][T10290] (syz.0.1186,10290,3):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "bus" [ 196.883445][ T1326] usb 8-1: USB disconnect, device number 4 [ 196.883577][T10288] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 196.988104][ T35] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 196.991683][T10288] syz.2.1185: attempt to access beyond end of device [ 196.991683][T10288] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 197.009881][ T35] usb 6-1: device descriptor read/8, error -71 [ 197.012157][T10288] syz.2.1185: attempt to access beyond end of device [ 197.012157][T10288] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 197.012611][T10287] block nbd2: shutting down sockets [ 197.014568][T10288] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 197.070111][T10288] syz.2.1185: attempt to access beyond end of device [ 197.070111][T10288] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 197.074017][T10288] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 197.077290][T10288] syz.2.1185: attempt to access beyond end of device [ 197.077290][T10288] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 197.081262][T10288] syz.2.1185: attempt to access beyond end of device [ 197.081262][T10288] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 197.085173][T10288] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 197.088179][T10288] syz.2.1185: attempt to access beyond end of device [ 197.088179][T10288] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 197.092010][T10288] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 197.095352][T10288] syz.2.1185: attempt to access beyond end of device [ 197.095352][T10288] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 197.099539][T10288] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 197.102441][T10288] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 197.105363][T10288] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 197.118193][ T35] usb usb6-port1: unable to enumerate USB device [ 197.258032][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 197.728132][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 198.288125][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 198.768106][ C2] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 199.328024][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 199.808086][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 200.368090][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 200.848011][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 201.408012][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 201.888106][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 202.448039][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 202.928014][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 203.488119][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 203.978095][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 204.537995][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 205.008140][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 205.577980][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 206.048072][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 206.608074][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available VM DIAGNOSIS: 06:51:59 Registers: info registers vcpu 0 CPU#0 RAX=000000000048325c RBX=0000000000000000 RCX=ffffffff8b1a6899 RDX=ffffed1005686fee RSI=ffffffff8bb170c0 RDI=ffffffff81703039 RBP=fffffbfff1b52ef8 RSP=ffffffff8da07e20 R8 =0000000000000000 R9 =ffffed1005686fed R10=ffff88802b437f6b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8da977c0 R14=ffffffff901cf290 R15=0000000000000000 RIP=ffffffff8b1a7c7f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5085da4 CR3=0000000063b14000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85145120 RDI=ffffffff9a667200 RBP=ffffffff9a6671c0 RSP=ffffc900030def78 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e33312e36 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff34cce92 R15=dffffc0000000000 RIP=ffffffff85145147 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000566194c0 CR3=000000006a2a6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000025bbcc RBX=0000000000000002 RCX=ffffffff8b1a6899 RDX=ffffed10056c6fee RSI=ffffffff8bb170c0 RDI=ffffffff81703039 RBP=ffffed1003a53000 RSP=ffffc9000048fe08 R8 =0000000000000000 R9 =ffffed10056c6fed R10=ffff88802b637f6b R11=0000000000000001 R12=0000000000000002 R13=ffff88801d298000 R14=ffffffff901cf290 R15=0000000000000000 RIP=ffffffff8b1a7c7f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055926e6b9000 CR3=000000004ba76000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffffffff8148ef31 RCX=1ffffffff3476314 RDX=1ffff110046bc721 RSI=ffffffff81e0a219 RDI=ffff8880235e3908 RBP=ffff8880235e2440 RSP=ffffc900039ceca8 R8 =ffffc900039ced64 R9 =ffffffff90ba2cde R10=ffffc900039ced30 R11=000000000000e4f7 R12=ffffffff81853000 R13=ffffc900039ced30 R14=0000000000000000 R15=ffff8880235e2440 RIP=ffffffff8168152e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2eaefd CR3=0000000069876000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000