last executing test programs: 6.469926974s ago: executing program 2 (id=3602): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000f3c3a7edc73d"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x3, 0x4, 0xa4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map=r1, 0x4, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x5, 0x5, 0x0, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000400)=""/26}, {&(0x7f0000000680)=""/234}, {&(0x7f00000004c0)=""/116}, {&(0x7f0000000840)=""/100}], 0x0, &(0x7f00000008c0)=""/212}, 0x8001}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000003b00)=""/4099}, {&(0x7f0000000540)=""/7}, {&(0x7f00000019c0)=""/111}, {&(0x7f0000000780)=""/1}, {&(0x7f0000001a40)=""/125}, {&(0x7f0000001ac0)=""/219}, {&(0x7f0000001bc0)=""/12}]}, 0x1}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001c40)=""/127}, {&(0x7f0000001cc0)=""/123}, {&(0x7f0000001d40)=""/133}, {&(0x7f0000001e00)=""/188}, {&(0x7f0000001ec0)=""/30}], 0x0, &(0x7f0000001f40)=""/38}, 0xf}, {{&(0x7f0000001f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x0, &(0x7f0000003240)=[{&(0x7f0000002000)=""/49}, {&(0x7f0000002040)=""/227}, {&(0x7f0000002140)=""/4096}, {&(0x7f0000003140)=""/217}]}, 0x4}, {{&(0x7f0000003280)=@nl, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003300)=""/38}, {&(0x7f0000003a00)=""/211}, {&(0x7f0000003440)=""/82, 0xfffffffffffffedd}], 0x0, &(0x7f0000003500)=""/82}, 0x6016}, {{&(0x7f0000003580)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x0, &(0x7f0000003900)=[{&(0x7f0000003600)=""/202}, {&(0x7f0000003700)=""/39}, {&(0x7f0000003740)=""/214}, {&(0x7f0000003840)=""/180}]}, 0x3}], 0x800000000000076, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r4 = socket$key(0xf, 0x3, 0x2) recvmmsg(r4, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="02274f954274ad65436e29299b67db08000002c08032e0bfe8340037b13040fb5360d8180ad54c9f113a37f094fbb27e0f6a16762280cc4f86defa6e5818801396a3d3923760866ac0b28dfc27f55348f2e9a34da8f319e55410313f61a976837990f505e7144de4"], 0x10}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000200)={0x2, 0x0, [{0x80000008, 0x0, 0x1, 0xda}, {0x80000000, 0x0, 0x0, 0xfc000000}]}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) socket$inet6_dccp(0xa, 0x6, 0x0) 5.449416547s ago: executing program 2 (id=3606): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000088500000007000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004"], 0x84}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4, 0x1, 0x9, 0x2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x10}}, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) write$binfmt_misc(r3, &(0x7f0000000000), 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0x5b23, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800e9012100010000000000000000000a0000000000008feeae105fbeae6900697012155a36677265300000000000000000000800060000"], 0x38}}, 0x40) ppoll(&(0x7f0000000400)=[{r5, 0x1304}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) mmap(&(0x7f000089b000/0x2000)=nil, 0x2000, 0x0, 0x50071, 0xffffffffffffffff, 0x3000) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000001c0)={0x2, 0x8}, 0x2) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r7, &(0x7f0000000240)='\x00', 0x1) 3.78985679s ago: executing program 3 (id=3615): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0x1], 0x0, 0x10, 0x37, @void, @value}, 0x94) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a84350014060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500300009081c98cfdf4a6081536f6b9780000"], 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000006c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, 0x108) (async) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) (async) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000800)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x90) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000002c0000c401"]) 3.6865863s ago: executing program 3 (id=3616): mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x15, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018150000", @ANYBLOB="0000000000000000b7080000002e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@private2, 0x0}, &(0x7f0000000240)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x12) msync(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000000, 0x13b2d20e2f1bd35f, 0xffffffffffffffff, 0x1bc5000) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) lseek(r5, 0xfffffffffffffffe, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) 3.499762573s ago: executing program 0 (id=3619): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x30}}, 0x4000000) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x22}}}}, &(0x7f00000001c0)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000003c0)={r4, @in={{0x2, 0x4e22, @empty}}, 0x7, 0x6d, 0xeaa2, 0x1, 0x85, 0xfffffff1, 0x4}, 0x9c) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) truncate(&(0x7f0000000180)='./file0\x00', 0x5) sendto$inet6(r7, &(0x7f0000000480)='X', 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x6, 0xc, 0x100000001, 0x59f}) 2.774200214s ago: executing program 3 (id=3621): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x102, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r3, 0x0, 0x1}, 0x18) lsm_list_modules(0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000120097023dbd70000000000007"], 0x28}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 2.772713779s ago: executing program 1 (id=3622): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x50, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x50}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttynull(0xffffff9c, &(0x7f0000000240), 0x88000, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x80045438, 0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) clock_gettime(0xfffffffffffffff1, &(0x7f0000000000)) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000bc3000/0x4000)=nil, 0x4000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000153b052acab1a6f12"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x29c, 0xc8, 0x111, 0x4b4, 0xc8, 0xd4feffff, 0x1d4, 0x20a, 0x278, 0x1d4, 0x278, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0x0, 0x0, 0x0, 0xffffff00], [], 'macvtap0\x00', 'bond0\x00', {}, {0xff}, 0x6, 0x4}, 0x0, 0xa4, 0xc8}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@private2, @rand_addr=' \x01\x00', [], [], 'vlan0\x00', 'ip6erspan0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2f8) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r6, 0x4004550c, &(0x7f0000002680)) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010"]) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 2.556255436s ago: executing program 0 (id=3623): mkdir(&(0x7f0000000440)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000000c00)=[{{&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0xca2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4, 0x4}, 0x80, 0x0}}], 0x1, 0x4004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioperm(0x4, 0x1, 0xff) r2 = io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0x0, 0x40, 0x0, 0x3bd}) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x200, @ipv4={'\x00', '\xff\xff', @empty}, 0x91c}}, 0x24) listen(r3, 0x4) recvmmsg(r3, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close_range(r2, r3, 0x0) r4 = dup(r1) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91524fc60", 0x14}], 0x1}, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000100), 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=preger=']) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="180100002d0001000000000000000000060100800c000200020000"], 0x118}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) r8 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_current(r8, &(0x7f0000000080)=@profile={'changeprofile ', '/proc/thread-self/attr/current\x00'}, 0x2d) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) 2.409574822s ago: executing program 2 (id=3624): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x1}, {0xfffffffffffffed5, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001000000000000000000000099ee000a30000000060a01040000000000000000020000436e887b84c100040004800900010073797a30000000000900f8ff73797a3200000001000000001100010000000000000000000000000a"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = eventfd2(0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = fsopen(&(0x7f0000000080)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000390400"/20, @ANYRES32=r8, @ANYBLOB="00000000000000001c0016801800018014000b"], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.409133343s ago: executing program 0 (id=3625): r0 = openat$nvme_fabrics(0xffffff9c, 0x0, 0x9ad00, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f0000000880), 0x0}, 0x1c) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f0000001080)={0x0, 0x5, 0x1, {0x2, @win={{}, 0x0, 0xffffffff, 0x0, 0xffffffff, 0x0}}}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$ocfs2_control(0xffffff9c, 0x0, 0x84540, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ff04076118000965db0008000007000000004000000085000000330000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$unix(0x1, 0x5, 0x0) r3 = dup2(r2, 0xffffffffffffffff) close_range(r3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x141942, 0x104) userfaultfd(0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000240)=[{0x15, 0x0, 0x0, 0x1}, {0x54}, {0x6, 0x0, 0xa, 0x5}]}) r4 = getpid() sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) 1.889628962s ago: executing program 1 (id=3626): setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) (async) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) fchdir(0xffffffffffffffff) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000a61a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x500, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r6}, 0x10) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) accept4(r2, 0x0, &(0x7f00000000c0), 0x81000) getsockopt$inet6_dccp_int(r2, 0x21, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}, 0x1, 0xd}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}, 0x1, 0xd}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000206d0414c70000000000010902"], 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) fallocate(0xffffffffffffffff, 0x21, 0x3, 0x724) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.785841301s ago: executing program 1 (id=3627): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60645d0100000000fe0000000000007bae020000c0bd0000000000000000060000000000000000001f00c2049a"], 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x0, 0x0, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') preadv(r3, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4082, 0xff2}], 0x1, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000040000000000003400000006000000040000000000000700000000000000000000000105000000090000000000fa000100000501000000000000da00"], 0x0, 0x52, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r4 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @dev, @netrom, 0x0, [@remote, @default, @rose, @null, @null, @rose]}, &(0x7f0000000080)=0x40, 0x80000) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000140)=0x148, 0x4) 1.785413267s ago: executing program 3 (id=3628): mkdir(&(0x7f0000000440)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000000c00)=[{{&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0xca2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4, 0x4}, 0x80, 0x0}}], 0x1, 0x4004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioperm(0x4, 0x1, 0xff) r2 = io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0x0, 0x40, 0x0, 0x3bd}) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r3, 0x4) recvmmsg(r3, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close_range(r2, r3, 0x0) r4 = dup(r1) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91524fc60", 0x14}], 0x1}, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000100), 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='mpol=preger=']) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="180100002d0001000000000000000000060100800c000200020000"], 0x118}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) r8 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_current(r8, &(0x7f0000000080)=@profile={'changeprofile ', '/proc/thread-self/attr/current\x00'}, 0x2d) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) 1.782540335s ago: executing program 1 (id=3629): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RAUTH(r1, &(0x7f0000000040)={0x14, 0x67, 0x2, {0x4, 0x1, 0x5}}, 0x14) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000080)={0x80, 0x0, 0x200}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 1.68496652s ago: executing program 1 (id=3630): mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x15, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018150000", @ANYBLOB="0000000000000000b7080000002e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@private2, 0x0}, &(0x7f0000000240)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x12) msync(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000000, 0x13b2d20e2f1bd35f, 0xffffffffffffffff, 0x1bc5000) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) lseek(r5, 0xfffffffffffffffe, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) 1.479716024s ago: executing program 2 (id=3631): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x30}}, 0x4000000) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x22}}}}, &(0x7f00000001c0)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000003c0)={r4, @in={{0x2, 0x4e22, @empty}}, 0x7, 0x6d, 0xeaa2, 0x1, 0x85, 0xfffffff1, 0x4}, 0x9c) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) truncate(&(0x7f0000000180)='./file0\x00', 0x5) sendto$inet6(r7, &(0x7f0000000480)='X', 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x6, 0xc, 0x100000001, 0x59f}) 1.479274211s ago: executing program 0 (id=3632): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000088500000007000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004"], 0x84}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4, 0x1, 0x9, 0x2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x10}}, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) write$binfmt_misc(r3, &(0x7f0000000000), 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0x5b23, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800e9012100010000000000000000000a0000000000008feeae105fbeae6900697012155a36677265300000000000000000000800060000"], 0x38}}, 0x40) ppoll(&(0x7f0000000400)=[{r5, 0x1304}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) mmap(&(0x7f000089b000/0x2000)=nil, 0x2000, 0x0, 0x50071, 0xffffffffffffffff, 0x3000) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000001c0)={0x2, 0x8}, 0x2) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r7, &(0x7f0000000240)='\x00', 0x1) 1.234900344s ago: executing program 3 (id=3633): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) epoll_create1(0x0) r0 = eventfd2(0x0, 0x0) write$eventfd(r0, &(0x7f0000000000), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r4, &(0x7f00000003c0)='./file0\x00', 0x200, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) r7 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r7, 0x8923, &(0x7f0000000040)={'lo\x00', @ifru_hwaddr=@multicast}) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 749.334589ms ago: executing program 1 (id=3634): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x50, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x50}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttynull(0xffffff9c, &(0x7f0000000240), 0x88000, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x80045438, 0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) clock_gettime(0xfffffffffffffff1, &(0x7f0000000000)) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000bc3000/0x4000)=nil, 0x4000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000153b052acab1a6f12"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x29c, 0xc8, 0x111, 0x4b4, 0xc8, 0xd4feffff, 0x1d4, 0x20a, 0x278, 0x1d4, 0x278, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0x0, 0x0, 0x0, 0xffffff00], [], 'macvtap0\x00', 'bond0\x00', {}, {0xff}, 0x6, 0x4}, 0x0, 0xa4, 0xc8}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@private2, @rand_addr=' \x01\x00', [], [], 'vlan0\x00', 'ip6erspan0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2f8) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r6, 0x4004550c, &(0x7f0000002680)) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010"]) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 559.073093ms ago: executing program 2 (id=3635): mkdir(&(0x7f0000000440)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000000c00)=[{{&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0xca2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4, 0x4}, 0x80, 0x0}}], 0x1, 0x4004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioperm(0x4, 0x1, 0xff) r2 = io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0x0, 0x40, 0x0, 0x3bd}) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r3, 0x4) recvmmsg(r3, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close_range(r2, r3, 0x0) r4 = dup(r1) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91524fc60", 0x14}], 0x1}, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000100), 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='mpol=preger=']) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="180100002d0001000000000000000000060100800c000200020000"], 0x118}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) r8 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_current(r8, &(0x7f0000000080)=@profile={'changeprofile ', '/proc/thread-self/attr/current\x00'}, 0x2d) (fail_nth: 3) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) 129.966644ms ago: executing program 3 (id=3636): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14e711eb5aff5e8aec000000000000800a000000068dca3eb335632551d166"], 0x14}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = io_uring_setup(0x6281, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="010600000013597a81fa0093dd00", @ANYBLOB="10bc18fd233f12c0d5b71c4d21e80c575376fdc0ff07f13461a6377eb99fed4ab3fe475a45cb9de8ebbc50900b2fdfdc4337cf1f6fdda37d1df6c49a6cdf2814a6841d7debc758f0e4b86473eb109745a2111a260962c44f8e942135d967597ee4ef2ca4d37e53f2ea6b282071f6ed2e124983a398b81ecfb05b9c1dd775c28ccfeba6549326ddab482f75f1ebbd3fcbc69ee1d09ae65119279cec4ba8b5847599a28b9e3e028ff6b67d72e36db02c159cd2df7f740c100d19f944f6bb369736d556da3ddd11780586c98b979dd9ad67e22d29f326059d49cdea64ba26a7980adb0d64ac4d49dfc25c71d9916520e979", @ANYRES8=r0], 0x14}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000200)=0x6, 0x4) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000203010400"/28], 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, 0x0, 0x0) fcntl$dupfd(r6, 0x0, r7) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000003f00000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r12, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e23, 0x6e00, @private2, 0x3}}, 0x0, 0x0, 0xfffd, 0x0, "61a1ed8439cde8054f2a230f98dfe76b933e8bb0ac60081e33dffa158f35f7519d5f73b4f5d80eb488065b98cb9fb96d225d602392f816d09dcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xfffffcf0) socket$inet_udp(0x2, 0x2, 0x0) 129.531317ms ago: executing program 2 (id=3637): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x102, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r3, 0x0, 0x1}, 0x18) lsm_list_modules(0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000120097023dbd70000000000007"], 0x28}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 127.919104ms ago: executing program 0 (id=3638): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', &(0x7f0000000580), 0x204014, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f00000024c0)='./file0\x00', 0x325000, 0x5) unlink(&(0x7f0000000000)='./file0\x00') mkdirat(r0, &(0x7f0000002040)='./file0\x00', 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xb) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x64) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) r2 = socket$tipc(0x1e, 0x2, 0x0) mount$nfs4(&(0x7f0000000380)='{\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f00000004c0), 0x1080420, &(0x7f0000000500)={[{'9p\x00'}, {'anon_inodefs\x00'}, {}], [{@audit}]}) bind$tipc(r2, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x4, 0x2}}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000340)='./file1\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, 0x0) r4 = inotify_init1(0x80000) fcntl$setown(r4, 0x8, 0xffffffffffffffff) syz_open_procfs(0x0, 0x0) 0s ago: executing program 0 (id=3639): mkdirat(0xffffffffffffffff, 0x0, 0xd9) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x15, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018150000", @ANYBLOB="0000000000000000b7080000002e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@private2, 0x0}, &(0x7f0000000240)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) lseek(0xffffffffffffffff, 0x5c2c, 0x0) ioctl$SNDCTL_TMR_SOURCE(0xffffffffffffffff, 0xc0045406) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x12) msync(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) socket$netlink(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): 579 code=0x7ffc0000 [ 706.084365][ T39] audit: type=1326 audit(1734020556.886:13373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17477 comm="syz.3.3234" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f70579 code=0x7ffc0000 [ 706.090163][ T39] audit: type=1326 audit(1734020556.896:13374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17477 comm="syz.3.3234" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f70579 code=0x7ffc0000 [ 706.191909][T17480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3233'. [ 706.440922][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 706.774381][T17477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 706.815775][T17500] xt_TCPMSS: Only works on TCP SYN packets [ 707.050860][T16511] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 707.200901][T16511] usb 6-1: Using ep0 maxpacket: 8 [ 707.203867][T16511] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 707.206396][T16511] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 707.208918][T16511] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 707.211626][T16511] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 707.214253][T16511] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 707.217931][T16511] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 707.220502][T16511] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.430903][T16511] usb 6-1: GET_CAPABILITIES returned 0 [ 707.432422][T16511] usbtmc 6-1:16.0: can't read capabilities [ 707.480852][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 707.558972][T17509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3243'. [ 707.633264][T17499] misc userio: The device must be registered before sending interrupts [ 707.638973][T16598] usb 6-1: USB disconnect, device number 39 [ 707.768887][T17518] blktrace: Concurrent blktraces are not allowed on sg0 [ 708.191273][T17525] blktrace: Concurrent blktraces are not allowed on sg0 [ 708.520829][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 708.567627][T17537] xt_TCPMSS: Only works on TCP SYN packets [ 708.612566][T17538] nbd0: detected capacity change from 0 to 20 [ 708.622414][T13728] block nbd0: Send control failed (result -89) [ 708.624384][T13728] block nbd0: Request send failed, requeueing [ 708.626144][ T5293] block nbd0: Receive control failed (result -32) [ 708.627346][ T26] block nbd0: Dead connection, failed to find a fallback [ 708.629786][ T26] block nbd0: shutting down sockets [ 708.631331][ T26] blk_print_req_error: 101 callbacks suppressed [ 708.631339][ T26] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 708.635427][ T26] buffer_io_error: 91 callbacks suppressed [ 708.635434][ T26] Buffer I/O error on dev nbd0, logical block 0, async page read [ 708.639479][T13728] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 708.642395][T13728] Buffer I/O error on dev nbd0, logical block 0, async page read [ 708.644915][T13728] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 708.647572][T13728] Buffer I/O error on dev nbd0, logical block 0, async page read [ 708.651054][T13728] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 708.653760][T13728] Buffer I/O error on dev nbd0, logical block 0, async page read [ 708.656792][T13728] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 708.659661][T13728] Buffer I/O error on dev nbd0, logical block 0, async page read [ 708.663222][T13728] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 708.666136][T13728] Buffer I/O error on dev nbd0, logical block 0, async page read [ 708.673568][T13728] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 708.676557][T13728] Buffer I/O error on dev nbd0, logical block 0, async page read [ 708.678802][T13728] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 708.681671][T13728] Buffer I/O error on dev nbd0, logical block 0, async page read [ 708.683826][T13728] ldm_validate_partition_table(): Disk read failed. [ 708.685724][T13728] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 708.688266][T13728] Buffer I/O error on dev nbd0, logical block 0, async page read [ 708.690434][T13728] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 708.693216][T13728] Buffer I/O error on dev nbd0, logical block 0, async page read [ 708.695407][T13728] Dev nbd0: unable to read RDB block 0 [ 708.696985][T13728] nbd0: unable to read partition table [ 708.698520][T13728] nbd0: partition table beyond EOD, truncated [ 708.709627][T17538] ldm_validate_partition_table(): Disk read failed. [ 708.716534][T17538] Dev nbd0: unable to read RDB block 0 [ 708.718617][T17538] nbd0: unable to read partition table [ 708.720286][T17538] nbd0: partition table beyond EOD, truncated [ 708.722481][T17538] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 708.725267][T17538] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=9, location=9 [ 708.729035][T13728] ldm_validate_partition_table(): Disk read failed. [ 708.730117][T17538] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8, location=8 [ 708.733797][T13728] Dev nbd0: unable to read RDB block 0 [ 708.735734][T13728] nbd0: unable to read partition table [ 708.737344][T13728] nbd0: partition table beyond EOD, truncated [ 708.737891][T17538] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=7, location=7 [ 708.747072][T17538] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 708.753843][T17538] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 708.756640][T17538] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=4, location=4 [ 708.759131][T17538] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=3, location=3 [ 708.761762][T17538] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=2, location=2 [ 708.765800][T17538] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 708.770050][T17538] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 708.780374][T17538] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=1, location=1 [ 708.789011][T17538] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=0, location=0 [ 708.792973][T17538] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 708.796794][T17538] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 709.560855][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 710.075991][ T5978] IPVS: starting estimator thread 0... [ 710.145909][T17565] tipc: Started in network mode [ 710.147456][T17565] tipc: Node identity ac1414aa, cluster identity 4711 [ 710.150596][T17565] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 710.153091][T17565] tipc: Enabled bearer , priority 10 [ 710.181680][T17566] IPVS: using max 37 ests per chain, 88800 per kthread [ 710.280931][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 710.420932][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 710.556805][T17586] syz.1.3263: attempt to access beyond end of device [ 710.556805][T17586] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 710.560876][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 710.567796][T17586] syz.1.3263: attempt to access beyond end of device [ 710.567796][T17586] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 710.573920][T17586] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 710.600857][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 710.614113][T17586] syz.1.3263: attempt to access beyond end of device [ 710.614113][T17586] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 710.622125][T17586] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 710.626019][T17586] syz.1.3263: attempt to access beyond end of device [ 710.626019][T17586] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 710.630701][T17586] syz.1.3263: attempt to access beyond end of device [ 710.630701][T17586] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 710.635459][T17586] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 710.638735][T17586] syz.1.3263: attempt to access beyond end of device [ 710.638735][T17586] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 710.642156][T17586] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 710.644897][T17586] syz.1.3263: attempt to access beyond end of device [ 710.644897][T17586] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 710.648182][T17586] syz.1.3263: attempt to access beyond end of device [ 710.648182][T17586] nbd1: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 710.652956][T17586] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 710.657764][T17586] syz.1.3263: attempt to access beyond end of device [ 710.657764][T17586] nbd1: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 710.668076][T17586] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 710.670635][T17586] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 710.672867][T17591] xt_TCPMSS: Only works on TCP SYN packets [ 710.681255][T17575] nbd1: detected capacity change from 0 to 20 [ 710.684673][T13728] block nbd1: Send control failed (result -89) [ 710.686332][T13728] block nbd1: Request send failed, requeueing [ 710.688459][ T5293] block nbd1: Receive control failed (result -32) [ 710.688494][ T26] block nbd1: Dead connection, failed to find a fallback [ 710.692760][ T26] block nbd1: shutting down sockets [ 710.695137][T13728] ldm_validate_partition_table(): Disk read failed. [ 710.697841][T13728] Dev nbd1: unable to read RDB block 0 [ 710.700231][T13728] nbd1: unable to read partition table [ 710.701052][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 710.702347][T13728] nbd1: partition table beyond EOD, truncated [ 710.720945][T13728] ldm_validate_partition_table(): Disk read failed. [ 710.722976][T13728] Dev nbd1: unable to read RDB block 0 [ 710.724601][T13728] nbd1: unable to read partition table [ 710.726658][T13728] nbd1: partition table beyond EOD, truncated [ 710.841110][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 710.980851][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 711.271063][ T5978] tipc: Node number set to 2886997162 [ 711.536658][T17605] FAULT_INJECTION: forcing a failure. [ 711.536658][T17605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 711.539971][T17605] CPU: 3 UID: 0 PID: 17605 Comm: syz.0.3270 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 711.542700][T17605] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 711.545366][T17605] Call Trace: [ 711.546214][T17605] [ 711.546998][T17605] dump_stack_lvl+0x16c/0x1f0 [ 711.548277][T17605] should_fail_ex+0x497/0x5b0 [ 711.549487][T17605] save_fsave_header+0x17c/0x2e0 [ 711.550748][T17605] ? __pfx_save_fsave_header+0x10/0x10 [ 711.552151][T17605] ? __local_bh_enable_ip+0xa4/0x120 [ 711.553524][T17605] copy_fpstate_to_sigframe+0x7b6/0xb20 [ 711.554918][T17605] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 711.556421][T17605] ? lock_acquire+0x2f/0xb0 [ 711.557611][T17605] ? posixtimer_deliver_signal+0x1ad/0x650 [ 711.559459][T17605] ? posixtimer_deliver_signal+0x1ad/0x650 [ 711.560930][T17605] ? find_held_lock+0x2d/0x110 [ 711.562153][T17605] get_sigframe+0x4aa/0x9c0 [ 711.563315][T17605] ? __pfx_get_sigframe+0x10/0x10 [ 711.564623][T17605] ? _raw_spin_unlock_irq+0x23/0x50 [ 711.565931][T17605] ? siginfo_layout+0x177/0x290 [ 711.567211][T17605] ia32_setup_rt_frame+0xe4/0xb30 [ 711.568533][T17605] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 711.569967][T17605] arch_do_signal_or_restart+0x47b/0x7e0 [ 711.571402][T17605] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 711.573020][T17605] ? __pfx_ksys_write+0x10/0x10 [ 711.574278][T17605] syscall_exit_to_user_mode+0x150/0x2a0 [ 711.575749][T17605] __do_fast_syscall_32+0x80/0x120 [ 711.577114][T17605] do_fast_syscall_32+0x32/0x80 [ 711.578388][T17605] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 711.580029][T17605] RIP: 0023:0xf7f65577 [ 711.581075][T17605] Code: 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 [ 711.586088][T17605] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 711.588195][T17605] RAX: 0000000000000151 RBX: 0000000000000004 RCX: 000000002000a900 [ 711.590119][T17605] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 711.592166][T17605] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 711.594219][T17605] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 711.596256][T17605] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 711.598380][T17605] [ 711.613981][T17608] FAULT_INJECTION: forcing a failure. [ 711.613981][T17608] name failslab, interval 1, probability 0, space 0, times 0 [ 711.618471][T17608] CPU: 3 UID: 0 PID: 17608 Comm: syz.3.3271 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 711.622306][T17608] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 711.625506][T17608] Call Trace: [ 711.626384][T17608] [ 711.627159][T17608] dump_stack_lvl+0x16c/0x1f0 [ 711.628363][T17608] should_fail_ex+0x497/0x5b0 [ 711.629526][T17608] ? fs_reclaim_acquire+0xae/0x150 [ 711.630836][T17608] should_failslab+0xc2/0x120 [ 711.632089][T17608] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 711.633628][T17608] ? __alloc_skb+0x2b3/0x380 [ 711.634872][T17608] __alloc_skb+0x2b3/0x380 [ 711.636022][T17608] ? __pfx___alloc_skb+0x10/0x10 [ 711.637262][T17608] ? lock_acquire+0x2f/0xb0 [ 711.638440][T17608] netlink_alloc_large_skb+0x69/0x130 [ 711.639090][ T39] kauditd_printk_skb: 75 callbacks suppressed [ 711.639100][ T39] audit: type=1800 audit(1734020562.466:13450): pid=17609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3270" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 711.639810][T17608] netlink_sendmsg+0x689/0xd70 [ 711.647905][T17608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 711.649301][T17608] ____sys_sendmsg+0x9ae/0xb40 [ 711.650540][T17608] ? __pfx_____sys_sendmsg+0x10/0x10 [ 711.651917][T17608] ? get_compat_msghdr+0x11b/0x170 [ 711.653300][T17608] ___sys_sendmsg+0x135/0x1e0 [ 711.654537][T17608] ? __pfx____sys_sendmsg+0x10/0x10 [ 711.655908][T17608] ? __pfx_lock_release+0x10/0x10 [ 711.657212][T17608] ? trace_lock_acquire+0x14e/0x1f0 [ 711.658566][T17608] ? __fget_files+0x206/0x3a0 [ 711.659789][T17608] __sys_sendmsg+0x16e/0x220 [ 711.660949][T17608] ? __pfx___sys_sendmsg+0x10/0x10 [ 711.662531][T17608] __do_fast_syscall_32+0x73/0x120 [ 711.664065][T17608] do_fast_syscall_32+0x32/0x80 [ 711.665358][T17608] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 711.666949][T17608] RIP: 0023:0xf7f70579 [ 711.667997][T17608] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 711.672903][T17608] RSP: 002b:00000000f50c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 711.674993][T17608] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000880 [ 711.677070][T17608] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 711.679142][T17608] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 711.681117][T17608] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 711.683128][T17608] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 711.685113][T17608] [ 711.959141][T17617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3273'. [ 711.969073][T17616] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3272'. [ 712.633710][T17620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3274'. [ 712.839980][T17627] syz.3.3275: attempt to access beyond end of device [ 712.839980][T17627] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 712.845031][T17627] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 712.848574][T17627] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 712.851072][T17622] nbd3: detected capacity change from 0 to 20 [ 712.855944][T13728] block nbd3: Send control failed (result -89) [ 712.857998][T13728] block nbd3: Request send failed, requeueing [ 712.868970][T13728] block nbd3: Dead connection, failed to find a fallback [ 712.871481][ T5293] block nbd3: Receive control failed (result -32) [ 712.873648][ T1275] block nbd3: Dead connection, failed to find a fallback [ 712.876021][ T1275] block nbd3: shutting down sockets [ 712.878876][T13728] ldm_validate_partition_table(): Disk read failed. [ 712.880999][T17627] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 712.886346][T17627] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=4, location=4 [ 712.888733][T13728] Dev nbd3: unable to read RDB block 0 [ 712.891032][T17627] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=3, location=3 [ 712.891100][T17627] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=2, location=2 [ 712.896620][T17627] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 712.900042][T13728] nbd3: unable to read partition table [ 712.900921][T17627] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 712.906871][T13728] nbd3: partition table beyond EOD, truncated [ 712.907058][T17627] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=1, location=1 [ 712.911423][T17627] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 712.918936][T13728] ldm_validate_partition_table(): Disk read failed. [ 712.933953][T13728] Dev nbd3: unable to read RDB block 0 [ 712.935488][T13728] nbd3: unable to read partition table [ 712.937848][T17627] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 712.940632][T17627] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 712.942619][T13728] nbd3: partition table beyond EOD, truncated [ 713.065258][ T39] audit: type=1326 audit(1734020563.916:13451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17634 comm="syz.0.3279" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 713.070671][ T39] audit: type=1326 audit(1734020563.916:13452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17634 comm="syz.0.3279" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 713.076487][ T39] audit: type=1326 audit(1734020563.916:13453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17634 comm="syz.0.3279" exe="/syz-executor" sig=0 arch=40000003 syscall=177 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 713.085431][ T39] audit: type=1326 audit(1734020563.916:13454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17634 comm="syz.0.3279" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 713.093409][ T39] audit: type=1326 audit(1734020563.916:13455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17634 comm="syz.0.3279" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 713.099210][ T39] audit: type=1326 audit(1734020563.916:13456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17634 comm="syz.0.3279" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 713.106659][ T39] audit: type=1326 audit(1734020563.916:13457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17634 comm="syz.0.3279" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 713.113625][ T39] audit: type=1326 audit(1734020563.916:13458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17634 comm="syz.0.3279" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 713.119112][ T39] audit: type=1326 audit(1734020563.916:13459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17634 comm="syz.0.3279" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 713.126521][T17638] xt_TCPMSS: Only works on TCP SYN packets [ 713.523227][T17644] blktrace: Concurrent blktraces are not allowed on sg0 [ 713.800888][ C3] net_ratelimit: 7 callbacks suppressed [ 713.800910][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 714.280848][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 714.485354][T17660] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3284'. [ 714.518069][T17661] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 714.523417][T17661] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 714.527199][T17661] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 714.530122][T17661] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 714.533531][T17661] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 714.536754][T17661] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 714.540330][T17661] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 714.543555][T17657] nbd2: detected capacity change from 0 to 20 [ 714.553786][T13728] block nbd2: Send control failed (result -89) [ 714.555540][T13728] block nbd2: Request send failed, requeueing [ 714.557574][ T5293] block nbd2: Receive control failed (result -32) [ 714.557693][ T51] block nbd2: Dead connection, failed to find a fallback [ 714.561437][ T51] block nbd2: shutting down sockets [ 714.562854][ T51] blk_print_req_error: 197 callbacks suppressed [ 714.562892][ T51] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 714.567245][ T51] buffer_io_error: 184 callbacks suppressed [ 714.567284][ T51] Buffer I/O error on dev nbd2, logical block 0, async page read [ 714.571919][T13728] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 714.574590][T13728] Buffer I/O error on dev nbd2, logical block 0, async page read [ 714.577288][T13728] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 714.579737][T13728] Buffer I/O error on dev nbd2, logical block 0, async page read [ 714.582378][T13728] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 714.584840][T13728] Buffer I/O error on dev nbd2, logical block 0, async page read [ 714.587388][T13728] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 714.589822][T13728] Buffer I/O error on dev nbd2, logical block 0, async page read [ 714.592465][T13728] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 714.594993][T13728] Buffer I/O error on dev nbd2, logical block 0, async page read [ 714.597551][T13728] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 714.600041][T13728] Buffer I/O error on dev nbd2, logical block 0, async page read [ 714.602611][T13728] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 714.605194][T13728] Buffer I/O error on dev nbd2, logical block 0, async page read [ 714.607506][T13728] ldm_validate_partition_table(): Disk read failed. [ 714.609587][T13728] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 714.612020][T13728] Buffer I/O error on dev nbd2, logical block 0, async page read [ 714.614556][T13728] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 714.617022][T13728] Buffer I/O error on dev nbd2, logical block 0, async page read [ 714.619893][T13728] Dev nbd2: unable to read RDB block 0 [ 714.622171][T13728] nbd2: unable to read partition table [ 714.624142][T13728] nbd2: partition table beyond EOD, truncated [ 714.634107][T13728] ldm_validate_partition_table(): Disk read failed. [ 714.638610][T13728] Dev nbd2: unable to read RDB block 0 [ 714.640992][T13728] nbd2: unable to read partition table [ 714.642508][T13728] nbd2: partition table beyond EOD, truncated [ 714.802220][T17667] (syz.2.3287,17667,3):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "ßÕ~gžœ<+‹€( ™.µ1 1'êÆ‰Ç" or missing value [ 714.806414][T17667] (syz.2.3287,17667,3):ocfs2_fill_super:1178 ERROR: status = -22 [ 714.840884][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 715.320869][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 715.406614][T17688] blktrace: Concurrent blktraces are not allowed on sg0 [ 715.688221][T17692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3293'. [ 715.693008][T17692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3293'. [ 715.696192][T17692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3293'. [ 715.836841][T17700] bio_check_eod: 11 callbacks suppressed [ 715.836860][T17700] syz.0.3294: attempt to access beyond end of device [ 715.836860][T17700] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 715.842252][T17700] syz.0.3294: attempt to access beyond end of device [ 715.842252][T17700] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 715.845880][T17700] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 715.848467][T17700] syz.0.3294: attempt to access beyond end of device [ 715.848467][T17700] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 715.855448][T17700] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 715.859067][T17700] syz.0.3294: attempt to access beyond end of device [ 715.859067][T17700] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 715.863378][T17690] nbd0: detected capacity change from 0 to 20 [ 715.863483][T17700] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 715.869605][T13728] block nbd0: Send control failed (result -89) [ 715.873711][T13728] block nbd0: Request send failed, requeueing [ 715.875797][ T1275] block nbd0: Dead connection, failed to find a fallback [ 715.875803][ T5293] block nbd0: Receive control failed (result -32) [ 715.877638][ T1275] block nbd0: shutting down sockets [ 715.883902][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 715.885958][T17700] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=4, location=4 [ 715.888473][T17700] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=3, location=3 [ 715.900071][T17700] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=2, location=2 [ 715.901518][T13728] ldm_validate_partition_table(): Disk read failed. [ 715.905118][T17700] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 715.913794][T13728] Dev nbd0: unable to read RDB block 0 [ 715.915356][T17700] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 715.917900][T13728] nbd0: unable to read partition table [ 715.919331][T17700] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=1, location=1 [ 715.921892][T13728] nbd0: partition table beyond EOD, truncated [ 715.925758][T17700] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=0, location=0 [ 715.928594][T13728] ldm_validate_partition_table(): Disk read failed. [ 715.930321][T17700] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 715.931096][T13728] Dev nbd0: unable to read RDB block 0 [ 715.934298][T17700] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 715.934572][T13728] nbd0: unable to read partition table [ 715.938257][T13728] nbd0: partition table beyond EOD, truncated [ 716.254303][T17706] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 716.256660][T17706] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 716.261449][T17706] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 716.265711][T17706] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 716.270005][T17706] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 716.272507][T17706] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 716.284007][T17706] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 716.360819][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 716.556332][T17716] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3299'. [ 716.930847][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 716.942936][ T39] kauditd_printk_skb: 105 callbacks suppressed [ 716.942947][ T39] audit: type=1326 audit(1734020567.796:13565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17730 comm="syz.0.3304" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 716.950196][ T39] audit: type=1326 audit(1734020567.796:13566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17730 comm="syz.0.3304" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 716.956400][ T39] audit: type=1326 audit(1734020567.796:13567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17730 comm="syz.0.3304" exe="/syz-executor" sig=0 arch=40000003 syscall=177 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 716.962524][ T39] audit: type=1326 audit(1734020567.796:13568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17730 comm="syz.0.3304" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 716.969613][ T39] audit: type=1326 audit(1734020567.796:13569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17730 comm="syz.0.3304" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 716.975270][ T39] audit: type=1326 audit(1734020567.796:13570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17730 comm="syz.0.3304" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 716.980596][ T39] audit: type=1326 audit(1734020567.796:13571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17730 comm="syz.0.3304" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 716.987204][ T39] audit: type=1326 audit(1734020567.796:13572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17730 comm="syz.0.3304" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 716.992595][ T39] audit: type=1326 audit(1734020567.796:13573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17730 comm="syz.0.3304" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 716.997994][ T39] audit: type=1326 audit(1734020567.796:13574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17730 comm="syz.0.3304" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 717.400821][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 717.582334][T17746] blktrace: Concurrent blktraces are not allowed on sg0 [ 717.960819][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 718.033726][T17758] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 1 [ 718.034646][T17757] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 718.039121][T17760] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 3 [ 718.042661][T17759] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 2 [ 718.282372][ T5293] Bluetooth: hci0: command 0x0405 tx timeout [ 718.284046][ T5293] Bluetooth: hci1: command 0x0406 tx timeout [ 718.285679][ T5293] Bluetooth: hci2: command 0x0406 tx timeout [ 718.440823][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 719.000918][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 719.239989][T17781] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3315'. [ 719.480853][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 719.974229][T17801] blktrace: Concurrent blktraces are not allowed on sg0 [ 720.040853][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 720.370908][ T5293] Bluetooth: hci1: command 0x0406 tx timeout [ 720.372784][ T5293] Bluetooth: hci0: command 0x0405 tx timeout [ 720.375308][ T5941] Bluetooth: hci2: command 0x0406 tx timeout [ 720.520854][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 721.029777][T17827] syz.3.3328: attempt to access beyond end of device [ 721.029777][T17827] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 721.033822][T17827] syz.3.3328: attempt to access beyond end of device [ 721.033822][T17827] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 721.037464][T17827] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 721.040364][T17827] syz.3.3328: attempt to access beyond end of device [ 721.040364][T17827] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 721.045372][T17827] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 721.052467][T17827] syz.3.3328: attempt to access beyond end of device [ 721.052467][T17827] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 721.057672][T17827] syz.3.3328: attempt to access beyond end of device [ 721.057672][T17827] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 721.061309][T17820] nbd3: detected capacity change from 0 to 20 [ 721.061526][T17827] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 721.068191][T17827] block nbd3: Send control failed (result -89) [ 721.069242][T17824] lo speed is unknown, defaulting to 1000 [ 721.069848][T17827] block nbd3: Request send failed, requeueing [ 721.074716][ T5951] block nbd3: Receive control failed (result -32) [ 721.077186][ T51] block nbd3: Dead connection, failed to find a fallback [ 721.079370][ T51] block nbd3: shutting down sockets [ 721.081827][ T51] blk_print_req_error: 77 callbacks suppressed [ 721.081887][ T51] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 721.082281][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 721.084015][T13728] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 721.100163][T13728] buffer_io_error: 72 callbacks suppressed [ 721.100555][T13728] Buffer I/O error on dev nbd3, logical block 0, async page read [ 721.109770][T17827] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 721.112747][T13728] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 721.115536][T13728] Buffer I/O error on dev nbd3, logical block 1, async page read [ 721.121444][T17827] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 721.127562][T13728] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 721.133553][T13728] Buffer I/O error on dev nbd3, logical block 0, async page read [ 721.137320][T13728] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 721.144128][T13728] Buffer I/O error on dev nbd3, logical block 1, async page read [ 721.149132][T17827] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=1, location=1 [ 721.152897][T13728] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 721.157209][T17827] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 721.159906][T13728] Buffer I/O error on dev nbd3, logical block 0, async page read [ 721.162897][T13728] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 721.165351][T13728] Buffer I/O error on dev nbd3, logical block 1, async page read [ 721.167643][T13728] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 721.167698][T17827] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 721.170067][T13728] Buffer I/O error on dev nbd3, logical block 0, async page read [ 721.176552][T13728] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 721.176777][T17827] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=1, location=1 [ 721.181872][T13728] Buffer I/O error on dev nbd3, logical block 0, async page read [ 721.184543][T13728] Buffer I/O error on dev nbd3, logical block 0, async page read [ 721.187115][T17827] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 721.187472][T13728] Buffer I/O error on dev nbd3, logical block 0, async page read [ 721.193522][T13728] ldm_validate_partition_table(): Disk read failed. [ 721.193551][T17827] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 721.195682][T13728] Dev nbd3: unable to read RDB block 0 [ 721.199631][T17827] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 721.199846][T13728] nbd3: unable to read partition table [ 721.205158][T13728] nbd3: partition table beyond EOD, truncated [ 721.228554][T13728] ldm_validate_partition_table(): Disk read failed. [ 721.233235][T13728] Dev nbd3: unable to read RDB block 0 [ 721.234876][T13728] nbd3: unable to read partition table [ 721.237492][T13728] nbd3: partition table beyond EOD, truncated [ 721.288372][T17835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3331'. [ 721.288393][T17835] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3331'. [ 721.556739][T17841] xt_TCPMSS: Only works on TCP SYN packets [ 721.570827][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 721.572103][T17842] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3332'. [ 722.120939][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 722.441002][ T5951] Bluetooth: hci0: command 0x0405 tx timeout [ 722.600907][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 723.047190][ T39] kauditd_printk_skb: 118 callbacks suppressed [ 723.047202][ T39] audit: type=1326 audit(1734020573.896:13693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17856 comm="syz.0.3337" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x0 [ 723.170852][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 723.640867][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 723.924583][T17884] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3342'. [ 724.200851][ C3] net_ratelimit: 1 callbacks suppressed [ 724.200871][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 724.226419][T17895] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3343'. [ 724.680872][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 725.163833][T17917] syz.2.3348: attempt to access beyond end of device [ 725.163833][T17917] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 725.168171][T17917] syz.2.3348: attempt to access beyond end of device [ 725.168171][T17917] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 725.172292][T17917] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 725.174952][T17917] syz.2.3348: attempt to access beyond end of device [ 725.174952][T17917] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 725.178363][T17917] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 725.181532][T17917] syz.2.3348: attempt to access beyond end of device [ 725.181532][T17917] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 725.185239][T17917] syz.2.3348: attempt to access beyond end of device [ 725.185239][T17917] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 725.188851][T17917] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 725.192155][T17917] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 725.194911][T17917] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 725.197522][T17917] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 725.199999][T17917] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 725.219075][T17918] macvlan0: mtu less than device minimum [ 725.240868][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 725.286878][ T39] audit: type=1326 audit(1734020576.136:13694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17921 comm="syz.2.3351" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x0 [ 725.720849][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 726.280840][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 726.660838][T17957] nbd3: detected capacity change from 0 to 20 [ 726.663423][T13728] block nbd3: Send control failed (result -89) [ 726.665193][T13728] block nbd3: Request send failed, requeueing [ 726.667115][T10321] block nbd3: Dead connection, failed to find a fallback [ 726.669039][T10321] block nbd3: shutting down sockets [ 726.670539][T10321] blk_print_req_error: 32 callbacks suppressed [ 726.670551][T10321] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 726.674824][T10321] buffer_io_error: 28 callbacks suppressed [ 726.674833][T10321] Buffer I/O error on dev nbd3, logical block 0, async page read [ 726.678810][T13728] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 726.681449][T13728] Buffer I/O error on dev nbd3, logical block 0, async page read [ 726.684437][T13728] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 726.687334][T13728] Buffer I/O error on dev nbd3, logical block 0, async page read [ 726.690240][T13728] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 726.693598][T13728] Buffer I/O error on dev nbd3, logical block 0, async page read [ 726.696405][T13728] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 726.698855][T13728] Buffer I/O error on dev nbd3, logical block 0, async page read [ 726.701209][T13728] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 726.703571][T13728] Buffer I/O error on dev nbd3, logical block 0, async page read [ 726.705724][T13728] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 726.708079][T13728] Buffer I/O error on dev nbd3, logical block 0, async page read [ 726.710126][T13728] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 726.712688][T13728] Buffer I/O error on dev nbd3, logical block 0, async page read [ 726.714840][T13728] ldm_validate_partition_table(): Disk read failed. [ 726.716681][T13728] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 726.718996][T13728] Buffer I/O error on dev nbd3, logical block 0, async page read [ 726.721200][T13728] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 726.723751][T13728] Buffer I/O error on dev nbd3, logical block 0, async page read [ 726.725948][T13728] Dev nbd3: unable to read RDB block 0 [ 726.727584][T13728] nbd3: unable to read partition table [ 726.729155][T13728] nbd3: partition table beyond EOD, truncated [ 726.733740][T17957] ldm_validate_partition_table(): Disk read failed. [ 726.736275][T17957] Dev nbd3: unable to read RDB block 0 [ 726.738458][T17957] nbd3: unable to read partition table [ 726.740473][T17957] nbd3: partition table beyond EOD, truncated [ 726.744478][T13728] ldm_validate_partition_table(): Disk read failed. [ 726.744685][T17957] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 726.747906][T13728] Dev nbd3: unable to read RDB block 0 [ 726.749471][T17957] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=9, location=9 [ 726.752333][T13728] nbd3: unable to read partition table [ 726.753897][T17957] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8, location=8 [ 726.755810][T13728] nbd3: partition table beyond EOD, [ 726.758264][T17957] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=7, location=7 [ 726.758398][T13728] truncated [ 726.759826][T17957] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 726.766680][T17957] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 726.769276][T17957] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=4, location=4 [ 726.770886][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 726.771879][T17957] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=3, location=3 [ 726.775909][T17957] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=2, location=2 [ 726.778326][T17957] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 726.781196][T17957] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 726.783727][T17957] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=1, location=1 [ 726.786172][T17957] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 726.788506][T17957] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 726.791079][T17957] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 727.063966][T17967] dummy0: entered promiscuous mode [ 727.109864][T17968] blktrace: Concurrent blktraces are not allowed on sg0 [ 727.184293][T17964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3359'. [ 727.269109][T17975] lo speed is unknown, defaulting to 1000 [ 727.306765][T17976] lo speed is unknown, defaulting to 1000 [ 727.320876][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 727.780529][ T39] audit: type=1326 audit(1734020578.626:13695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17988 comm="syz.2.3366" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x0 [ 727.800856][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 728.076511][T18000] bio_check_eod: 4 callbacks suppressed [ 728.076524][T18000] syz.3.3369: attempt to access beyond end of device [ 728.076524][T18000] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 728.081447][T18000] syz.3.3369: attempt to access beyond end of device [ 728.081447][T18000] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 728.084797][T18000] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 728.087273][T18000] syz.3.3369: attempt to access beyond end of device [ 728.087273][T18000] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 728.090612][T18000] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 728.093636][T18000] syz.3.3369: attempt to access beyond end of device [ 728.093636][T18000] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 728.097039][T18000] syz.3.3369: attempt to access beyond end of device [ 728.097039][T18000] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 728.100381][T18000] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 728.102956][T18000] syz.3.3369: attempt to access beyond end of device [ 728.102956][T18000] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 728.106524][T18000] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 728.109521][T18000] syz.3.3369: attempt to access beyond end of device [ 728.109521][T18000] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 728.113070][T18000] syz.3.3369: attempt to access beyond end of device [ 728.113070][T18000] nbd3: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 728.116540][T18000] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 728.119078][T18000] syz.3.3369: attempt to access beyond end of device [ 728.119078][T18000] nbd3: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 728.123428][T18000] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 728.127304][T18000] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 728.131076][T17999] nbd3: detected capacity change from 0 to 20 [ 728.133816][T13728] block nbd3: Send control failed (result -89) [ 728.135627][T13728] block nbd3: Request send failed, requeueing [ 728.137667][ T5951] block nbd3: Receive control failed (result -32) [ 728.139775][ T26] block nbd3: Dead connection, failed to find a fallback [ 728.141889][ T26] block nbd3: shutting down sockets [ 728.143835][T13728] ldm_validate_partition_table(): Disk read failed. [ 728.146003][T13728] Dev nbd3: unable to read RDB block 0 [ 728.147688][T13728] nbd3: unable to read partition table [ 728.149340][T13728] nbd3: partition table beyond EOD, truncated [ 728.152438][T13728] ldm_validate_partition_table(): Disk read failed. [ 728.154566][T13728] Dev nbd3: unable to read RDB block 0 [ 728.156399][T13728] nbd3: unable to read partition table [ 728.158039][T13728] nbd3: partition table beyond EOD, truncated [ 728.370826][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 728.371850][T18006] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3370'. [ 728.668261][ T39] audit: type=1326 audit(1734020579.516:13696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18007 comm="syz.0.3371" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 728.674062][ T39] audit: type=1326 audit(1734020579.526:13697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18007 comm="syz.0.3371" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 728.680238][ T39] audit: type=1326 audit(1734020579.526:13698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18007 comm="syz.0.3371" exe="/syz-executor" sig=0 arch=40000003 syscall=177 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 728.686273][ T39] audit: type=1326 audit(1734020579.526:13699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18007 comm="syz.0.3371" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 728.692040][ T39] audit: type=1326 audit(1734020579.526:13700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18007 comm="syz.0.3371" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 728.697645][ T39] audit: type=1326 audit(1734020579.526:13701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18007 comm="syz.0.3371" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 728.703478][ T39] audit: type=1326 audit(1734020579.526:13702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18007 comm="syz.0.3371" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 728.709343][ T39] audit: type=1326 audit(1734020579.526:13703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18007 comm="syz.0.3371" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 728.715424][ T39] audit: type=1326 audit(1734020579.526:13704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18007 comm="syz.0.3371" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 728.721148][ T39] audit: type=1326 audit(1734020579.526:13705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18007 comm="syz.0.3371" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 728.927427][T18015] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3372'. [ 729.209152][T18020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 729.211271][T18020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.222945][T18020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 729.224927][T18020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.400862][ C3] net_ratelimit: 1 callbacks suppressed [ 729.400909][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 729.641611][T18027] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3375'. [ 729.672922][T18032] blktrace: Concurrent blktraces are not allowed on sg0 [ 729.880843][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 730.101840][T18045] syz.1.3378: attempt to access beyond end of device [ 730.101840][T18045] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 730.105474][T18045] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 730.108989][T18045] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 730.119128][T18045] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 730.122131][T18042] nbd1: detected capacity change from 0 to 20 [ 730.124524][T18045] block nbd1: Send control failed (result -89) [ 730.126205][T18045] block nbd1: Request send failed, requeueing [ 730.130168][ T5951] block nbd1: Receive control failed (result -32) [ 730.130360][ T26] block nbd1: Dead connection, failed to find a fallback [ 730.138751][ T26] block nbd1: shutting down sockets [ 730.140712][T18045] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 730.141660][T13728] ldm_validate_partition_table(): Disk read failed. [ 730.143210][T18045] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1, location=1 [ 730.145794][T13728] Dev nbd1: unable to read RDB block 0 [ 730.147667][T18045] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 730.149847][T13728] nbd1: unable to read partition table [ 730.154817][T13728] nbd1: partition table beyond EOD, truncated [ 730.157742][T18045] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 730.158119][T13728] ldm_validate_partition_table(): Disk read failed. [ 730.160255][T18045] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1, location=1 [ 730.162431][T13728] Dev nbd1: unable to read RDB block 0 [ 730.164936][T18045] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 730.165950][T13728] nbd1: unable to read partition table [ 730.168072][T18045] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 730.168088][T18045] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 730.169684][T13728] nbd1: partition table beyond EOD, truncated [ 730.440906][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 730.609393][T18062] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3382'. [ 730.920835][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 731.350150][T18077] blktrace: Concurrent blktraces are not allowed on sg0 [ 731.351933][T18078] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 731.354591][T18078] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 731.357350][T18078] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 731.359972][T18078] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 731.363078][T18078] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 731.365665][T18078] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 731.368090][T18078] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 731.463454][T18081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3388'. [ 731.480885][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 731.748447][T18093] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.3391'. [ 731.751494][T18093] openvswitch: netlink: Flow actions attr not present in new flow. [ 731.761294][T18094] blktrace: Concurrent blktraces are not allowed on sg0 [ 731.961028][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 732.520897][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 732.788591][T18113] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3395'. [ 733.010831][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 733.357007][T18125] bio_check_eod: 13 callbacks suppressed [ 733.357018][T18125] syz.1.3398: attempt to access beyond end of device [ 733.357018][T18125] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 733.362383][T18125] syz.1.3398: attempt to access beyond end of device [ 733.362383][T18125] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 733.365867][T18125] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 733.368405][T18125] syz.1.3398: attempt to access beyond end of device [ 733.368405][T18125] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 733.372061][T18125] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 733.375287][T18125] syz.1.3398: attempt to access beyond end of device [ 733.375287][T18125] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 733.378912][T18125] syz.1.3398: attempt to access beyond end of device [ 733.378912][T18125] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 733.382671][T18125] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 733.385397][T18125] syz.1.3398: attempt to access beyond end of device [ 733.385397][T18125] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 733.389165][T18125] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 733.392070][T18125] syz.1.3398: attempt to access beyond end of device [ 733.392070][T18125] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 733.395736][T18125] syz.1.3398: attempt to access beyond end of device [ 733.395736][T18125] nbd1: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 733.399287][T18125] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 733.402003][T18125] syz.1.3398: attempt to access beyond end of device [ 733.402003][T18125] nbd1: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 733.405604][T18125] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 733.408375][T18125] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 733.560937][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 733.732291][ T39] kauditd_printk_skb: 65 callbacks suppressed [ 733.732387][ T39] audit: type=1326 audit(1734020584.586:13771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18134 comm="syz.0.3402" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x0 [ 734.157269][T18146] blktrace: Concurrent blktraces are not allowed on sg0 [ 734.600891][ C3] net_ratelimit: 1 callbacks suppressed [ 734.600905][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 734.720890][T16598] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 734.754656][T18162] syz.2.3409: attempt to access beyond end of device [ 734.754656][T18162] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 734.758107][T18162] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 734.760653][T18162] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 734.761111][T18163] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3407'. [ 734.768358][T18162] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 734.771047][T18162] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 734.773886][T18162] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 734.776509][T18162] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 734.778986][T18162] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 735.056930][T18168] xt_TCPMSS: Only works on TCP SYN packets [ 735.080891][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 735.098690][T16598] usb 8-1: Using ep0 maxpacket: 8 [ 735.105266][T16598] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 735.107559][T16598] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 735.110190][T16598] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 735.112780][T16598] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 735.115186][T16598] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 735.118462][T16598] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 735.120822][T16598] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.332478][T16598] usb 8-1: GET_CAPABILITIES returned 0 [ 735.334010][T16598] usbtmc 8-1:16.0: can't read capabilities [ 735.556701][ T5977] usb 8-1: USB disconnect, device number 38 [ 735.640985][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 736.120878][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 736.157762][ T39] audit: type=1326 audit(1734020587.006:13772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18184 comm="syz.3.3416" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f70579 code=0x0 [ 736.680888][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 736.740193][T18198] blktrace: Concurrent blktraces are not allowed on sg0 [ 736.916449][T18199] xt_TCPMSS: Only works on TCP SYN packets [ 737.023251][T18202] blktrace: Concurrent blktraces are not allowed on sg0 [ 737.160851][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 737.251251][T18210] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3422'. [ 737.291139][T18211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3423'. [ 737.575429][T18215] xt_TCPMSS: Only works on TCP SYN packets [ 737.730858][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 738.145687][T18225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3426'. [ 738.148801][T18225] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3426'. [ 738.200927][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 738.439815][T18228] netlink: 'syz.2.3427': attribute type 8 has an invalid length. [ 738.491584][ T39] audit: type=1326 audit(1734020589.346:13773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18229 comm="syz.2.3428" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 738.498210][ T39] audit: type=1326 audit(1734020589.346:13774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18229 comm="syz.2.3428" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 738.504084][ T39] audit: type=1326 audit(1734020589.356:13775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18229 comm="syz.2.3428" exe="/syz-executor" sig=0 arch=40000003 syscall=177 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 738.509855][ T39] audit: type=1326 audit(1734020589.356:13776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18229 comm="syz.2.3428" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 738.517135][ T39] audit: type=1326 audit(1734020589.356:13777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18229 comm="syz.2.3428" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 738.524850][ T39] audit: type=1326 audit(1734020589.356:13778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18229 comm="syz.2.3428" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 738.531422][ T39] audit: type=1326 audit(1734020589.356:13779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18229 comm="syz.2.3428" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 738.537223][ T39] audit: type=1326 audit(1734020589.356:13780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18229 comm="syz.2.3428" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 738.760872][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 738.906809][T18243] xt_TCPMSS: Only works on TCP SYN packets [ 738.944063][T18244] kvm: apic: phys broadcast and lowest prio [ 738.991421][ T5977] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 739.075789][T18252] blktrace: Concurrent blktraces are not allowed on sg0 [ 739.194939][T18259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3434'. [ 739.197401][T18259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3434'. [ 739.199703][T18259] netlink: 'syz.1.3434': attribute type 14 has an invalid length. [ 739.204444][T18259] netlink: 'syz.1.3434': attribute type 13 has an invalid length. [ 739.250988][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 739.472299][T18269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3435'. [ 739.800945][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 739.807339][ T56] kernel write not supported for file /media2 (pid: 56 comm: kworker/1:1) [ 740.280912][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 740.840955][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 741.320867][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 741.880911][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 742.360940][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 742.920894][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 743.400893][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 743.960881][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 744.440930][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 745.000935][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 745.480895][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 746.040897][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 746.520947][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 747.080871][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 747.560892][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 748.121028][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 748.600997][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 749.161057][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 749.364989][ T39] kauditd_printk_skb: 48 callbacks suppressed [ 749.365006][ T39] audit: type=1326 audit(1734020600.216:13829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18308 comm="syz.0.3445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 749.376486][ T39] audit: type=1326 audit(1734020600.226:13830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18308 comm="syz.0.3445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 749.384503][ T39] audit: type=1326 audit(1734020600.226:13831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18308 comm="syz.0.3445" exe="/syz-executor" sig=0 arch=40000003 syscall=177 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 749.390161][ T39] audit: type=1326 audit(1734020600.226:13832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18308 comm="syz.0.3445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 749.397405][ T39] audit: type=1326 audit(1734020600.226:13833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18308 comm="syz.0.3445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 749.403501][ T39] audit: type=1326 audit(1734020600.226:13834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18308 comm="syz.0.3445" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 749.409558][ T39] audit: type=1326 audit(1734020600.226:13835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18308 comm="syz.0.3445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 749.415504][ T39] audit: type=1326 audit(1734020600.226:13836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18308 comm="syz.0.3445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 749.421386][ T39] audit: type=1326 audit(1734020600.226:13837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18308 comm="syz.0.3445" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 749.433275][ T39] audit: type=1326 audit(1734020600.226:13838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18308 comm="syz.0.3445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 749.560980][T18312] nbd2: detected capacity change from 0 to 20 [ 749.565842][T18311] block nbd2: Send control failed (result -89) [ 749.569166][T18311] block nbd2: Request send failed, requeueing [ 749.571639][ T5951] block nbd2: Receive control failed (result -32) [ 749.571681][ T1275] block nbd2: Dead connection, failed to find a fallback [ 749.576199][ T1275] block nbd2: shutting down sockets [ 749.577936][ T1275] blk_print_req_error: 164 callbacks suppressed [ 749.577948][ T1275] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 749.582206][ T1275] buffer_io_error: 151 callbacks suppressed [ 749.582215][ T1275] Buffer I/O error on dev nbd2, logical block 0, async page read [ 749.586091][T18311] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 749.588743][T18311] Buffer I/O error on dev nbd2, logical block 0, async page read [ 749.591287][T18311] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 749.594372][T18311] Buffer I/O error on dev nbd2, logical block 0, async page read [ 749.596824][T18311] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 749.599122][T18311] Buffer I/O error on dev nbd2, logical block 0, async page read [ 749.601279][T18311] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 749.603759][T18311] Buffer I/O error on dev nbd2, logical block 0, async page read [ 749.606185][T18311] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 749.608491][T18311] Buffer I/O error on dev nbd2, logical block 0, async page read [ 749.610496][T18311] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 749.612955][T18311] Buffer I/O error on dev nbd2, logical block 0, async page read [ 749.615304][T18311] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 749.617623][T18311] Buffer I/O error on dev nbd2, logical block 0, async page read [ 749.619679][T18311] ldm_validate_partition_table(): Disk read failed. [ 749.621767][T18311] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 749.628461][T18311] Buffer I/O error on dev nbd2, logical block 0, async page read [ 749.631201][T18311] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 749.633965][T18311] Buffer I/O error on dev nbd2, logical block 0, async page read [ 749.636851][T18311] Dev nbd2: unable to read RDB block 0 [ 749.639087][T18311] nbd2: unable to read partition table [ 749.641147][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 749.645131][T18311] nbd2: partition table beyond EOD, truncated [ 749.881748][T18311] ldm_validate_partition_table(): Disk read failed. [ 749.884492][T18311] Dev nbd2: unable to read RDB block 0 [ 749.886674][T18311] nbd2: unable to read partition table [ 749.888833][T18311] nbd2: partition table beyond EOD, truncated [ 750.048870][T18320] blktrace: Concurrent blktraces are not allowed on sg0 [ 750.210839][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 750.376109][T18325] block device autoloading is deprecated and will be removed. [ 750.544683][T18328] nbd1: detected capacity change from 0 to 20 [ 750.547203][T18311] block nbd1: Send control failed (result -89) [ 750.548917][T18311] block nbd1: Request send failed, requeueing [ 750.550513][ T26] block nbd1: Dead connection, failed to find a fallback [ 750.550575][ T5951] block nbd1: Receive control failed (result -32) [ 750.554262][ T26] block nbd1: shutting down sockets [ 750.556993][T18311] ldm_validate_partition_table(): Disk read failed. [ 750.559275][T18311] Dev nbd1: unable to read RDB block 0 [ 750.562750][T18311] nbd1: unable to read partition table [ 750.564491][T18311] nbd1: partition table beyond EOD, truncated [ 750.568009][T18311] ldm_validate_partition_table(): Disk read failed. [ 750.569906][T18311] Dev nbd1: unable to read RDB block 0 [ 750.572204][T18311] nbd1: unable to read partition table [ 750.574139][T18311] nbd1: partition table beyond EOD, truncated [ 750.620103][T18336] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3452'. [ 750.657796][T18338] blktrace: Concurrent blktraces are not allowed on sg0 [ 750.680887][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 750.760113][T18342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3450'. [ 751.240904][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 751.511009][T11524] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 751.680980][T11524] usb 5-1: Using ep0 maxpacket: 8 [ 751.683750][T11524] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 751.686069][T11524] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 751.688658][T11524] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 751.691847][T11524] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 751.694730][T11524] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 751.699750][T11524] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 751.703149][T11524] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.716276][T18361] xt_TCPMSS: Only works on TCP SYN packets [ 751.720974][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 751.806416][T18364] blktrace: Concurrent blktraces are not allowed on sg0 [ 751.933218][T11524] usb 5-1: GET_CAPABILITIES returned 0 [ 751.935486][T11524] usbtmc 5-1:16.0: can't read capabilities [ 752.134381][T18347] misc userio: The device must be registered before sending interrupts [ 752.138824][ T1327] usb 5-1: USB disconnect, device number 30 [ 752.280907][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 752.468616][T18371] vivid-007: disconnect [ 752.760902][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 753.107602][T18371] vivid-007: reconnect [ 753.187970][T18392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3464'. [ 753.320840][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 753.702672][T18403] blktrace: Concurrent blktraces are not allowed on sg0 [ 753.800894][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 754.106816][T18415] Invalid logical block size (5120) [ 754.220424][T18418] xt_TCPMSS: Only works on TCP SYN packets [ 754.360902][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 754.422005][T18425] lo speed is unknown, defaulting to 1000 [ 754.439947][T18428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3473'. [ 754.653934][T18435] bio_check_eod: 8 callbacks suppressed [ 754.653945][T18435] syz.2.3475: attempt to access beyond end of device [ 754.653945][T18435] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 754.660197][T18435] syz.2.3475: attempt to access beyond end of device [ 754.660197][T18435] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 754.664321][T18435] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 754.667002][T18435] syz.2.3475: attempt to access beyond end of device [ 754.667002][T18435] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 754.670629][T18435] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 754.673864][T18435] syz.2.3475: attempt to access beyond end of device [ 754.673864][T18435] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 754.677549][T18435] syz.2.3475: attempt to access beyond end of device [ 754.677549][T18435] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 754.681636][T18435] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 754.684650][T18435] syz.2.3475: attempt to access beyond end of device [ 754.684650][T18435] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 754.688756][T18435] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 754.692014][T18435] syz.2.3475: attempt to access beyond end of device [ 754.692014][T18435] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 754.695784][T18435] syz.2.3475: attempt to access beyond end of device [ 754.695784][T18435] nbd2: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 754.699522][T18435] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 754.702675][T18432] nbd2: detected capacity change from 0 to 20 [ 754.707816][T18435] block nbd2: Send control failed (result -89) [ 754.709976][T18435] block nbd2: Request send failed, requeueing [ 754.712277][ T5951] block nbd2: Receive control failed (result -32) [ 754.714078][ T26] block nbd2: Dead connection, failed to find a fallback [ 754.716079][ T26] block nbd2: shutting down sockets [ 754.718886][ T26] blk_print_req_error: 60 callbacks suppressed [ 754.718899][ T26] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 754.725294][ T26] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 754.728107][ T26] buffer_io_error: 60 callbacks suppressed [ 754.728115][ T26] Buffer I/O error on dev nbd2, logical block 0, async page read [ 754.733946][T18435] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=0, location=0 [ 754.736703][T18435] I/O error, dev nbd2, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 754.737193][T18311] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 754.739153][T18435] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=1, location=1 [ 754.739218][T18435] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 754.743828][T18311] Buffer I/O error on dev nbd2, logical block 0, async page read [ 754.744282][T18435] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 754.749715][T18311] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 754.772034][T18311] Buffer I/O error on dev nbd2, logical block 0, async page read [ 754.798108][T18311] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 754.800700][T18311] Buffer I/O error on dev nbd2, logical block 0, async page read [ 754.806430][T18311] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 754.809100][T18311] Buffer I/O error on dev nbd2, logical block 0, async page read [ 754.811752][T18311] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 754.814500][T18311] Buffer I/O error on dev nbd2, logical block 0, async page read [ 754.816647][T18311] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 754.819003][T18311] Buffer I/O error on dev nbd2, logical block 0, async page read [ 754.821450][T18311] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 754.823963][T18311] Buffer I/O error on dev nbd2, logical block 0, async page read [ 754.826166][T18311] ldm_validate_partition_table(): Disk read failed. [ 754.828014][T18311] Buffer I/O error on dev nbd2, logical block 0, async page read [ 754.829991][T18311] Buffer I/O error on dev nbd2, logical block 0, async page read [ 754.832409][T18311] Dev nbd2: unable to read RDB block 0 [ 754.834297][T18311] nbd2: unable to read partition table [ 754.835763][T18311] nbd2: partition table beyond EOD, truncated [ 754.840946][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 754.845880][T18311] ldm_validate_partition_table(): Disk read failed. [ 754.848093][T18311] Dev nbd2: unable to read RDB block 0 [ 754.849690][T18311] nbd2: unable to read partition table [ 754.851767][T18311] nbd2: partition table beyond EOD, truncated [ 754.906635][T18437] blktrace: Concurrent blktraces are not allowed on sg0 [ 755.099244][T18440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3476'. [ 755.350586][T18451] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3479'. [ 755.400898][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 755.572041][T18463] syz.3.3484: attempt to access beyond end of device [ 755.572041][T18463] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 755.580162][T18463] syz.3.3484: attempt to access beyond end of device [ 755.580162][T18463] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 755.583872][T18463] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 755.587252][T18463] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 755.598641][T18463] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 755.601292][T18463] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 755.604094][T18463] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 755.606596][T18463] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 755.609065][T18463] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 755.615405][T18462] block nbd3: shutting down sockets [ 755.707704][T18467] blktrace: Concurrent blktraces are not allowed on sg0 [ 755.708044][T18468] xt_TCPMSS: Only works on TCP SYN packets [ 755.880940][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 756.072871][T18474] vivid-000: ================= START STATUS ================= [ 756.075417][T18474] vivid-000: Test Pattern: 100% Colorbar [ 756.077356][T18474] vivid-000: Fill Percentage of Frame: 100 [ 756.079126][T18474] vivid-000: Horizontal Movement: No Movement [ 756.080909][T18474] vivid-000: Vertical Movement: No Movement [ 756.082586][T18474] vivid-000: OSD Text Mode: All [ 756.083952][T18474] vivid-000: Show Border: false [ 756.085314][T18474] vivid-000: Show Square: false [ 756.086725][T18474] vivid-000: Sensor Flipped Horizontally: false [ 756.088406][T18474] vivid-000: Sensor Flipped Vertically: false [ 756.090026][T18474] vivid-000: Insert SAV Code in Image: false [ 756.091727][T18474] vivid-000: Insert EAV Code in Image: false [ 756.093313][T18474] vivid-000: Insert Video Guard Band: false [ 756.094969][T18474] vivid-000: Reduced Framerate: false [ 756.096476][T18474] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 756.098479][T18474] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 756.100628][T18474] vivid-000: Enable Capture Cropping: true [ 756.102317][T18474] vivid-000: Enable Capture Composing: true [ 756.104057][T18474] vivid-000: Enable Capture Scaler: true [ 756.105743][T18474] vivid-000: Timestamp Source: End of Frame [ 756.107615][T18474] vivid-000: Colorspace: Rec. 709 [ 756.109054][T18474] vivid-000: Transfer Function: Rec. 709 [ 756.110572][T18474] vivid-000: Y'CbCr Encoding: Default [ 756.112113][T18474] vivid-000: HSV Encoding: Hue 0-179 [ 756.113814][T18474] vivid-000: Quantization: Default [ 756.115527][T18474] vivid-000: Apply Alpha To Red Only: false [ 756.117537][T18474] vivid-000: Standard Aspect Ratio: 4x3 [ 756.119269][T18474] vivid-000: DV Timings Signal Mode: Current DV Timings [ 756.121213][T18474] vivid-000: DV Timings: 640x480p59 inactive [ 756.123287][T18474] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 756.125843][T18474] vivid-000: Maximum EDID Blocks: 2 [ 756.127460][T18474] vivid-000: Limited RGB Range (16-235): true [ 756.129208][T18474] vivid-000: Rx RGB Quantization Range: Automatic [ 756.131209][T18474] vivid-000: Power Present: 0x00000001 [ 756.132841][T18474] tpg source WxH: 1280x720 (R'G'B) [ 756.134235][T18474] tpg field: 1 [ 756.135137][T18474] tpg crop: 1280x720@0x0 [ 756.136349][T18474] tpg compose: 1280x720@0x0 [ 756.137594][T18474] tpg colorspace: 3 [ 756.138666][T18474] tpg transfer function: 1/1 [ 756.140112][T18474] tpg quantization: 0/1 [ 756.141316][T18474] tpg RGB range: 0/1 [ 756.142593][T18474] vivid-000: ================== END STATUS ================== [ 756.294093][T18474] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 756.416376][T18474] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 756.440828][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 756.631060][T18478] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3488'. [ 756.920998][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 757.140842][T18487] FAULT_INJECTION: forcing a failure. [ 757.140842][T18487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 757.144096][T18487] CPU: 0 UID: 0 PID: 18487 Comm: syz.3.3491 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 757.146692][T18487] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 757.149488][T18487] Call Trace: [ 757.150331][T18487] [ 757.151096][T18487] dump_stack_lvl+0x16c/0x1f0 [ 757.152313][T18487] should_fail_ex+0x497/0x5b0 [ 757.153589][T18487] _copy_to_user+0x32/0xd0 [ 757.154779][T18487] simple_read_from_buffer+0xd0/0x160 [ 757.156133][T18487] proc_fail_nth_read+0x198/0x270 [ 757.157508][T18487] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 757.158967][T18487] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 757.160513][T18487] vfs_read+0x1df/0xbe0 [ 757.161591][T18487] ? __fget_files+0x1fc/0x3a0 [ 757.162851][T18487] ? __pfx___mutex_lock+0x10/0x10 [ 757.164161][T18487] ? __pfx_vfs_read+0x10/0x10 [ 757.165329][T18487] ? __fget_files+0x206/0x3a0 [ 757.166531][T18487] ksys_read+0x12b/0x250 [ 757.167818][T18487] ? __pfx_ksys_read+0x10/0x10 [ 757.169184][T18487] __do_fast_syscall_32+0x73/0x120 [ 757.170499][T18487] do_fast_syscall_32+0x32/0x80 [ 757.171765][T18487] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 757.173381][T18487] RIP: 0023:0xf7f70579 [ 757.174448][T18487] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 757.179267][T18487] RSP: 002b:00000000f50c6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 757.181373][T18487] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50c6620 [ 757.183439][T18487] RDX: 000000000000000f RSI: 00000000f7403ff4 RDI: 0000000000000000 [ 757.185488][T18487] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 757.187509][T18487] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 757.189465][T18487] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 757.191432][T18487] [ 757.200575][T18494] blktrace: Concurrent blktraces are not allowed on sg0 [ 757.303090][T18499] sg_write: data in/out 11/10 bytes for SCSI command 0xfd-- guessing data in; [ 757.303090][T18499] program syz.2.3490 not setting count and/or reply_len properly [ 757.332579][T18499] lo speed is unknown, defaulting to 1000 [ 757.432103][T18500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3495'. [ 757.480829][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 757.480967][T13321] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 757.641091][T13321] usb 5-1: Using ep0 maxpacket: 8 [ 757.644023][T13321] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 757.646099][T13321] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 757.648436][T13321] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 757.650968][T13321] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 757.653491][T13321] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 757.656777][T13321] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 757.658970][T13321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.867353][T13321] usb 5-1: GET_CAPABILITIES returned 0 [ 757.868849][T13321] usbtmc 5-1:16.0: can't read capabilities [ 757.960865][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 758.163647][T18498] misc userio: The device must be registered before sending interrupts [ 758.199954][ T5996] usb 5-1: USB disconnect, device number 31 [ 758.520892][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 759.000847][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 759.433873][T18534] xt_TCPMSS: Only works on TCP SYN packets [ 759.496151][T18538] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 759.498828][T18538] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 759.501844][T18538] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 759.504394][T18538] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 759.507117][T18538] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 759.509704][T18538] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 759.512851][T18538] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 759.517315][T18535] block nbd3: shutting down sockets [ 759.560870][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 759.990506][T18547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3507'. [ 760.040939][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 760.132007][T18550] blktrace: Concurrent blktraces are not allowed on sg0 [ 760.610840][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 761.090904][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 761.336757][T18566] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 761.560834][T18568] nbd3: detected capacity change from 0 to 20 [ 761.564632][T18311] block nbd3: Send control failed (result -89) [ 761.567025][T18311] block nbd3: Request send failed, requeueing [ 761.568892][ T5951] block nbd3: Receive control failed (result -32) [ 761.570702][ T26] block nbd3: Dead connection, failed to find a fallback [ 761.572883][ T26] block nbd3: shutting down sockets [ 761.574672][ T26] blk_print_req_error: 27 callbacks suppressed [ 761.574681][ T26] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 761.578591][ T26] buffer_io_error: 25 callbacks suppressed [ 761.578598][ T26] Buffer I/O error on dev nbd3, logical block 0, async page read [ 761.583025][T18311] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 761.585191][T18311] Buffer I/O error on dev nbd3, logical block 0, async page read [ 761.587246][T18311] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 761.589315][T18311] Buffer I/O error on dev nbd3, logical block 0, async page read [ 761.592367][T18311] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 761.594550][T18311] Buffer I/O error on dev nbd3, logical block 0, async page read [ 761.596407][T18311] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 761.598559][T18311] Buffer I/O error on dev nbd3, logical block 0, async page read [ 761.600403][T18311] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 761.604995][T18311] Buffer I/O error on dev nbd3, logical block 0, async page read [ 761.607053][T18311] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 761.609385][T18311] Buffer I/O error on dev nbd3, logical block 0, async page read [ 761.611742][T18311] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 761.613888][T18311] Buffer I/O error on dev nbd3, logical block 0, async page read [ 761.615860][T18311] ldm_validate_partition_table(): Disk read failed. [ 761.617430][T18311] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 761.619587][T18311] Buffer I/O error on dev nbd3, logical block 0, async page read [ 761.623385][T18311] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 761.625579][T18311] Buffer I/O error on dev nbd3, logical block 0, async page read [ 761.628180][T18311] Dev nbd3: unable to read RDB block 0 [ 761.629888][T18311] nbd3: unable to read partition table [ 761.631876][T18311] nbd3: partition table beyond EOD, truncated [ 761.635411][T18311] ldm_validate_partition_table(): Disk read failed. [ 761.637155][T18311] Dev nbd3: unable to read RDB block 0 [ 761.638722][T18311] nbd3: unable to read partition table [ 761.640267][T18311] nbd3: partition table beyond EOD, truncated [ 761.641945][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 761.745336][T18578] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3515'. [ 761.751725][T18579] xt_TCPMSS: Only works on TCP SYN packets [ 762.120880][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 762.497338][ T39] kauditd_printk_skb: 116 callbacks suppressed [ 762.497351][ T39] audit: type=1326 audit(1734020613.346:13955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18585 comm="syz.0.3519" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x0 [ 762.659195][T18591] blktrace: Concurrent blktraces are not allowed on sg0 [ 762.680840][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 763.160930][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 763.720867][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 763.771031][T18609] nbd3: detected capacity change from 0 to 20 [ 763.774248][T18311] block nbd3: Send control failed (result -89) [ 763.776136][T18311] block nbd3: Request send failed, requeueing [ 763.777985][ T5951] block nbd3: Receive control failed (result -32) [ 763.779872][ T1275] block nbd3: Dead connection, failed to find a fallback [ 763.782118][ T1275] block nbd3: shutting down sockets [ 763.786367][T18311] ldm_validate_partition_table(): Disk read failed. [ 763.788385][T18311] Dev nbd3: unable to read RDB block 0 [ 763.789977][T18311] nbd3: unable to read partition table [ 763.791665][T18311] nbd3: partition table beyond EOD, truncated [ 764.093685][T18614] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 764.210824][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 764.440447][T18311] ldm_validate_partition_table(): Disk read failed. [ 764.442803][T18311] Dev nbd3: unable to read RDB block 0 [ 764.444440][T18311] nbd3: unable to read partition table [ 764.445951][T18311] nbd3: partition table beyond EOD, truncated [ 764.550640][T18622] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3527'. [ 764.760903][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 764.907322][T18625] xt_TCPMSS: Only works on TCP SYN packets [ 765.249875][ T39] audit: type=1326 audit(1734020616.096:13956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18629 comm="syz.1.3530" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x0 [ 765.810831][ C3] net_ratelimit: 1 callbacks suppressed [ 765.810844][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 766.080940][ T1931] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 766.230835][ T1931] usb 5-1: Using ep0 maxpacket: 8 [ 766.233609][ T1931] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 766.235753][ T1931] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 766.238121][ T1931] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 766.240535][ T1931] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 766.243730][ T1931] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 766.247135][ T1931] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 766.249496][ T1931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.280869][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 766.460138][ T1931] usb 5-1: GET_CAPABILITIES returned 0 [ 766.460670][T18639] syz.1.3534(18639): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 766.462083][ T1931] usbtmc 5-1:16.0: can't read capabilities [ 766.662994][T18633] misc userio: The device must be registered before sending interrupts [ 766.667653][ T1931] usb 5-1: USB disconnect, device number 32 [ 766.840856][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 767.320915][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 767.540225][ T39] audit: type=1326 audit(1734020618.386:13957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18662 comm="syz.1.3541" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x0 [ 767.880923][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 768.370935][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 768.379590][T18678] xt_TCPMSS: Only works on TCP SYN packets [ 768.580852][T11524] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 768.737253][T11524] usb 8-1: Using ep0 maxpacket: 8 [ 768.740672][T11524] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 768.742937][T11524] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 768.745417][T11524] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 768.748089][T11524] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 768.758464][T11524] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 768.761992][T11524] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 768.764301][T11524] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.930954][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 768.976203][T11524] usb 8-1: GET_CAPABILITIES returned 0 [ 768.977776][T11524] usbtmc 8-1:16.0: can't read capabilities [ 769.179916][T18677] misc userio: The device must be registered before sending interrupts [ 769.189510][T11524] usb 8-1: USB disconnect, device number 39 [ 769.410823][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 769.807289][ T39] audit: type=1326 audit(1734021133.651:13958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18705 comm="syz.1.3554" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x0 [ 769.970994][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 770.395023][T18712] blktrace: Concurrent blktraces are not allowed on sg0 [ 770.440907][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 771.000902][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 771.480845][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 771.482172][T18727] xt_TCPMSS: Only works on TCP SYN packets [ 771.752513][T18731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3560'. [ 772.040845][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 772.520830][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 772.541542][ T1327] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 772.565349][ T39] audit: type=1326 audit(1734021136.411:13959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18741 comm="syz.1.3565" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x0 [ 772.690916][ T1327] usb 8-1: Using ep0 maxpacket: 8 [ 772.693548][ T1327] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 772.695705][ T1327] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 772.698210][ T1327] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 772.700721][ T1327] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 772.703545][ T1327] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 772.706913][ T1327] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 772.709249][ T1327] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.920332][ T1327] usb 8-1: GET_CAPABILITIES returned 0 [ 772.922205][ T1327] usbtmc 8-1:16.0: can't read capabilities [ 773.090944][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 773.122673][T18734] misc userio: The device must be registered before sending interrupts [ 773.129898][ T63] usb 8-1: USB disconnect, device number 40 [ 773.150466][T18748] blktrace: Concurrent blktraces are not allowed on sg0 [ 773.560895][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 774.120889][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 774.140625][ T39] audit: type=1326 audit(1734021137.981:13960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18757 comm="syz.0.3569" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 774.146598][ T39] audit: type=1326 audit(1734021137.981:13961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18757 comm="syz.0.3569" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 774.163377][ T39] audit: type=1326 audit(1734021137.981:13962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18757 comm="syz.0.3569" exe="/syz-executor" sig=0 arch=40000003 syscall=177 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 774.169453][ T39] audit: type=1326 audit(1734021137.981:13963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18757 comm="syz.0.3569" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 774.175829][ T39] audit: type=1326 audit(1734021137.981:13964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18757 comm="syz.0.3569" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 774.183010][ T39] audit: type=1326 audit(1734021137.981:13965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18757 comm="syz.0.3569" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 774.188522][ T39] audit: type=1326 audit(1734021137.981:13966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18757 comm="syz.0.3569" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 774.195056][ T39] audit: type=1326 audit(1734021137.981:13967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18757 comm="syz.0.3569" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 774.200559][ T39] audit: type=1326 audit(1734021137.981:13968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18757 comm="syz.0.3569" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 774.600867][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 774.624468][T18764] nbd1: detected capacity change from 0 to 20 [ 774.627289][T18311] block nbd1: Send control failed (result -89) [ 774.629140][T18311] block nbd1: Request send failed, requeueing [ 774.632854][ T5951] block nbd1: Receive control failed (result -32) [ 774.633551][ T51] block nbd1: Dead connection, failed to find a fallback [ 774.637667][ T51] block nbd1: shutting down sockets [ 774.639099][ T51] blk_print_req_error: 60 callbacks suppressed [ 774.639107][ T51] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 774.644546][ T51] buffer_io_error: 60 callbacks suppressed [ 774.644557][ T51] Buffer I/O error on dev nbd1, logical block 0, async page read [ 774.648251][T18311] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 774.650674][T18311] Buffer I/O error on dev nbd1, logical block 0, async page read [ 774.652916][T18311] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 774.655509][T18311] Buffer I/O error on dev nbd1, logical block 0, async page read [ 774.657753][T18311] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 774.659991][T18311] Buffer I/O error on dev nbd1, logical block 0, async page read [ 774.662198][T18311] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 774.664792][T18311] Buffer I/O error on dev nbd1, logical block 0, async page read [ 774.666997][T18311] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 774.669418][T18311] Buffer I/O error on dev nbd1, logical block 0, async page read [ 774.672376][T18311] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 774.674766][T18311] Buffer I/O error on dev nbd1, logical block 0, async page read [ 774.676896][T18311] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 774.679264][T18311] Buffer I/O error on dev nbd1, logical block 0, async page read [ 774.681561][T18311] ldm_validate_partition_table(): Disk read failed. [ 774.683558][T18311] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 774.685959][T18311] Buffer I/O error on dev nbd1, logical block 0, async page read [ 774.688157][T18311] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 774.690511][T18311] Buffer I/O error on dev nbd1, logical block 0, async page read [ 774.692778][T18311] Dev nbd1: unable to read RDB block 0 [ 774.694342][T18311] nbd1: unable to read partition table [ 774.695875][T18311] nbd1: partition table beyond EOD, truncated [ 774.698857][T18311] ldm_validate_partition_table(): Disk read failed. [ 774.700727][T18311] Dev nbd1: unable to read RDB block 0 [ 774.702396][T18311] nbd1: unable to read partition table [ 774.703944][T18311] nbd1: partition table beyond EOD, truncated [ 774.729492][T18769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3572'. [ 774.816117][T18775] xt_TCPMSS: Only works on TCP SYN packets [ 775.160842][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 775.640828][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 776.200918][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 776.317890][T18801] blktrace: Concurrent blktraces are not allowed on sg0 [ 776.420860][T13321] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 776.550860][T13321] usb 5-1: device descriptor read/64, error -71 [ 776.680926][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 776.790918][T13321] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 776.910560][T18809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3584'. [ 777.151019][T13321] usb 5-1: device descriptor read/64, error -71 [ 777.250902][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 777.271068][T13321] usb usb5-port1: attempt power cycle [ 777.631085][T13321] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 777.650385][T18815] FAULT_INJECTION: forcing a failure. [ 777.650385][T18815] name failslab, interval 1, probability 0, space 0, times 0 [ 777.651496][T13321] usb 5-1: device descriptor read/8, error -71 [ 777.653913][T18815] CPU: 0 UID: 0 PID: 18815 Comm: syz.2.3586 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 777.658131][T18815] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 777.660922][T18815] Call Trace: [ 777.661824][T18815] [ 777.662610][T18815] dump_stack_lvl+0x16c/0x1f0 [ 777.663926][T18815] should_fail_ex+0x497/0x5b0 [ 777.665174][T18815] ? fs_reclaim_acquire+0xae/0x150 [ 777.666529][T18815] should_failslab+0xc2/0x120 [ 777.667793][T18815] __kmalloc_node_noprof+0xd1/0x520 [ 777.669167][T18815] ? find_held_lock+0x2d/0x110 [ 777.670435][T18815] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 777.671876][T18815] __kvmalloc_node_noprof+0xad/0x1a0 [ 777.673278][T18815] alloc_netdev_mqs+0xc9/0x1320 [ 777.674802][T18815] ? __pfx_ax_setup+0x10/0x10 [ 777.676069][T18815] ? security_capable+0x7e/0x260 [ 777.677385][T18815] mkiss_open+0xb4/0x9a0 [ 777.678508][T18815] ? __pfx_mkiss_open+0x10/0x10 [ 777.679800][T18815] tty_ldisc_open+0x9c/0x120 [ 777.681015][T18815] tty_set_ldisc+0x318/0x720 [ 777.682242][T18815] tty_ioctl+0xc22/0x1640 [ 777.683418][T18815] ? __pfx_tty_ioctl+0x10/0x10 [ 777.684702][T18815] ? __pfx_lock_release+0x10/0x10 [ 777.686030][T18815] ? trace_lock_acquire+0x14e/0x1f0 [ 777.687406][T18815] ? __fget_files+0x206/0x3a0 [ 777.688645][T18815] tty_compat_ioctl+0x24a/0x4d0 [ 777.689930][T18815] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 777.691351][T18815] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 777.692739][T18815] __do_fast_syscall_32+0x73/0x120 [ 777.694113][T18815] do_fast_syscall_32+0x32/0x80 [ 777.695411][T18815] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 777.697061][T18815] RIP: 0023:0xf708e579 [ 777.698135][T18815] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 777.703154][T18815] RSP: 002b:00000000f508055c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 777.705353][T18815] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005423 [ 777.707418][T18815] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 777.709488][T18815] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 777.711559][T18815] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 777.713631][T18815] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 777.715729][T18815] [ 777.720834][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 777.901104][T13321] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 777.941761][T13321] usb 5-1: device descriptor read/8, error -71 [ 778.056761][T13321] usb usb5-port1: unable to enumerate USB device [ 778.275395][T18821] xt_TCPMSS: Only works on TCP SYN packets [ 778.290899][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 778.576816][T18825] can0: slcan on ptm0. [ 778.760839][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 778.921109][T18823] can0 (unregistered): slcan off ptm0. [ 779.050957][ T39] kauditd_printk_skb: 95 callbacks suppressed [ 779.050969][ T39] audit: type=1326 audit(1734021142.891:14064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18836 comm="syz.1.3589" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x0 [ 779.320911][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 779.651034][ T6004] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 779.810823][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 779.810840][ T6004] usb 5-1: Using ep0 maxpacket: 8 [ 779.825612][ T6004] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 779.831019][ T6004] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 779.834354][ T6004] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 779.842537][ T6004] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 779.878753][ T6004] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 779.890961][ T5941] Bluetooth: hci0: command 0x0405 tx timeout [ 779.914192][ T6004] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 779.916655][ T6004] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.134196][ T6004] usb 5-1: GET_CAPABILITIES returned 0 [ 780.135657][ T6004] usbtmc 5-1:16.0: can't read capabilities [ 780.313463][T18856] blktrace: Concurrent blktraces are not allowed on sg0 [ 780.335566][T18844] misc userio: The device must be registered before sending interrupts [ 780.339741][T13321] usb 5-1: USB disconnect, device number 37 [ 780.360866][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 780.419045][T18859] lo speed is unknown, defaulting to 1000 [ 780.422944][T18862] lo speed is unknown, defaulting to 1000 [ 780.441905][T18857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3594'. [ 780.589634][T18868] macvtap1: entered promiscuous mode [ 780.591286][T18868] macvtap1: entered allmulticast mode [ 780.593581][T18868] vlan0: entered allmulticast mode [ 780.595194][T18868] veth0_vlan: entered allmulticast mode [ 780.596703][T18868] vlan0: entered promiscuous mode [ 780.604900][T18868] team0: Device macvtap1 failed to register rx_handler [ 780.609198][T18868] vlan0: left allmulticast mode [ 780.610609][T18868] veth0_vlan: left allmulticast mode [ 780.612339][T18868] vlan0: left promiscuous mode [ 780.840898][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 780.870150][T18870] mkiss: ax0: crc mode is auto. [ 780.947674][T18874] xt_TCPMSS: Only works on TCP SYN packets [ 781.368271][ T39] audit: type=1326 audit(1734021145.211:14065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18880 comm="syz.3.3601" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f70579 code=0x0 [ 781.400931][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 781.880826][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 782.441060][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 782.475756][T18902] blktrace: Concurrent blktraces are not allowed on sg0 [ 782.760229][T18907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3607'. [ 782.930896][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 783.163772][T18918] FAULT_INJECTION: forcing a failure. [ 783.163772][T18918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 783.167160][T18918] CPU: 2 UID: 0 PID: 18918 Comm: syz.3.3611 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 783.169787][T18918] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 783.172435][T18918] Call Trace: [ 783.173270][T18918] [ 783.174099][T18918] dump_stack_lvl+0x16c/0x1f0 [ 783.175563][T18918] should_fail_ex+0x497/0x5b0 [ 783.176766][T18918] _copy_to_user+0x32/0xd0 [ 783.177877][T18918] simple_read_from_buffer+0xd0/0x160 [ 783.179258][T18918] proc_fail_nth_read+0x198/0x270 [ 783.180564][T18918] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 783.182024][T18918] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 783.183505][T18918] vfs_read+0x1df/0xbe0 [ 783.184644][T18918] ? __fget_files+0x1fc/0x3a0 [ 783.185965][T18918] ? __pfx___mutex_lock+0x10/0x10 [ 783.187437][T18918] ? __pfx_vfs_read+0x10/0x10 [ 783.188798][T18918] ? __fget_files+0x206/0x3a0 [ 783.190331][T18918] ksys_read+0x12b/0x250 [ 783.191607][T18918] ? __pfx_ksys_read+0x10/0x10 [ 783.192873][T18918] __do_fast_syscall_32+0x73/0x120 [ 783.194254][T18918] do_fast_syscall_32+0x32/0x80 [ 783.195561][T18918] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 783.197240][T18918] RIP: 0023:0xf7f70579 [ 783.198340][T18918] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 783.203365][T18918] RSP: 002b:00000000f50c6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 783.205577][T18918] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f50c6620 [ 783.207820][T18918] RDX: 000000000000000f RSI: 00000000f7403ff4 RDI: 0000000000000000 [ 783.209892][T18918] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 783.211956][T18918] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 783.214041][T18918] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 783.216269][T18918] [ 783.220857][ T6004] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 783.307074][T18923] xt_TCPMSS: Only works on TCP SYN packets [ 783.380830][ T6004] usb 5-1: Using ep0 maxpacket: 32 [ 783.383888][ T6004] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 783.386153][ T6004] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 783.388532][ T6004] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 783.390964][ T6004] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 783.393538][ T6004] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 783.396066][ T6004] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 783.399505][ T6004] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 783.401972][ T6004] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.407333][ T6004] usb 5-1: config 0 descriptor?? [ 783.490826][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 783.542347][ T39] audit: type=1326 audit(1734021147.391:14066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18925 comm="syz.1.3613" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x0 [ 783.613208][ T6004] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 38 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 783.813452][ T1931] usb 5-1: USB disconnect, device number 38 [ 783.817146][ T1931] usblp0: removed [ 783.819460][T18915] ucma_write: process 924 (syz.0.3610) changed security contexts after opening file descriptor, this is not allowed. [ 783.960877][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 784.520988][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 784.963817][T18949] blktrace: Concurrent blktraces are not allowed on sg0 [ 785.000893][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 785.264244][T18956] xt_TCPMSS: Only works on TCP SYN packets [ 785.419142][T18958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3621'. [ 785.458984][T18960] tmpfs: Bad value for 'mpol' [ 785.467577][T18960] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3623'. [ 785.471769][ T39] audit: type=1400 audit(1734021149.321:14067): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/current" pid=18959 comm="syz.0.3623" [ 785.554493][ T39] audit: type=1326 audit(1734021149.401:14068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18963 comm="syz.2.3624" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 785.560398][ T39] audit: type=1326 audit(1734021149.401:14069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18963 comm="syz.2.3624" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 785.568500][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 785.572157][ T39] audit: type=1326 audit(1734021149.401:14070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18963 comm="syz.2.3624" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 785.579408][ T39] audit: type=1326 audit(1734021149.401:14071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18963 comm="syz.2.3624" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 785.587630][ T39] audit: type=1326 audit(1734021149.401:14072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18963 comm="syz.2.3624" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 785.594311][ T39] audit: type=1326 audit(1734021149.401:14073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18963 comm="syz.2.3624" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 785.600020][ T39] audit: type=1326 audit(1734021149.401:14074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18963 comm="syz.2.3624" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 785.608116][ T39] audit: type=1326 audit(1734021149.401:14075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18963 comm="syz.2.3624" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 785.614678][ T39] audit: type=1326 audit(1734021149.401:14076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18963 comm="syz.2.3624" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 785.773919][T18969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3624'. [ 786.040829][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 786.309307][T18979] tmpfs: Bad value for 'mpol' [ 786.318341][T18979] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3628'. [ 786.600862][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 786.730989][ T1931] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 786.771399][T18997] blktrace: Concurrent blktraces are not allowed on sg0 [ 786.880921][ T1931] usb 5-1: Using ep0 maxpacket: 8 [ 786.884085][ T1931] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 786.886403][ T1931] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 786.889056][ T1931] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 786.891881][ T1931] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 786.894841][ T1931] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 786.898795][ T1931] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 786.901648][ T1931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.939412][T18999] lo speed is unknown, defaulting to 1000 [ 786.953002][T18999] lo speed is unknown, defaulting to 1000 [ 786.955714][T18999] lo speed is unknown, defaulting to 1000 [ 786.992901][T19000] lo speed is unknown, defaulting to 1000 [ 786.994778][T19000] lo speed is unknown, defaulting to 1000 [ 786.996819][T19000] lo speed is unknown, defaulting to 1000 [ 787.005966][T19000] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 787.027282][T19000] lo speed is unknown, defaulting to 1000 [ 787.031970][T19000] lo speed is unknown, defaulting to 1000 [ 787.033887][T19000] lo speed is unknown, defaulting to 1000 [ 787.036094][T19000] lo speed is unknown, defaulting to 1000 [ 787.038037][T19000] lo speed is unknown, defaulting to 1000 [ 787.042004][T19000] lo speed is unknown, defaulting to 1000 [ 787.047312][T19000] lo speed is unknown, defaulting to 1000 [ 787.052234][T19001] »»»»»»: renamed from lo (while UP) [ 787.058003][T19000] »»»»»» speed is unknown, defaulting to 1000 [ 787.063842][T18999] infiniband sz1: set active [ 787.066932][ T1327] »»»»»» speed is unknown, defaulting to 1000 [ 787.068827][T18999] infiniband sz1: added »»»»»» [ 787.080915][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 787.089772][T18999] RDS/IB: sz1: added [ 787.091950][T18999] smc: adding ib device sz1 with port count 1 [ 787.093961][T18999] smc: ib device sz1 port 1 has pnetid [ 787.099299][ T1327] »»»»»» speed is unknown, defaulting to 1000 [ 787.106117][T18999] »»»»»» speed is unknown, defaulting to 1000 [ 787.109285][ T1931] usb 5-1: GET_CAPABILITIES returned 0 [ 787.111023][ T1931] usbtmc 5-1:16.0: can't read capabilities [ 787.206106][T18999] »»»»»» speed is unknown, defaulting to 1000 [ 787.266124][T19005] xt_TCPMSS: Only works on TCP SYN packets [ 787.312168][T18993] misc userio: The device must be registered before sending interrupts [ 787.312450][T18999] »»»»»» speed is unknown, defaulting to 1000 [ 787.317844][ T5996] usb 5-1: USB disconnect, device number 39 [ 787.404880][T18999] »»»»»» speed is unknown, defaulting to 1000 [ 787.469541][T18999] »»»»»» speed is unknown, defaulting to 1000 [ 787.528638][T19008] tmpfs: Bad value for 'mpol' [ 787.535018][T19008] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3635'. [ 787.538267][T18999] »»»»»» speed is unknown, defaulting to 1000 [ 787.604115][T18999] »»»»»» speed is unknown, defaulting to 1000 [ 787.640865][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 787.666084][T18999] »»»»»» speed is unknown, defaulting to 1000 [ 787.917199][T19019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3636'. [ 787.996628][T19020] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3636'. [ 788.120862][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 788.197131][T19025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3637'. [ 788.255206][T19020] [ 788.256083][T19020] ====================================================== [ 788.258660][T19020] WARNING: possible circular locking dependency detected [ 788.261081][T19020] 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 Not tainted [ 788.264732][T19020] ------------------------------------------------------ [ 788.267514][T19020] syz.3.3636/19020 is trying to acquire lock: [ 788.269095][T19020] ffff888045c27170 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x132/0x4f0 [ 788.272149][T19020] [ 788.272149][T19020] but task is already holding lock: [ 788.274561][T19020] ffff888045c27200 (&q->sysfs_dir_lock){+.+.}-{4:4}, at: blk_register_queue+0x5c/0x4f0 [ 788.277795][T19020] [ 788.277795][T19020] which lock already depends on the new lock. [ 788.277795][T19020] [ 788.280445][T19020] [ 788.280445][T19020] the existing dependency chain (in reverse order) is: [ 788.283332][T19020] [ 788.283332][T19020] -> #5 (&q->sysfs_dir_lock){+.+.}-{4:4}: [ 788.285832][T19020] __mutex_lock+0x19b/0xa60 [ 788.287547][T19020] blk_mq_sysfs_unregister_hctxs+0x92/0x2d0 [ 788.289689][T19020] __blk_mq_update_nr_hw_queues+0x93f/0x1460 [ 788.291725][T19020] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 788.293328][T19020] nbd_start_device+0x15b/0xd70 [ 788.294748][T19020] nbd_ioctl+0x21a/0xfd0 [ 788.296017][T19020] compat_blkdev_ioctl+0x2f7/0x750 [ 788.297472][T19020] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 788.298965][T19020] __do_fast_syscall_32+0x73/0x120 [ 788.300427][T19020] do_fast_syscall_32+0x32/0x80 [ 788.301859][T19020] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 788.303651][T19020] [ 788.303651][T19020] -> #4 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 788.305878][T19020] blk_mq_submit_bio+0x1fb6/0x24c0 [ 788.307365][T19020] __submit_bio+0x384/0x540 [ 788.308693][T19020] submit_bio_noacct_nocheck+0x698/0xd70 [ 788.310529][T19020] submit_bio_noacct+0x93a/0x1e20 [ 788.312206][T19020] block_read_full_folio+0x812/0xa50 [ 788.313740][T19020] filemap_read_folio+0xc6/0x2a0 [ 788.315156][T19020] filemap_get_pages+0x155f/0x1be0 [ 788.316626][T19020] filemap_read+0x3ca/0xd70 [ 788.317938][T19020] blkdev_read_iter+0x187/0x480 [ 788.319338][T19020] vfs_read+0x87f/0xbe0 [ 788.320549][T19020] ksys_read+0x12b/0x250 [ 788.321791][T19020] do_syscall_64+0xcd/0x250 [ 788.323082][T19020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.324768][T19020] [ 788.324768][T19020] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 788.326927][T19020] down_read+0x9a/0x330 [ 788.328143][T19020] filemap_fault+0x2e0/0x2820 [ 788.329492][T19020] __do_fault+0x10a/0x490 [ 788.330755][T19020] do_pte_missing+0xebd/0x3e00 [ 788.332248][T19020] __handle_mm_fault+0x103c/0x2a40 [ 788.333752][T19020] handle_mm_fault+0x3fa/0xaa0 [ 788.335124][T19020] __get_user_pages+0x8d9/0x3b50 [ 788.336574][T19020] populate_vma_page_range+0x27f/0x3a0 [ 788.338161][T19020] __mm_populate+0x1d6/0x380 [ 788.339516][T19020] vm_mmap_pgoff+0x293/0x360 [ 788.340872][T19020] ksys_mmap_pgoff+0x32c/0x5c0 [ 788.342243][T19020] __do_fast_syscall_32+0x73/0x120 [ 788.343683][T19020] do_fast_syscall_32+0x32/0x80 [ 788.345055][T19020] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 788.346802][T19020] [ 788.346802][T19020] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 788.348770][T19020] __might_fault+0x11b/0x190 [ 788.350116][T19020] _copy_from_user+0x29/0xd0 [ 788.351435][T19020] __blk_trace_setup+0xa8/0x180 [ 788.352806][T19020] blk_trace_setup+0x47/0x70 [ 788.354142][T19020] sg_ioctl+0x7a3/0x26b0 [ 788.355374][T19020] compat_ptr_ioctl+0x6b/0xa0 [ 788.356710][T19020] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 788.358201][T19020] __do_fast_syscall_32+0x73/0x120 [ 788.359981][T19020] do_fast_syscall_32+0x32/0x80 [ 788.361361][T19020] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 788.363132][T19020] [ 788.363132][T19020] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 788.365174][T19020] __mutex_lock+0x19b/0xa60 [ 788.366485][T19020] blk_register_queue+0x13c/0x4f0 [ 788.368008][T19020] add_disk_fwnode+0x785/0x1300 [ 788.369432][T19020] brd_alloc.isra.0+0x50a/0x7c0 [ 788.370867][T19020] brd_init+0x12b/0x1d0 [ 788.372140][T19020] do_one_initcall+0x128/0x630 [ 788.373394][T19020] kernel_init_freeable+0x58f/0x8b0 [ 788.374807][T19020] kernel_init+0x1c/0x2b0 [ 788.376123][T19020] ret_from_fork+0x45/0x80 [ 788.377463][T19020] ret_from_fork_asm+0x1a/0x30 [ 788.378937][T19020] [ 788.378937][T19020] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 788.381342][T19020] __lock_acquire+0x249e/0x3c40 [ 788.383131][T19020] lock_acquire.part.0+0x11b/0x380 [ 788.385094][T19020] __mutex_lock+0x19b/0xa60 [ 788.386402][T19020] blk_register_queue+0x132/0x4f0 [ 788.387832][T19020] add_disk_fwnode+0x785/0x1300 [ 788.389213][T19020] nbd_dev_add+0x78b/0xbc0 [ 788.390488][T19020] nbd_genl_connect+0x8b1/0x1c00 [ 788.392089][T19020] genl_family_rcv_msg_doit+0x202/0x2f0 [ 788.393708][T19020] genl_rcv_msg+0x565/0x800 [ 788.395061][T19020] netlink_rcv_skb+0x165/0x410 [ 788.396819][T19020] genl_rcv+0x28/0x40 [ 788.398023][T19020] netlink_unicast+0x53c/0x7f0 [ 788.399432][T19020] netlink_sendmsg+0x8b8/0xd70 [ 788.400823][T19020] ____sys_sendmsg+0x9ae/0xb40 [ 788.402229][T19020] ___sys_sendmsg+0x135/0x1e0 [ 788.403593][T19020] __sys_sendmsg+0x16e/0x220 [ 788.404938][T19020] __do_fast_syscall_32+0x73/0x120 [ 788.406362][T19020] do_fast_syscall_32+0x32/0x80 [ 788.407779][T19020] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 788.409588][T19020] [ 788.409588][T19020] other info that might help us debug this: [ 788.409588][T19020] [ 788.412182][T19020] Chain exists of: [ 788.412182][T19020] &q->sysfs_lock --> &q->q_usage_counter(io)#50 --> &q->sysfs_dir_lock [ 788.412182][T19020] [ 788.415910][T19020] Possible unsafe locking scenario: [ 788.415910][T19020] [ 788.417832][T19020] CPU0 CPU1 [ 788.419244][T19020] ---- ---- [ 788.420657][T19020] lock(&q->sysfs_dir_lock); [ 788.421905][T19020] lock(&q->q_usage_counter(io)#50); [ 788.423935][T19020] lock(&q->sysfs_dir_lock); [ 788.425802][T19020] lock(&q->sysfs_lock); [ 788.426929][T19020] [ 788.426929][T19020] *** DEADLOCK *** [ 788.426929][T19020] [ 788.429022][T19020] 3 locks held by syz.3.3636/19020: [ 788.430345][T19020] #0: ffffffff8fb5c410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 788.432448][T19020] #1: ffffffff8fb5c4c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x580/0x800 [ 788.434752][T19020] #2: ffff888045c27200 (&q->sysfs_dir_lock){+.+.}-{4:4}, at: blk_register_queue+0x5c/0x4f0 [ 788.437312][T19020] [ 788.437312][T19020] stack backtrace: [ 788.438831][T19020] CPU: 0 UID: 0 PID: 19020 Comm: syz.3.3636 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 788.441623][T19020] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 788.444501][T19020] Call Trace: [ 788.445416][T19020] [ 788.446268][T19020] dump_stack_lvl+0x116/0x1f0 [ 788.447506][T19020] print_circular_bug+0x41c/0x610 [ 788.448811][T19020] check_noncircular+0x31a/0x400 [ 788.450099][T19020] ? __pfx_check_noncircular+0x10/0x10 [ 788.451770][T19020] ? hlock_class+0x4e/0x130 [ 788.452954][T19020] ? lockdep_lock+0xc6/0x200 [ 788.454175][T19020] ? __pfx_lockdep_lock+0x10/0x10 [ 788.455488][T19020] __lock_acquire+0x249e/0x3c40 [ 788.456769][T19020] ? __pfx___lock_acquire+0x10/0x10 [ 788.458173][T19020] ? xa_find_after+0x291/0x480 [ 788.459624][T19020] lock_acquire.part.0+0x11b/0x380 [ 788.461136][T19020] ? blk_register_queue+0x132/0x4f0 [ 788.462695][T19020] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 788.464287][T19020] ? rcu_is_watching+0x12/0xc0 [ 788.465533][T19020] ? trace_lock_acquire+0x14e/0x1f0 [ 788.466882][T19020] ? blk_register_queue+0x132/0x4f0 [ 788.468220][T19020] ? lock_acquire+0x2f/0xb0 [ 788.469393][T19020] ? blk_register_queue+0x132/0x4f0 [ 788.470735][T19020] __mutex_lock+0x19b/0xa60 [ 788.471942][T19020] ? blk_register_queue+0x132/0x4f0 [ 788.473289][T19020] ? blk_register_queue+0x132/0x4f0 [ 788.474676][T19020] ? __pfx___mutex_lock+0x10/0x10 [ 788.476002][T19020] ? kobject_add+0x17c/0x240 [ 788.477217][T19020] ? blk_register_queue+0x132/0x4f0 [ 788.478562][T19020] blk_register_queue+0x132/0x4f0 [ 788.479880][T19020] add_disk_fwnode+0x785/0x1300 [ 788.481148][T19020] nbd_dev_add+0x78b/0xbc0 [ 788.482316][T19020] ? trace_contention_end+0xee/0x140 [ 788.483691][T19020] ? __pfx_nbd_dev_add+0x10/0x10 [ 788.484969][T19020] ? __mutex_lock+0x1cc/0xa60 [ 788.486199][T19020] ? bpf_lsm_capable+0x9/0x10 [ 788.487397][T19020] ? __radix_tree_lookup+0x21f/0x2c0 [ 788.488729][T19020] nbd_genl_connect+0x8b1/0x1c00 [ 788.490014][T19020] ? __pfx_nbd_genl_connect+0x10/0x10 [ 788.491514][T19020] ? __nla_parse+0x40/0x60 [ 788.493079][T19020] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 788.494975][T19020] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 788.496890][T19020] genl_family_rcv_msg_doit+0x202/0x2f0 [ 788.498335][T19020] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 788.499916][T19020] ? genl_get_cmd+0x195/0x580 [ 788.501134][T19020] ? __radix_tree_lookup+0x21f/0x2c0 [ 788.502512][T19020] genl_rcv_msg+0x565/0x800 [ 788.503778][T19020] ? __pfx_genl_rcv_msg+0x10/0x10 [ 788.505123][T19020] ? __pfx_nbd_genl_connect+0x10/0x10 [ 788.506512][T19020] ? __pfx___lock_acquire+0x10/0x10 [ 788.507944][T19020] netlink_rcv_skb+0x165/0x410 [ 788.509910][T19020] ? __pfx_genl_rcv_msg+0x10/0x10 [ 788.511782][T19020] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 788.513352][T19020] ? down_read+0xc9/0x330 [ 788.514624][T19020] ? __pfx_down_read+0x10/0x10 [ 788.515989][T19020] ? netlink_deliver_tap+0x1ae/0xca0 [ 788.517463][T19020] genl_rcv+0x28/0x40 [ 788.518660][T19020] netlink_unicast+0x53c/0x7f0 [ 788.520049][T19020] ? __pfx_netlink_unicast+0x10/0x10 [ 788.521410][T19020] ? __phys_addr_symbol+0x30/0x80 [ 788.522742][T19020] ? __check_object_size+0x488/0x710 [ 788.524163][T19020] netlink_sendmsg+0x8b8/0xd70 [ 788.525416][T19020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 788.526791][T19020] ____sys_sendmsg+0x9ae/0xb40 [ 788.528062][T19020] ? __pfx_____sys_sendmsg+0x10/0x10 [ 788.529395][T19020] ? get_compat_msghdr+0x11b/0x170 [ 788.530706][T19020] ___sys_sendmsg+0x135/0x1e0 [ 788.531945][T19020] ? __pfx____sys_sendmsg+0x10/0x10 [ 788.533271][T19020] ? __pfx_lock_release+0x10/0x10 [ 788.534636][T19020] ? trace_lock_acquire+0x14e/0x1f0 [ 788.536271][T19020] ? __fget_files+0x206/0x3a0 [ 788.537667][T19020] __sys_sendmsg+0x16e/0x220 [ 788.538920][T19020] ? __pfx___sys_sendmsg+0x10/0x10 [ 788.540277][T19020] ? __ia32_sys_futex_time32+0x1da/0x460 [ 788.541748][T19020] __do_fast_syscall_32+0x73/0x120 [ 788.543081][T19020] do_fast_syscall_32+0x32/0x80 [ 788.544374][T19020] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 788.546009][T19020] RIP: 0023:0xf7f70579 [ 788.547129][T19020] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 788.552646][T19020] RSP: 002b:00000000f508455c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 788.555106][T19020] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 0000000020000240 [ 788.557266][T19020] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 788.559316][T19020] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 788.561267][T19020] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 788.563314][T19020] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 788.565414][T19020] [ 788.680993][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 789.170842][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 789.720837][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 790.201030][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 790.760913][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 791.240891][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 791.800889][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 792.280864][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 792.840858][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 793.320879][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 793.880896][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 794.360884][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 794.920878][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 795.400861][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 795.960922][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 796.440857][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 797.000961][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 797.480867][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 798.040843][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available VM DIAGNOSIS: 16:23:59 Registers: info registers vcpu 0 CPU#0 RAX=000000000000006f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85142d85 RDI=ffffffff9a662300 RBP=ffffffff9a6622c0 RSP=ffffc9000c4c6810 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e33312e36 R12=0000000000000000 R13=000000000000006f R14=ffffffff85142d20 R15=0000000000000000 RIP=ffffffff85142daf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c25844e CR3=000000005a4b0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=0000000000000000 Opmask02=00000000bfdfdfdf Opmask03=0000000000000000 Opmask04=0000000000000008 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b5f5455504e495f 4449006b636f6c62 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff536dbb50 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6464646464646464 6464646464646464 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff ffffff00ffffff00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 76897b780c0e2500 7373254c1140a993 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737373e2 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f00534b4e494c56 454400454d414e56 4544005845444e49 464900524f4e494d ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f742079617272 6120656c75722079 7261726f706d6574 002a3f005b3f2a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000101 00000000317a0173 2f646e6162696e69 666e692f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2d002a5d392d305b 7466717761726e00 2a5d392d305b7466 717761720000312d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6400795f6de6a2df 6d2f254372ba2b2f 7373616c632f7338 732f002f7375622f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 05fa080b7f7d5673 0000563f6234b4b9 0000000000000111 7300306e00797265 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563a01944c70 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563a01942b00 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 EAX=00000000 EBX=00000000 ECX=00000000 EDX=ff9c4894 ESI=ff9c488c EDI=ff9c4894 EBP=00000000 ESP=ff9c4864 EIP=f7222954 EFL=00000292 [--S-A--] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 5808c440 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 0004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3fd128 CR3=0000000064226000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003800000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000098b46c RBX=0000000000000002 RCX=ffffffff8b19d7a9 RDX=ffffed10056c6fee RSI=ffffffff8bb156e0 RDI=ffffffff81701db9 RBP=ffffed10039df000 RSP=ffffc9000048fe08 R8 =0000000000000000 R9 =ffffed10056c6fed R10=ffff88802b637f6b R11=0000000000000001 R12=0000000000000002 R13=ffff88801cef8000 R14=ffffffff901cc310 R15=0000000000000000 RIP=ffffffff8b19eb8f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc020f24ba0 CR3=0000000049f3e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffff00 Opmask01=000000000000007f Opmask02=00000000fffeff7f Opmask03=2040000404420020 Opmask04=0000000000000008 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 003d45444f4d5645 44003d524f4e494d ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff536d78d0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 76897b780c0e2500 7373254c1140a993 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737373e2 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 722f766564752f62 696c2f7273752f00 534b4e494c564544 00454d414e564544 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d003d454d 414e564544003d58 45444e494649003d 4550595456454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d0018454d 414e564544001858 45444e4946490018 4550595456454400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000201 00000000317a0173 2f646e6162696e69 666e692f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 05fa080b7f7d5673 0000000563a0193f 00000000000003a1 0000000000302e36 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 756d006469766976 0000563a019323be 00000000000000b1 0000003077617264 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 747461622d323130 302e414437303a45 3534303a33303030 2d6469682f796c70 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 05fa080b7f7d5673 0000563f6234b4b9 0000000000000111 7300306e00797265 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0574080b2d323130 00004110371b3a45 0000000000000111 2d001f4100565d4a ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0574080b2d323130 0000413f37303a45 0000000000000111 2d00306800796c65 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000a1a914 RBX=0000000000000003 RCX=ffffffff8b19d7a9 RDX=ffffed10056e6fee RSI=ffffffff8bb156e0 RDI=ffffffff81701db9 RBP=ffffed10039df488 RSP=ffffc9000049fe08 R8 =0000000000000000 R9 =ffffed10056e6fed R10=ffff88802b737f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801cefa440 R14=ffffffff901cc310 R15=0000000000000000 RIP=ffffffff8b19eb8f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c33fa00 CR3=000000005a4b0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffff00 Opmask01=000000000000007f Opmask02=00000000fffeff7f Opmask03=2040000404420020 Opmask04=0000000000000008 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 003d45444f4d5645 44003d524f4e494d ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff536d78d0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 76897b780c0e2500 7373254c1140a993 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737373e2 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 722f766564752f62 696c2f7273752f00 534b4e494c564544 00454d414e564544 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d003d454d 414e564544003d58 45444e494649003d 4550595456454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d0018454d 414e564544001858 45444e4946490018 4550595456454400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000201 00000000317a0173 2f646e6162696e69 666e692f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 05fa080b7f7d5673 0000000563a0193f 00000000000003a1 0000000000302e36 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 756d006469766976 0000563a019323be 00000000000000b1 0000003077617264 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 747461622d323130 302e414437303a45 3534303a33303030 2d6469682f796c70 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 05fa080b7f7d5673 0000563f6234b4b9 0000000000000111 7300306e00797265 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0574080b2d323130 00004110371b3a45 0000000000000111 2d001f4100565d4a ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0574080b2d323130 0000413f37303a45 0000000000000111 2d00306800796c65 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000