last executing test programs: 7.70386949s ago: executing program 1 (id=660): setresuid(0x0, 0xffffffffffffffff, 0xee01) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$tun(0xffffffffffffff9c, 0x0, 0xa000, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)='p:mygroup/myevent ./dummy:0x2', 0x1d) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r5, &(0x7f0000000400)='p:mygroup/_yevent ./dummy:0x2', 0x1d) mount(0x0, &(0x7f0000000280)='./trace/uprobe_events\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt/net/rpc/auth.unix.ip/flush\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x13) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @empty, 0x2}, {0xa, 0x4e20, 0x101, @remote, 0xa}, r7, 0x6}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) 7.653776264s ago: executing program 2 (id=661): openat$ptp1(0xffffff9c, &(0x7f0000000000), 0x80, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="3c3f47f4f66f", 0x6}], 0x1, 0x0, 0x0, 0x4040c15}], 0x924924924924b14, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x110) mkdir(&(0x7f00000000c0)='./bus\x00', 0xc0) mount$overlay(0x0, &(0x7f00000001c0)='./sys/class/rnbd-client/ctl/map_device\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005400010d2bbd70000200000007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB="010200007f"], 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x129d01, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000180)) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff}, 0x80) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r6) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) write(r8, &(0x7f0000000600)='sessname=s+ device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000340)) 7.653481907s ago: executing program 3 (id=662): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001a80), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000300)={0x34, r1, 0x1, 0x70bc2e, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0x34}}, 0x20004000) socket$netlink(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e23}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000300)=@generic, 0x80, &(0x7f0000000840)=[{&(0x7f0000000580)=""/56, 0x54}, {&(0x7f00000005c0)=""/71, 0x47}, {&(0x7f0000000640)=""/203, 0xd7}, {&(0x7f0000000740)=""/210, 0xfffffffffffffecf}], 0x4}, 0x10001}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_io_uring_setup(0x126b, &(0x7f0000000500)={0x0, 0x72de, 0x0, 0x0, 0x3a8}, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000000)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c0002400000000000000001090003000300000000000000140000001100"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000440)={0xffffffffffffffff, r2, 0x9, 0x0, 0x0, 0x9, 0xfe, 0x10d0, 0x5, 0xf, 0x2, 0xfffffffe, 'syz0\x00'}) shutdown(r2, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x11) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x2) r4 = openat$snapshot(0xffffff9c, &(0x7f0000000080), 0x101501, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r4, 0x400c330d, &(0x7f0000000180)={0x7fffffffffffffff, 0x10001}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xaa, 0xffff, 0x8, 0xa, 0xfffffb3a}, 0x14) 7.43603829s ago: executing program 3 (id=664): write(0xffffffffffffffff, &(0x7f00000000c0)='usbip', 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0xc, 0xfffffe, 0x7, 0xe, 0x5, 0x1, 0x8000009654, 0x1, 0x7fffffff, 0x0, 0x6, 0xb, 0xffff, 0x200cc0, 0x1, 0x5, 0x4, 0xfffffffffffffffc, 0x0, 0x809, 0x0, 0x5, 0xa, 0x9}) r0 = openat$cdrom(0xffffff9c, 0x0, 0x801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x700, &(0x7f0000000400)={&(0x7f0000000440)={0x14, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x10) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u/720p\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') symlinkat(0x0, 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff) 7.433522156s ago: executing program 2 (id=672): ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f00000000c0)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008814) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000640)={{0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x16, 0x8}, 0x6, 0x40, 0x9, 0xfffffffffffffffb, 0x0, 0x0, 0xd382}) connect$unix(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x58, 0x12) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r5, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f000000c140)={&(0x7f000000bf80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x100000001}, [{0x8000000000000000, 0x4}, {0x9, 0x8000000000000001}, {0xb7, 0x6}, {0xffffffff, 0x3}, {0x2f4, 0x40}, {0x1000, 0x98e}, {0x1, 0x6}, {0x2, 0x2}, {0x7}, {0xc, 0xffffffff80000000}, {0x800000000000, 0x1c}, {0xffffffffffffffff, 0x4}, {0x9, 0x9}, {0xe8b0, 0x3aac00000000000}, {0x69b7, 0x5f}, {0x0, 0x5}, {0xa, 0x2}, {0x7fff}, {0x7, 0x4}, {0x7ff, 0x3}, {0x1ff, 0x100000001}, {0xa2e, 0xe}, {0x30fe, 0x1}, {0x8, 0x4}, {0xff, 0x2}, {0xfb9, 0x1}, {0x6, 0x8}, {0x1, 0xfffffffffffffffc}, {0x7, 0x5}, {0x2, 0xffffffffffff7fff}, {0x9, 0x8}, {0x59f, 0x5ff5}, {0x7fff, 0x7}, {0x8, 0x3}, {0xc1d, 0x4077d962}, {0x139b, 0x1089}, {0x5, 0x81}, {0x0, 0x3}, {0x8, 0xb}, {0x5, 0x1}, {0x4a82, 0xb}, {0x200, 0x405}, {0x1c508f61, 0x1a5b5e17}, {0xc, 0x7fffffff}, {0xff, 0x7d71}, {0x8000000000000001}, {0x10, 0x6}, {0x7, 0x8}, {0x5, 0x200}, {0xfffffffffffffffb, 0x6}, {0x7f, 0x6}, {0x80000001, 0x1}, {0x70, 0x9}, {0x1, 0x1}, {0x3, 0x2}, {0x81, 0x5}, {0x5, 0x9}, {0x8, 0x101}, {0x3, 0x7}, {0x9, 0x3}, {0x180, 0x59f}, {0xffff, 0x2}, {0x5}, {0x7, 0x80000000}, {0x10, 0x7fffffff}, {0x9, 0x9}, {0x1, 0x6}, {0x76, 0xfffffffffffffffc}, {0x40, 0x6}, {0x100000000, 0x200}, {0x4, 0x8}, {0x0, 0xf}, {0xd9, 0x63da50e0}, {0x2, 0xa987}, {0xf, 0xf800000000000000}, {0x8, 0xf405}, {0x2, 0x4}, {0x0, 0x80000001}, {0x2, 0x9}, {0x0, 0x2}, {0x5, 0x4}, {0x5, 0x7}, {0x2, 0x80000000}, {0x400000000000, 0xdb6}, {0x34c0}, {0x94, 0xfffffffffffffffa}, {0x0, 0xead5}, {0x7ff, 0x8001}, {0x5, 0x2}, {0xffffffffffff7fff}, {0xa, 0x1}, {0x0, 0x99}, {0xb9, 0x8001}, {0x7, 0x6de}, {0x2}, {0xfffffffffffffff7, 0x99b1}, {0x6, 0x4}, {0xda, 0x5}, {0x2, 0x8}, {0xd8, 0x4}, {0x8, 0xb6ea}, {0x4, 0xc27}, {0x2, 0x8000000000000000}, {0x3, 0x1}, {0x4, 0x6}, {0x2125, 0xffffffffffffff14}, {0x0, 0x7}, {0x0, 0x80}, {0x2, 0xfffffc0000000000}, {0x4e9a, 0x7}, {0x10001, 0x8}, {0x7fff, 0x200}, {0x5, 0x3}, {0x7, 0x3}, {0x100, 0x3}, {0x8, 0x5}, {0x3, 0x8000000000000000}, {0x4, 0x200}, {0x5, 0x5}, {0x2, 0x6}, {0x9, 0x9}, {0xa, 0x5}, {0x7, 0xd97}, {0xff, 0x5173}, {0x2}, {0x1, 0x81}, {0x6, 0x1ff}, {0x0, 0x6}, {0x9, 0x140000000000}, {0x26, 0x7}, {0x4, 0x6}, {0x0, 0xa}, {0x3}, {0xb, 0x5}, {0x9, 0x7}, {0x7, 0x1}, {0x1, 0x1}, {0x1e12, 0x5}, {0x5, 0x4}, {0x3, 0x6}, {0x5, 0x3}, {0x4003, 0xffffffff}, {0x1, 0x5}, {0x100000000, 0x3}, {0x90a6, 0x9}, {0x9, 0x107}, {0xf, 0x80000000}, {0x9, 0x101}, {0x9, 0x7fff}, {0x0, 0x1}, {0x6, 0x40}, {0x2, 0x10001}, {0x7, 0x6}, {0x200}, {0x3, 0xffff}, {0x5, 0x793}, {0x6, 0x100000000}, {0x3, 0xda}, {0xb0, 0xffffffff}, {0x6, 0x2}, {0x6, 0x2}, {0x4, 0x1}, {0x6, 0xa}, {0x5d, 0x8001}, {0x38, 0x5f0}, {0x4, 0x7}, {0xffffffff, 0x5a2}, {0x1, 0x2}, {0x8, 0x1}, {0xe9, 0xfffffffffffff7b6}, {0x8e, 0x7fff}, {0x80000000, 0x8000000000000001}, {0xffffffff, 0xfda9}, {0xe5, 0xffffffffffffff41}, {0x24, 0x8}, {0x5, 0x4}, {0x187, 0xa2}, {0xd6, 0xffffffffffffffa3}, {0x1, 0xa807}, {0x3723, 0x6}, {0xfffffffffffff801, 0xa9}, {}, {0x2, 0xfffffffffffffffa}, {0x10001, 0x8000000000}, {0xfffffffffffff000, 0x3}, {0x3, 0xf9e}, {0x2321, 0x8}, {0x7ff}, {0x10001, 0xffffffff}, {0x5, 0x3}, {0x7ff, 0x9}, {0x4, 0x3e}, {0x3bd14045, 0x8001}, {0xff, 0x7}, {0x8, 0xffff}, {0x575, 0x2}, {0x3, 0x2}, {0x1, 0xe}, {0x5, 0xe}, {0x7, 0x9c}, {0x3ff, 0x8001}, {0x8, 0xffffffffffff0001}, {0x0, 0x7}, {0x3, 0x1}, {0xfffffffffffffffb, 0x4}, {0x7, 0x9}, {0x7, 0x1649}, {0x3ff, 0x7}, {0xf, 0xe6a}, {0x8, 0x1}, {0x10000, 0x5}, {0x7, 0x6}, {0x1, 0xb5}, {0x7, 0xdd1}, {0xffff, 0x66e}, {0x0, 0x4}, {0x3, 0x30580c97}, {0x8001, 0xf6}, {0x6, 0x800}, {0xcaa, 0x5}, {0x9, 0xb}, {0x0, 0xb12}, {0x7, 0x8}, {0xfaa, 0x6}, {0x8, 0x5}, {0xfffffffffffff801, 0x951}, {0x7, 0x101}, {0x7, 0x910000}, {0x2, 0x5b}, {0xa8, 0x8}, {0x619, 0x1}, {0x8, 0xfffffffffffff775}, {0x3, 0x3}, {0x1ff, 0x8}, {0x2000000000000, 0x80000000}, {0xfff, 0x1}, {0x2, 0x868}, {0x2ef, 0x2}, {0x0, 0x8000000000000000}, {0x3, 0xfffffffffffffffc}, {0x1, 0x1}, {0x7, 0x7}, {0x57, 0x7}, {0x401, 0x6}, {0x5, 0x73}, {0x80000001, 0xc91}, {0x800, 0x7ff}, {0x777b, 0x9}, {0xb3, 0x8}, {0x4, 0x1}, {0x7, 0x6}, {0xd5}, {0x3, 0x401}, {0x1, 0x2}, {0x2, 0xfffffffffffff27a}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[@ANYBLOB="581800004400010029bd7000040000000100000004004880401801"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) syz_init_net_socket$llc(0x1a, 0x1, 0x0) capset(&(0x7f0000000040)={0x19980330, r0}, &(0x7f0000000080)={0x0, 0xc, 0x4, 0x2, 0x330d, 0x6}) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2e}, @void, @val={0xc, 0x99, {0x9, 0x43}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20044040}, 0x20008000) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000300)={0x0, 'vlan1\x00'}) 6.503109951s ago: executing program 3 (id=667): r0 = io_uring_setup(0x40c9, &(0x7f0000000440)={0x0, 0x8270, 0x1000, 0x1, 0x8000267}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = fsopen(&(0x7f0000000640)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='iocharset', &(0x7f0000000040)='-/\x00', 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000058}, 0x20008844) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/vmallocinfo\x00', 0x0, 0x0) lseek(r4, 0x90000000000002, 0x0) sendmsg$nl_xfrm(r4, 0x0, 0x4040015) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x200008c0) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb0800450000300000000006019078ac1efc01ac1414aa032d90780087571f44fd000400670003005c04017f000001e0000001ddebd1cb63f3b4593dd9b3052fd750ed9347750c50d53fd013a6c75e1e67ac3cd0548bc38d924a9ed07ae4a2d43c216f003caed2839c944d8db65ae21647c595da3b673a6964639e513dd60960cd6e82e5629d2074ef"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xc, &(0x7f0000006680)) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) close(0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x5, 0x0) eventfd2(0x0, 0x0) io_submit(0x0, 0x0, 0x0) io_getevents(0x0, 0x4000000000000, 0x6, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000100)) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) 6.195826877s ago: executing program 1 (id=668): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) socket$xdp(0x2c, 0x3, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r4 = epoll_create1(0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000300)={0x1, r3}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000140)={0xa000201e}) r7 = openat$comedi(0xffffff9c, &(0x7f00000000c0)='/dev/comedi2\x00', 0x23700, 0x0) ioctl$COMEDI_INSN(r7, 0x8020640c, &(0x7f0000000000)={0x2000002, 0xfffffffffffffcf5, 0x0, 0x1, 0x1}) write$P9_RGETLOCK(r3, &(0x7f00000000c0)=ANY=[], 0xffffff6a) timer_create(0x2, &(0x7f0000000040)={0x0, 0x21, 0x2}, &(0x7f0000000000)=0x0) timer_settime(r8, 0x1, 0x0, 0x0) shmctl$SHM_LOCK(0x0, 0xb) ioprio_set$pid(0x1, 0x0, 0x2004) ioprio_get$pid(0x1, 0x0) shmctl$SHM_LOCK(0x0, 0xb) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000880}, 0x4010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x7, 0x197, 0x4, 0x4, 0x0, 0x2}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xa09e88ab5b3a8c48}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0xc010) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x19, &(0x7f00000001c0)=@raw=[@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x351}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x58, '\x00', 0x0, 0x18, r3, 0x8, &(0x7f0000000340)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0xc, 0x7cda91c1, 0x1}, 0x10, 0x23583, r2, 0x2, &(0x7f0000000400)=[r2], &(0x7f0000000440)=[{0x4, 0x4, 0xd, 0x9}, {0x3, 0x2, 0x7, 0x7}], 0x10, 0xffffff4b}, 0x94) socket$inet(0x2, 0x4000000000000001, 0x0) 6.022888072s ago: executing program 2 (id=669): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() r2 = syz_open_dev$usbfs(0x0, 0x80, 0x113201) read$usbfs(r2, &(0x7f0000000600)=""/234, 0xea) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000054000180060001000a000007000002001100000014000300000000000000000000000000135400000001060004001f900000070006007272000008000800000000000c0007000000000000000000080009008000"], 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB="9a29ed7569b83f038a1f7bc55fd78b61732746fb05d6f069c5890f8cf79de395fd3b9a0748eae3870c5ce5f8066b5de13f729d4ba34375ee126e11b8ee6d606974c70e400469bd950b6b6d70d5b1d3c15f693b61f336845dfc47dfe5d2cc3d05720b4446c26118fe77af088793ca5a2d638f9d6dc0054baee3799414468108fce3153d5e9b3f18b77e3703bcbb1d41ff7a7ecd8a92b41e393ca75ee901e2f00800000030", @ANYRES16=r5, @ANYBLOB="010000000000000000000500000030000180060001000a00000006000200110000001400030000000000000000000000000000000001060004001f900000480002801400010000000000000000000000000000000000060002001f900000080003000200000008000400010000000800050000000000080006000000000006000b0002000000"], 0x8c}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)='ping\x00', 0x5, 0x0, &(0x7f0000000300)={0xa, 0x1f90, 0x0, @loopback}, 0x1c) write(r3, &(0x7f00000000c0)='1\x00', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d283279ca35f820d073a1f7a0e134b89c8a9433c78e6698004ab5f3584de90135190d323bf6d75843821518979868ae7c7734c0", 0xc8) 5.806802942s ago: executing program 1 (id=670): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() r2 = syz_open_dev$usbfs(0x0, 0x80, 0x113201) read$usbfs(r2, &(0x7f0000000600)=""/234, 0xea) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000054000180060001000a000007000002001100000014000300000000000000000000000000135400000001060004001f900000070006007272000008000800000000000c0007000000000000000000080009008000"], 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB="9a29ed7569b83f038a1f7bc55fd78b61732746fb05d6f069c5890f8cf79de395fd3b9a0748eae3870c5ce5f8066b5de13f729d4ba34375ee126e11b8ee6d606974c70e400469bd950b6b6d70d5b1d3c15f693b61f336845dfc47dfe5d2cc3d05720b4446c26118fe77af088793ca5a2d638f9d6dc0054baee3799414468108fce3153d5e9b3f18b77e3703bcbb1d41ff7a7ecd8a92b41e393ca75ee901e2f00800000030", @ANYRES16=r5, @ANYBLOB="010000000000000000000500000030000180060001000a00000006000200110000001400030000000000000000000000000000000001060004001f900000480002801400010000000000000000000000000000000000060002001f900000080003000200000008000400010000000800050000000000080006000000000006000b0002000000"], 0x8c}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)='ping\x00', 0x5, 0x0, &(0x7f0000000300)={0xa, 0x1f90, 0x0, @loopback}, 0x1c) write(r3, &(0x7f00000000c0)='1\x00', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d283279ca35f820d073a1f7a0e134b89c8a9433c78e6698004ab5f3584de90135190d323bf6d75843821518979868ae7c7734c0", 0xc8) 5.384560347s ago: executing program 0 (id=671): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x27, 0x9, 0x80000, 0xfe00000, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x80893}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x2, @loopback, 0x7}, 0xfffffffffffffd70) shutdown(r1, 0x2) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x89a, @local, 0x9}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpuidle/current_governor\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001040)=ANY=[@ANYBLOB="400100001000130726bd000000000000ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe88000000000000000000000000fe010000000033000000fe8000000000000000000000000000aa000000000000000000000000000000000b000000000000000a000000000000000600000000000000000000000000000000000000000000000300000000000000000000000000000007000000000000000200000000000000f8ffffff7fffffff0c000000000000000200000029bd700000000000020004000000000048000100626c616b6532732d3232342d61726d"], 0x140}, 0x1, 0x0, 0x0, 0xc0}, 0x4840) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x40) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r8, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8, 0x20}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.463459635s ago: executing program 0 (id=673): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a0103070000002cbd7000fddbdf2105001a007f00000100000000000000000000000000ffff2700108aaa56f7369ba8"], 0x38}}, 0x40004) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat(0xffffffffffffff9c, &(0x7f0000001f40)='./file0\x00', 0x20842, 0x8e) write$P9_RLERRORu(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="d1cc67"], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x82c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xab1, 0x10000, 0x0, 0x1000051}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r7, r8, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r6, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='hpfs\x00', 0x214003, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000b00)={'ip6tnl0\x00', &(0x7f0000000a80)={'ip6_vti0\x00', 0x0, 0x4, 0x96, 0x9, 0x7, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x80, 0x7800, 0x0, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) sendmmsg$inet(r1, &(0x7f0000000e00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000480)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000000a40)=[{&(0x7f00000004c0)="4bf63ec05dec541d12b9402e107e64db6c05c9f0a2cfc47ed4600fd6df1ccdd509583ee56c446c215d68f8dfeb33ea9ac6c32ae51e2cf07d76ab2a127782d314099b180146e316628ac161960aa8506105", 0x51}, {&(0x7f0000000540)="e48866b3d16d938bd07b77b25752d2b1a37ecb69ff1ce4030fc9aebf39a38aff183b02f3c1e2e224ea83b138dcc0b29aed39bf6f7a236c6be2e2c1a07e692414f96ec1c9651ccbae9e948daa6ef800b04ca1afe6c086ca44701efdf0f845017b7b3b1b8bd090ddf3f328519821bc06976664d965dfe444128760e9e627772cbaff960cb0ffff4f9b20cabd2c6364053446be", 0x92}, {&(0x7f0000000600)="ca941da0d5c3ebf6d8d3d3fce137cb99c8c9cc1e0cc1442e546dc11cebff6453a9097878f8f327bd506fb7b5d747d0856a31362aee44989f0da884087439441b3510ebe9473ae97d6fa0fdfd9575e3a244f5a5f62825f61bb56b08f7fac211863fa08b5f8730270bed9ad27cdc5ef5c85769df225a65adf6142691c582a4b48f21aa7280c3d20caade30713125b75191594d4a539bd0f5a86197adb75933bda049661d652c77ed8672a020e15eb7c057a59d", 0xb2}, {&(0x7f0000000700)="5a0bd11fa215dda8304d16860967c55ad84e337cdaef87bca6d7586e643e42131682205ba928292c8446ce90ecddf69b2dcb07a635ea0d243d65c95074986ee33838b05085be843b120f87f283196a996062a521a11d5a606167bc83c0a413146e6ed853f354f4310b", 0x69}, {&(0x7f0000000800)="7e3e3696b9d346b6d9a8d6aa68cb5cdea0394180889e73e603f7c04182b93ca7deb4dc73eef13c7ccf97434c8d4f04e7f6d18877ce8a929f", 0x38}, {&(0x7f0000000840)="d276efd42e6bc49de1d3d7169e456ab91cba3157675da1bf996789f25b9dfdb28e3aee8c3e8ce9caabed6be38a5a9fc0004a96b544", 0x35}, {&(0x7f0000000880)}, {0x0}], 0x8, &(0x7f0000000c80)=ANY=[@ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="ac141434ffffffff18000008000000000076e998d5000000", @ANYRES32, @ANYBLOB="ac1414aa00000000"], 0x168}}], 0x2, 0x20008000) 4.032107819s ago: executing program 2 (id=674): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$btrfs_control(0xffffff9c, 0x0, 0x108400, 0x0) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0xe000, 0x4, &(0x7f0000ff1000/0xe000)=nil) getsockname$packet(r6, 0x0, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000440)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, [@generic={0x63, 0x1, 0x1, 0xe0}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x60880, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r7) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0643381c90c95f0c932b639be58f07d71c53dfa482d502947b05d647b336402235c36606b1d6c3e926a7af5b2df0f933a69e6ca643839462b4d85238dea8d80df89a21476f5ebed60ef0c4bd12d1eed6efe136a127314b2b8b218ce4f92784b5a4ac17c04bd12cc2c372e4a2f603528a9860e256063943e0a0f26e62c5b039458eda605e553f45ecb12b55ee67e6aced27f89c57c4373203425d4fdb1c301a9a2dc223c59ce03fd9f691574319b062b38cb651b9ea9ca044f9d8a8aaaefc6df744bbf687aa60cdcb856373f066b0089fff95baf57400", @ANYBLOB="010528bf7000fcdbdf251200000018000180140002006272696467655f736c6176655f30000008000700080000000800090010000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004814) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000406010800000000000000060a0000050500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) 3.805684608s ago: executing program 3 (id=675): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="a109a81b133d", 0x0, 0x0, 0x10012, 0x0, 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x2000000022ff, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x262) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x34, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYRESOCT, @ANYRESDEC=r2], 0x4c}, 0x1, 0x0, 0x0, 0x24000014}, 0x24050050) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(0xffffffffffffffff, 0x800c4151, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)="02f7fdce8391e730ad94494c9a04d8a3196e7f59e7a3a3a99be7e9176bd8fcab613343913b813a653520fab4b006e5b530629457f8c883347c62396a5b483208a6c72b17b197841e27f734b2e92ceae92a8fd1f95d03376a2ad9c515e1cd860384e5c94b9052ff9bc9483a18c2eec2fabaed97708c537a1c5e0c7898e8703a5399014c48a5c151efab55f78eccba156e1a4273ff4dedfe6938af90a925fad4126e7279009cc1c89d1c74758f3bd26426687c5dbf93203c7946f03f6372f044eb79d55d66597fc2c0192c55d1", 0xcc}) syz_emit_ethernet(0x6a, &(0x7f0000000140)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a27f2", 0x34, 0x2c, 0x0, @remote, @local, {[@hopopts={0x3b, 0x1, '\x00', [@ra={0x5, 0x2, 0x800}, @ra={0x5, 0x2, 0xd259}, @ra={0x5, 0x2, 0x2}]}, @srh={0x33, 0x0, 0x4, 0x0, 0x5, 0x60, 0xfffd}], {{0x8000, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 3.51662592s ago: executing program 0 (id=676): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_init_net_socket$llc(0x1a, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x29, 0x10, 0x41, 0x5}}) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x18015) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x72}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x10120, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mount(0x0, &(0x7f0000000340)='./sys\x00', 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840) write(0xffffffffffffffff, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x4004050) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x4000010, r0, 0x7c311000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) uname(&(0x7f0000000300)=""/4096) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c) 2.956447862s ago: executing program 1 (id=677): inotify_init() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000072c0)=@delchain={0x498, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x460, 0x2, [@TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x0, 0x1, {0x4e, 0x2, 0x2, 0x80, 0x6, 0x1}, {0x8, 0x0, 0xfa, 0xd6a7, 0x9, 0x401}, 0xfff, 0x5, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x2, 0x2, 0xffff, 0x4, 0x7ff, 0x2, 0x0, 0x3ff, 0xe2, 0x7, 0x2, 0x8, 0x8, 0x1, 0x0, 0x6, 0x6, 0xc5, 0xf, 0xc1e, 0xffff, 0x6, 0x3, 0x4, 0x7, 0x10000, 0x9, 0x1, 0x6, 0x5, 0xb, 0x3a, 0x400, 0x5, 0x4, 0x0, 0x7, 0x8, 0x7fff, 0x0, 0x8000, 0x0, 0x2, 0x1, 0x8, 0x6, 0xf, 0x2, 0x7, 0x7, 0xffff159e, 0x2, 0x7, 0x200, 0x0, 0x1, 0x9, 0x81, 0x5, 0x7fff, 0x4, 0x6, 0x3652, 0x1, 0x5, 0xffff, 0xc33, 0x1f0, 0x7, 0x8000, 0x81, 0x8, 0x6, 0x4, 0x5, 0x5, 0x5, 0x183, 0x6, 0x4, 0x6, 0x5, 0x5, 0x7ff, 0x9, 0x6, 0x25, 0x6, 0x7ff, 0x7, 0x6, 0x8, 0x6, 0x3, 0x10000, 0xb5d0, 0x10001, 0x4, 0x1, 0x42, 0x3, 0x314, 0x1800000, 0x7, 0x48, 0xffffffa8, 0xfffffff0, 0x2, 0x5, 0x7, 0x0, 0x7fff, 0x1c0, 0x5, 0x7, 0x0, 0x3, 0x1, 0x10001, 0x2, 0x644, 0x6, 0x2, 0x3ff, 0x7, 0xffffffff, 0xfff, 0xb, 0x101, 0xfffff001, 0x155, 0x0, 0xcb, 0x8, 0xc1, 0xfffffffd, 0x1, 0x9, 0x2, 0xea, 0x100, 0x1000, 0x9, 0xfffffffd, 0x400, 0x3, 0xa, 0x7, 0x5, 0xa, 0x2, 0x3, 0xff, 0x2, 0x2, 0x4, 0x4, 0x9, 0x2, 0x3, 0x2, 0xb89, 0x10, 0x70cf, 0xf, 0x9, 0x4, 0x2, 0x40, 0x0, 0x533, 0x1ef, 0x4, 0xef, 0xee, 0x2, 0x8, 0x1, 0xfffffffe, 0x5, 0x3, 0x0, 0x9, 0x1, 0x4, 0x81, 0xff, 0x80000000, 0x9, 0x8, 0x2, 0x3, 0x5, 0x7, 0x6, 0x1cfc8, 0x80000001, 0x1fc3, 0x387d, 0x3, 0x0, 0x9, 0x5, 0x5f, 0x10001, 0x4, 0x1000, 0x400, 0xe, 0x8, 0xda, 0xd, 0x6, 0x4, 0x80000001, 0x9, 0x100, 0xe, 0x0, 0x80000000, 0x1, 0x5, 0x3ff, 0x23, 0x6, 0xfffffffa, 0x40, 0x6, 0x6, 0x4, 0x1, 0x7, 0x80000001, 0x3, 0x9, 0x17, 0x1, 0xb, 0x9, 0x1, 0x40, 0x3, 0x463, 0x0, 0xa, 0x70, 0x0, 0x4800, 0x80000001, 0xd3, 0x0, 0x6, 0x5, 0x4]}]}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r4) syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r7 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x1000000, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x13, 0x4}) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000003c0)={r5, 0x0, 0x5a}, &(0x7f0000000980)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f00000004c0)=""/90) listen(r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.580336313s ago: executing program 3 (id=678): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$unix(r2, &(0x7f00000059c0)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000005940)=[@rights={{0x14, 0x1, 0x1, [r1, r1]}}, @cred={{0x18, 0x1, 0x2, {r0}}}, @cred={{0x18, 0x1, 0x2, {r0, 0xee00}}}], 0x44, 0x4000010}, 0x4840) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x43, 0x0) chdir(&(0x7f0000000100)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x20846, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="3bd900000a00462000000407ff0200000000000000000000000000017f00"/102], 0x8c) socket$packet(0x11, 0x3, 0x300) 2.577079007s ago: executing program 2 (id=686): mount(0x0, 0x0, &(0x7f0000001040)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000a0)='./proc/net/afs/cells\x00', 0x22a02, 0x0) pread64(r0, &(0x7f0000000180)=""/188, 0xbc, 0xc) r1 = openat(r0, &(0x7f0000002000)='./dev/mapper/control\x00', 0x200002, 0x2) ioctl(r1, 0xc138fd03, &(0x7f0000003000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") ioctl(r1, 0xc138fd09, &(0x7f0000003000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001000000", @ANYRES32, @ANYBLOB="08000000dd0000000000", @ANYRES32=0x0, @ANYRES32], 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r6 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000280), 0x20000, 0x0) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f00000002c0)={&(0x7f0000343000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) recvmmsg(r2, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000180)=""/92, 0x5c}, {&(0x7f0000000040)=""/224, 0xe0}], 0x3}, 0x72}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x40018000}], 0x3, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 2.444759977s ago: executing program 0 (id=679): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) r0 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x400) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1a) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000080)={0x78, 0x4, 0x6}) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x49cdee) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000140)='addr=127.0.0.1,port=2049,proto=udp,vers=3,mountport=2049,mountproto=udp,soft,timeo=1,retrans=1\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000002060108000000000000000007c041dfcdafbd6600000505"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001a00)={0xf, {"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", 0x1000}}, 0x1006) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002fc0)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x400, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x7}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/timer_list\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f00000000c0)=0x8e, 0x180000504) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40bc5311, &(0x7f0000000140)={0x80, 0x1}) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x80000) unshare(0x2c020400) 2.076308833s ago: executing program 0 (id=680): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000fcffffff0000000003000008850000002800000085000000a0"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0xf, r0, 0x4b36baea9e1c7e99}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="000126bd700001b133d62ec562bab7670a5b99ea33d7"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20048004) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fd, 0x0, 0x3, 0x3}, 0x10) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/36, 0x24}], 0x1}, 0x4}], 0x1, 0x400101a0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x34b8, &(0x7f0000000500)={0x0, 0x12d9, 0x20, 0x3, 0xe9}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000400)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r5}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r9 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) write$binfmt_register(r10, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'tracefs\x00', 0x3a, '*:@{\':', 0x3a, './trace'}, 0x35) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) 1.692657671s ago: executing program 1 (id=681): r0 = socket(0x26, 0x5, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x6c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x38130d1, 0x0) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaefbbbbbbbbbb"], 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) sched_getaffinity(r1, 0x8, &(0x7f0000000280)) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000080)='btrfs\x00', 0xc000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32=r6, @ANYBLOB="08003400ff01000005003300f0"], 0x2c}}, 0x18) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x2}, 0x1c) add_key(&(0x7f0000000300)='trusted\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)="82bff7c65af3243be8918d3bc0c0b30876e5a1b8edb5b9f043eedc277250480cb7308caa34e42b915a6c35036e7906c3dfdff7f597befd4327db37de6a8668a7024ce4e3b73738f9130707a26a0bff467e323fabb92e", 0x56, 0xfffffffffffffff9) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1.002628241s ago: executing program 2 (id=682): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() r2 = syz_open_dev$usbfs(0x0, 0x80, 0x113201) read$usbfs(r2, &(0x7f0000000600)=""/234, 0xea) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000054000180060001000a000007000002001100000014000300000000000000000000000000135400000001060004001f900000070006007272000008000800000000000c0007000000000000000000080009008000"], 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB="9a29ed7569b83f038a1f7bc55fd78b61732746fb05d6f069c5890f8cf79de395fd3b9a0748eae3870c5ce5f8066b5de13f729d4ba34375ee126e11b8ee6d606974c70e400469bd950b6b6d70d5b1d3c15f693b61f336845dfc47dfe5d2cc3d05720b4446c26118fe77af088793ca5a2d638f9d6dc0054baee3799414468108fce3153d5e9b3f18b77e3703bcbb1d41ff7a7ecd8a92b41e393ca75ee901e2f00800000030", @ANYRES16=r5, @ANYBLOB="010000000000000000000500000030000180060001000a00000006000200110000001400030000000000000000000000000000000001060004001f900000480002801400010000000000000000000000000000000000060002001f900000080003000200000008000400010000000800050000000000080006000000000006000b0002000000"], 0x8c}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)='ping\x00', 0x5, 0x0, &(0x7f0000000300)={0xa, 0x1f90, 0x0, @loopback}, 0x1c) write(r3, &(0x7f00000000c0)='1\x00', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d283279ca35f820d073a1f7a0e134b89c8a9433c78e6698004ab5f3584de90135190d323bf6d75843821518979868ae7c7734c0", 0xc8) 797.505659ms ago: executing program 0 (id=683): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) socket(0x2, 0x80805, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r0, @ANYBLOB='\a='], 0x0) r1 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, 0x0) r10 = dup(r9) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000000000)={0x1, r10}) r11 = dup(r7) syz_ublk_setup_queues(r11, r6, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x77fffa, 0x0, 0x2000, 0x10000000, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35ba, 0x100, 0x0, 0x30b, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x167}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xffd9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x81}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x7f}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) ioctl$KDENABIO(r1, 0x4b36) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x9}, 0x0, &(0x7f0000000180)={0x1ff, 0x1, 0x2, 0x4, 0x3, 0x3152eb0d, 0x0, 0xffffffffffffffff}, 0x0, 0x0) write$P9_RVERSION(r1, &(0x7f0000002200)=ANY=[], 0xfffffcd9) r12 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @local, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) landlock_restrict_self(r12, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 683.769ms ago: executing program 3 (id=684): sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="000128bd7000fedbdf25090000002800028008000200020056370080080001020000000014000380080002000700000008000100080000008a2c289c75a3418affed036a69c7f3a45d3a563400"/89], 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x24040821) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000001c0)={0x200000, 0x200004, 0x0, 0x0, 0x0, 0x5}) r0 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r3) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000000000)) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$F2FS_IOC_GET_FEATURES(r1, 0xff06, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x11, 0x2, 0x0) 0s ago: executing program 1 (id=685): inotify_init() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000072c0)=@delchain={0x498, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x460, 0x2, [@TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x0, 0x1, {0x4e, 0x2, 0x2, 0x80, 0x6, 0x1}, {0x8, 0x0, 0xfa, 0xd6a7, 0x9, 0x401}, 0xfff, 0x5, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x2, 0x2, 0xffff, 0x4, 0x7ff, 0x2, 0x0, 0x3ff, 0xe2, 0x7, 0x2, 0x8, 0x8, 0x1, 0x0, 0x6, 0x6, 0xc5, 0xf, 0xc1e, 0xffff, 0x6, 0x3, 0x4, 0x7, 0x10000, 0x9, 0x1, 0x6, 0x5, 0xb, 0x3a, 0x400, 0x5, 0x4, 0x0, 0x7, 0x8, 0x7fff, 0x0, 0x8000, 0x0, 0x2, 0x1, 0x8, 0x6, 0xf, 0x2, 0x7, 0x7, 0xffff159e, 0x2, 0x7, 0x200, 0x0, 0x1, 0x9, 0x81, 0x5, 0x7fff, 0x4, 0x6, 0x3652, 0x1, 0x5, 0xffff, 0xc33, 0x1f0, 0x7, 0x8000, 0x81, 0x8, 0x6, 0x4, 0x5, 0x5, 0x5, 0x183, 0x6, 0x4, 0x6, 0x5, 0x5, 0x7ff, 0x9, 0x6, 0x25, 0x6, 0x7ff, 0x7, 0x6, 0x8, 0x6, 0x3, 0x10000, 0xb5d0, 0x10001, 0x4, 0x1, 0x42, 0x3, 0x314, 0x1800000, 0x7, 0x48, 0xffffffa8, 0xfffffff0, 0x2, 0x5, 0x7, 0x0, 0x7fff, 0x1c0, 0x5, 0x7, 0x0, 0x3, 0x1, 0x10001, 0x2, 0x644, 0x6, 0x2, 0x3ff, 0x7, 0xffffffff, 0xfff, 0xb, 0x101, 0xfffff001, 0x155, 0x0, 0xcb, 0x8, 0xc1, 0xfffffffd, 0x1, 0x9, 0x2, 0xea, 0x100, 0x1000, 0x9, 0xfffffffd, 0x400, 0x3, 0xa, 0x7, 0x5, 0xa, 0x2, 0x3, 0xff, 0x2, 0x2, 0x4, 0x4, 0x9, 0x2, 0x3, 0x2, 0xb89, 0x10, 0x70cf, 0xf, 0x9, 0x4, 0x2, 0x40, 0x0, 0x533, 0x1ef, 0x4, 0xef, 0xee, 0x2, 0x8, 0x1, 0xfffffffe, 0x5, 0x3, 0x0, 0x9, 0x1, 0x4, 0x81, 0xff, 0x80000000, 0x9, 0x8, 0x2, 0x3, 0x5, 0x7, 0x6, 0x1cfc8, 0x80000001, 0x1fc3, 0x387d, 0x3, 0x0, 0x9, 0x5, 0x5f, 0x10001, 0x4, 0x1000, 0x400, 0xe, 0x8, 0xda, 0xd, 0x6, 0x4, 0x80000001, 0x9, 0x100, 0xe, 0x0, 0x80000000, 0x1, 0x5, 0x3ff, 0x23, 0x6, 0xfffffffa, 0x40, 0x6, 0x6, 0x4, 0x1, 0x7, 0x80000001, 0x3, 0x9, 0x17, 0x1, 0xb, 0x9, 0x1, 0x40, 0x3, 0x463, 0x0, 0xa, 0x70, 0x0, 0x4800, 0x80000001, 0xd3, 0x0, 0x6, 0x5, 0x4]}]}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r4) syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r7 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x1000000, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x13, 0x4}) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000003c0)={r5, 0x0, 0x5a}, &(0x7f0000000980)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f00000004c0)=""/90) listen(r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): .2.62'. [ 72.631432][ T6249] nvme nvme0: failed to connect socket: -111 [ 73.637668][ C3] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 73.642843][ T10] usb 7-1: USB disconnect, device number 4 [ 74.541872][ T6297] cgroup: Unknown subsys name 'rlimit' [ 75.178192][ T6309] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 75.242476][ T6309] kAFS: No cell specified [ 75.374458][ T6313] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 81.467166][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 81.467227][ T42] audit: type=1326 audit(1790232038.841:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6347 comm="syz.0.85" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 81.467432][ T42] audit: type=1326 audit(1790232038.841:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6347 comm="syz.0.85" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 81.467612][ T6354] jffs2: notice: (6354) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 81.477583][ T42] audit: type=1326 audit(1790232038.851:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6347 comm="syz.0.85" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71b75ab code=0x7ffc0000 [ 81.477613][ T42] audit: type=1326 audit(1790232038.851:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6347 comm="syz.0.85" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 81.477633][ T42] audit: type=1326 audit(1790232038.851:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6347 comm="syz.0.85" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 81.477652][ T42] audit: type=1326 audit(1790232038.851:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6347 comm="syz.0.85" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707efec code=0x7ffc0000 [ 81.477672][ T42] audit: type=1326 audit(1790232038.851:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6347 comm="syz.0.85" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 81.477690][ T42] audit: type=1326 audit(1790232038.851:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6347 comm="syz.0.85" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 81.477709][ T42] audit: type=1326 audit(1790232038.851:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6347 comm="syz.0.85" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707efec code=0x7ffc0000 [ 81.477728][ T42] audit: type=1326 audit(1790232038.851:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6347 comm="syz.0.85" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 81.481612][ T45] IPVS: starting estimator thread 0... [ 81.483257][ T6355] IPVS: ip_vs_add_dest(): server weight less than zero [ 81.569439][ T6358] IPVS: using max 43 ests per chain, 103200 per kthread [ 81.918221][ T6070] Process accounting resumed [ 81.930595][ T6349] tipc: Started in network mode [ 81.930606][ T6349] tipc: Node identity , cluster identity 4711 [ 81.930614][ T6349] tipc: Failed to set node id, please configure manually [ 81.930631][ T6349] tipc: Enabling of bearer rejected, failed to enable media [ 82.257860][ T6363] : renamed from bond_slave_0 (while UP) [ 83.045566][ T6378] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 83.130024][ T6384] jffs2: notice: (6384) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 83.151618][ T6378] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 83.152216][ T6378] overlayfs: failed to look up (tracing) for ino (-66) [ 84.329004][ T5748] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 84.451729][ T6391] warning: `syz.0.94' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.689411][ T855] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 84.698773][ T6405] netlink: 'syz.3.103': attribute type 1 has an invalid length. [ 84.698789][ T6405] netlink: 756 bytes leftover after parsing attributes in process `syz.3.103'. [ 84.849397][ T855] usb 7-1: Using ep0 maxpacket: 8 [ 84.850471][ T855] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 84.851528][ T855] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 84.851552][ T855] usb 7-1: config 179 has no interface number 0 [ 84.851581][ T855] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 84.851601][ T855] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 84.851624][ T855] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 84.851644][ T855] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 84.851664][ T855] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 84.851693][ T855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.855218][ T6401] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 85.081027][ T6393] netlink: 16 bytes leftover after parsing attributes in process `syz.2.95'. [ 85.105148][ T855] usb 7-1: USB disconnect, device number 5 [ 85.105230][ C2] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 85.105250][ C2] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 85.250802][ T6405] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 86.886055][ T6430] cgroup: Unknown subsys name 'rlimit' [ 88.675381][ T6440] : renamed from bond_slave_0 (while UP) [ 89.254829][ T6447] /dev/loop1: Can't open blockdev [ 90.292250][ T6462] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 90.292269][ T6462] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 90.471721][ T5748] Bluetooth: hci3: command 0x0406 tx timeout [ 90.525710][ T1160] IPVS: starting estimator thread 0... [ 90.679368][ T6467] IPVS: using max 43 ests per chain, 103200 per kthread [ 91.283305][ T42] kauditd_printk_skb: 31 callbacks suppressed [ 91.283318][ T42] audit: type=1804 audit(1790232048.661:65): pid=6472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.113" name="bus" dev="ramfs" ino=11060 res=1 errno=0 [ 91.286355][ T42] audit: type=1804 audit(1790232048.661:66): pid=6472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.113" name="bus" dev="ramfs" ino=11060 res=1 errno=0 [ 91.354896][ T6454] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 91.364418][ T6454] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 91.364562][ T6454] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 91.364808][ T6454] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 91.365311][ T6454] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 91.386712][ T6454] pci 0000:00:01.0: Adding to iommu group 1 [ 91.401402][ T6454] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 91.401423][ T6454] pci 0000:00:01.0: vgaarb: bridge control possible [ 91.401437][ T6454] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 91.420514][ T6454] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 91.426469][ T6454] pci 0000:00:03.0: BAR 0 [io 0xc0a0-0xc0bf] [ 91.426552][ T6454] pci 0000:00:03.0: BAR 1 [mem 0xfeaf5000-0xfeaf5fff] [ 91.426795][ T6454] pci 0000:00:03.0: BAR 4 [mem 0xfe200000-0xfe203fff 64bit pref] [ 91.443600][ T6454] pci 0000:00:03.0: Adding to iommu group 3 [ 91.459825][ T6454] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 91.460927][ T6454] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned [ 91.464793][ T6454] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 91.464948][ T6454] pci 0000:00:03.0: BAR 1 [mem 0x81001000-0x81001fff]: assigned [ 91.466780][ T6454] pci 0000:00:03.0: BAR 0 [io 0x2000-0x201f]: assigned [ 91.471330][ T6454] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 91.483122][ T6454] [drm] Found bochs VGA, ID 0xb0c5. [ 91.483138][ T6454] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 91.499152][ T6454] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 91.668628][ T6454] Console: switching to colour frame buffer device 160x50 [ 91.810153][ T6454] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 92.312569][ T6483] Console: switching to colour dummy device 80x25 [ 93.396070][ T6491] IPVS: ip_vs_add_dest(): server weight less than zero [ 93.469339][ T42] audit: type=1326 audit(1790232050.761:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.3.118" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fec code=0x7ffc0000 [ 93.469374][ T42] audit: type=1326 audit(1790232050.761:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.3.118" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fec code=0x7ffc0000 [ 93.469394][ T42] audit: type=1326 audit(1790232050.761:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.3.118" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71475ab code=0x7ffc0000 [ 93.469414][ T42] audit: type=1326 audit(1790232050.761:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.3.118" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fec code=0x7ffc0000 [ 93.469435][ T42] audit: type=1326 audit(1790232050.761:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.3.118" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fec code=0x7ffc0000 [ 93.469515][ T42] audit: type=1326 audit(1790232050.771:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.3.118" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f45fec code=0x7ffc0000 [ 93.469609][ T42] audit: type=1326 audit(1790232050.771:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.3.118" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fec code=0x7ffc0000 [ 93.469722][ T42] audit: type=1326 audit(1790232050.771:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.3.118" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fec code=0x7ffc0000 [ 93.903313][ T70] IPVS: starting estimator thread 0... [ 93.999333][ T6495] IPVS: using max 43 ests per chain, 103200 per kthread [ 94.483971][ T6494] blktrace: Concurrent blktraces are not allowed on sg0 [ 95.059729][ T989] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 95.210564][ T989] usb 6-1: Using ep0 maxpacket: 8 [ 95.211460][ T989] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 95.213389][ T989] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 95.213409][ T989] usb 6-1: config 179 has no interface number 0 [ 95.213440][ T989] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 95.213461][ T989] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 95.213484][ T989] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 95.213503][ T989] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 95.213524][ T989] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 95.213558][ T989] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.233207][ T6513] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 95.448032][ T6508] netlink: 16 bytes leftover after parsing attributes in process `syz.1.123'. [ 95.474976][ T25] usb 6-1: USB disconnect, device number 2 [ 95.474987][ C3] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 95.475026][ C3] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 96.252152][ T6528] bond0: invalid ARP target specified [ 99.435635][ T42] kauditd_printk_skb: 33 callbacks suppressed [ 99.435648][ T42] audit: type=1326 audit(1790232056.811:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.0.131" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 99.435813][ T42] audit: type=1326 audit(1790232056.811:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.0.131" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 99.436765][ T42] audit: type=1326 audit(1790232056.811:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.0.131" exe="/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf707efec code=0x7ffc0000 [ 99.436866][ T42] audit: type=1326 audit(1790232056.811:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.0.131" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 99.437045][ T42] audit: type=1326 audit(1790232056.811:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.0.131" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 99.437348][ T42] audit: type=1326 audit(1790232056.811:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.0.131" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf707efec code=0x7ffc0000 [ 99.437476][ T42] audit: type=1326 audit(1790232056.811:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.0.131" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 99.437652][ T42] audit: type=1326 audit(1790232056.811:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.0.131" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 99.437981][ T42] audit: type=1326 audit(1790232056.811:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.0.131" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf707efec code=0x7ffc0000 [ 99.438073][ T42] audit: type=1326 audit(1790232056.811:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.0.131" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 100.544887][ T6548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.339063][ T6580] netlink: 'syz.0.144': attribute type 1 has an invalid length. [ 102.339104][ T6580] netlink: 756 bytes leftover after parsing attributes in process `syz.0.144'. [ 103.128772][ T6580] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 103.548192][ T6594] cgroup: Unknown subsys name 'rlimit' [ 106.717846][ T6616] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 107.029166][ T6619] gadgetfs: bound to dummy_udc driver [ 107.269339][ T855] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 107.269569][ C2] gadgetfs: connected [ 107.270460][ T855] gadgetfs: disconnected [ 107.439600][ C2] gadgetfs: connected [ 107.440649][ T855] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 107.440958][ T855] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 107.440987][ T855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.495135][ C2] gadgetfs: configuration #1 [ 108.777389][ T6619] gadgetfs: suspended from state 3 [ 108.784074][ T6619] gadgetfs: disconnected [ 108.785751][ T5826] usb 5-1: USB disconnect, device number 4 [ 111.011186][ T6648] netlink: 'syz.2.151': attribute type 1 has an invalid length. [ 111.011211][ T6648] netlink: 756 bytes leftover after parsing attributes in process `syz.2.151'. [ 111.335725][ T6648] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 112.655820][ T6665] lo: entered allmulticast mode [ 112.751519][ T6664] lo: left allmulticast mode [ 112.841517][ T6667] Bluetooth: MGMT ver 1.23 [ 113.257962][ T6671] gadgetfs: bound to dummy_udc driver [ 113.501534][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 113.501745][ C2] gadgetfs: connected [ 113.501883][ T25] gadgetfs: disconnected [ 113.884900][ T6678] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 113.954606][ T6681] gadgetfs: bound to dummy_udc driver [ 114.265804][ C3] vcan0: j1939_tp_rxtimer: 0xffff88805f319800: rx timeout, send abort [ 114.339473][ T25] gadgetfs: suspended from state 2 [ 114.479617][ T25] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 114.480252][ C2] gadgetfs: connected [ 114.484474][ T25] gadgetfs: disconnected [ 114.629655][ C2] gadgetfs: connected [ 114.630614][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 114.630920][ T25] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 114.630951][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.633645][ C2] gadgetfs: configuration #1 [ 114.766098][ C3] vcan0: j1939_tp_rxtimer: 0xffff88805f32fc00: rx timeout, send abort [ 114.767124][ C3] vcan0: j1939_tp_rxtimer: 0xffff88805f319800: abort rx timeout. Force session deactivation [ 115.014803][ T6674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.259268][ C3] vcan0: j1939_tp_rxtimer: 0xffff88805f353800: rx timeout, send abort [ 115.259951][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f353800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 115.270669][ C3] vcan0: j1939_tp_rxtimer: 0xffff88805f32fc00: abort rx timeout. Force session deactivation [ 115.998815][ T6681] gadgetfs: suspended from state 3 [ 115.998880][ T6681] gadgetfs: disconnected [ 116.001544][ T5826] usb 5-1: USB disconnect, device number 6 [ 116.284459][ T6708] netlink: 'syz.2.169': attribute type 7 has an invalid length. [ 116.679361][ T5812] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 116.860578][ T5812] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 116.861906][ T5812] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 116.861919][ T5812] usb 8-1: config 0 has no interface number 0 [ 116.861937][ T5812] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 116.861949][ T5812] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 116.861968][ T5812] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.151620][ T5812] usb 8-1: config 0 descriptor?? [ 117.154080][ T6702] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 117.706609][ T5812] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 117.709869][ T5812] usb 8-1: USB disconnect, device number 3 [ 118.430246][ T6727] jffs2: notice: (6727) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 118.740924][ T6731] Unable to extract alua_access_type [ 118.882761][ T6739] netlink: 84 bytes leftover after parsing attributes in process `syz.2.173'. [ 119.581002][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.175'. [ 121.015799][ T6766] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 121.015927][ T6766] CPU: 2 UID: 0 PID: 6766 Comm: syz.3.180 Not tainted syzkaller #0 PREEMPT(full) [ 121.015953][ T6766] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 121.015960][ T6766] Call Trace: [ 121.015965][ T6766] [ 121.015970][ T6766] dump_stack_lvl+0x100/0x190 [ 121.015991][ T6766] sysfs_warn_dup.cold+0x1c/0x28 [ 121.016010][ T6766] sysfs_create_dir_ns+0x24b/0x2b0 [ 121.016057][ T6766] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 121.016088][ T6766] ? find_held_lock+0x2b/0x80 [ 121.016102][ T6766] ? kobject_add_internal+0x25f/0x930 [ 121.016118][ T6766] ? kobject_add_internal+0x25f/0x930 [ 121.016135][ T6766] ? class_dir_child_ns_type+0xd/0x60 [ 121.016149][ T6766] kobject_add_internal+0x2c8/0x930 [ 121.016166][ T6766] kobject_add+0x16a/0x1e0 [ 121.016181][ T6766] ? __pfx_kobject_add+0x10/0x10 [ 121.016197][ T6766] ? get_device_parent+0x1b3/0x4c0 [ 121.016215][ T6766] ? kobject_put+0xb9/0x640 [ 121.016233][ T6766] device_add+0x294/0x1970 [ 121.016244][ T6766] ? lockdep_init_map_type+0x5c/0x250 [ 121.016261][ T6766] ? __pfx_device_add+0x10/0x10 [ 121.016272][ T6766] ? lockdep_init_map_type+0x5c/0x250 [ 121.016288][ T6766] ? __init_waitqueue_head+0xca/0x150 [ 121.016310][ T6766] tty_register_device_attr+0x388/0x7f0 [ 121.016327][ T6766] ? lockdep_init_map_type+0x5c/0x250 [ 121.016344][ T6766] ? __pfx_tty_register_device_attr+0x10/0x10 [ 121.016364][ T6766] ? tty_port_init+0x156/0x1c0 [ 121.016382][ T6766] gsm_activate_mux+0x155/0x2a0 [ 121.016400][ T6766] gsmld_ioctl+0xbbc/0x15c0 [ 121.016415][ T6766] ? __pfx_gsmld_ioctl+0x10/0x10 [ 121.016436][ T6766] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 121.016456][ T6766] ? __pfx_gsmld_ioctl+0x10/0x10 [ 121.016466][ T6766] tty_compat_ioctl+0x396/0x420 [ 121.016482][ T6766] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 121.016499][ T6766] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 121.016513][ T6766] __do_fast_syscall_32+0x13a/0x8b0 [ 121.016528][ T6766] do_fast_syscall_32+0x32/0x70 [ 121.016540][ T6766] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 121.016555][ T6766] RIP: 0023:0xf7f45fec [ 121.016568][ T6766] Code: Unable to access opcode bytes at 0xf7f45fc2. [ 121.016573][ T6766] RSP: 002b:00000000f53c450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 121.016587][ T6766] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000404c4701 [ 121.016595][ T6766] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 121.016602][ T6766] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 121.016609][ T6766] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 121.016616][ T6766] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 121.016630][ T6766] [ 121.016918][ T6766] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 122.464445][ T6762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.926154][ T6778] jffs2: notice: (6778) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 123.946318][ T6778] jffs2: warning: (6778) jffs2_sum_write_data: Summary too big (12 data, -14 pad) in eraseblock at 0001e000 [ 126.529486][ T6802] netlink: 'syz.1.184': attribute type 1 has an invalid length. [ 126.529510][ T6802] netlink: 756 bytes leftover after parsing attributes in process `syz.1.184'. [ 126.823982][ T6802] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 127.574889][ T6816] jffs2: notice: (6816) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 1 of xref (0 dead, 1 orphan) found. [ 127.996919][ T35] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 128.173835][ T35] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 128.185121][ T35] usb 8-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 128.185186][ T35] usb 8-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 128.190853][ T35] usb 8-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 128.190873][ T35] usb 8-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 128.194077][ T35] usb 8-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 128.194158][ T35] usb 8-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 128.258699][ T35] usb 8-1: string descriptor 0 read error: -22 [ 128.262327][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.437019][ T6817] netlink: 'syz.1.198': attribute type 1 has an invalid length. [ 128.437034][ T6817] netlink: 756 bytes leftover after parsing attributes in process `syz.1.198'. [ 128.664033][ T6820] netlink: 56 bytes leftover after parsing attributes in process `syz.3.190'. [ 128.691530][ T6817] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 129.301260][ T25] usb 8-1: USB disconnect, device number 4 [ 130.132334][ T6831] netlink: 84 bytes leftover after parsing attributes in process `syz.1.194'. [ 130.384251][ T6836] overlay: Unknown parameter 'audit' [ 132.340675][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.232342][ T6070] Process accounting resumed [ 134.275012][ T6857] tipc: Started in network mode [ 134.275024][ T6857] tipc: Node identity , cluster identity 4711 [ 134.275032][ T6857] tipc: Failed to set node id, please configure manually [ 134.275049][ T6857] tipc: Enabling of bearer rejected, failed to enable media [ 134.884272][ T6865] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 134.892057][ T6865] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 134.892326][ T6865] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 134.892815][ T6865] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 134.895941][ T6865] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 134.956644][ T6865] pci 0000:00:01.0: Adding to iommu group 1 [ 134.966944][ T6865] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 134.966965][ T6865] pci 0000:00:01.0: vgaarb: bridge control possible [ 134.966976][ T6865] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 134.976080][ T6865] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 134.976364][ T6865] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 134.983387][ T6865] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 135.031132][ T6865] [drm] Found bochs VGA, ID 0xb0c5. [ 135.031146][ T6865] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 135.063218][ T6865] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 136.022835][ T6861] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 136.349598][ T6875] futex_wake_op: syz.0.205 tries to shift op by 144; fix this program [ 136.684859][ T6870] IPv6: sit1: Disabled Multicast RS [ 136.706454][ T6870] sit1: entered allmulticast mode [ 136.880565][ T6865] Console: switching to colour frame buffer device 160x50 [ 136.912644][ T6865] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 137.319343][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 137.319356][ T42] audit: type=1326 audit(1790232094.691:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.2.206" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 137.319464][ T42] audit: type=1326 audit(1790232094.701:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.2.206" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 137.321038][ T42] audit: type=1326 audit(1790232094.701:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.2.206" exe="/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf701efec code=0x7ffc0000 [ 137.321079][ T42] audit: type=1326 audit(1790232094.701:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.2.206" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 137.321114][ T42] audit: type=1326 audit(1790232094.701:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.2.206" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 137.321935][ T42] audit: type=1326 audit(1790232094.701:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.2.206" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf701efec code=0x7ffc0000 [ 137.321976][ T42] audit: type=1326 audit(1790232094.701:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.2.206" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 137.322011][ T42] audit: type=1326 audit(1790232094.701:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.2.206" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 137.322446][ T42] audit: type=1326 audit(1790232094.701:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.2.206" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf701efec code=0x7ffc0000 [ 137.322621][ T42] audit: type=1326 audit(1790232094.701:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.2.206" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 139.210027][ T6070] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 139.256495][ T6897] netlink: 'syz.0.211': attribute type 1 has an invalid length. [ 139.267960][ T6897] bond1: entered promiscuous mode [ 139.268186][ T6897] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.290497][ T6897] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.290664][ T6897] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 139.290674][ T6897] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 139.293754][ T6897] bond1: (slave ip6gre1): making interface the new active one [ 139.293767][ T6897] ip6gre1: entered promiscuous mode [ 139.294746][ T6897] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 139.369450][ T6070] usb 6-1: Using ep0 maxpacket: 32 [ 139.371236][ T6070] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 139.372504][ T6070] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 139.372524][ T6070] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.372537][ T6070] usb 6-1: config 0 has no interface number 0 [ 139.372570][ T6070] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 139.374345][ T6070] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.374372][ T6070] usb 6-1: Product: syz [ 139.374384][ T6070] usb 6-1: Manufacturer: syz [ 139.374395][ T6070] usb 6-1: SerialNumber: syz [ 139.377650][ T6070] usb 6-1: config 0 descriptor?? [ 139.388371][ T6070] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.119/input/input11 [ 140.139343][ T6910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.139863][ T6910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.172007][ T6910] /dev/loop1: Can't open blockdev [ 140.176043][ T6910] netlink: 96 bytes leftover after parsing attributes in process `syz.1.209'. [ 140.289685][ T6894] tipc: Started in network mode [ 140.289710][ T6894] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 140.290454][ T6894] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002 [ 140.302152][ T6894] tipc: Enabled bearer , priority 10 [ 140.326536][ T855] usb 6-1: USB disconnect, device number 3 [ 140.584276][ T6907] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 140.595029][ T6907] pci 0000:00:03.0: BAR 0 [io 0x2000-0x201f] [ 140.595100][ T6907] pci 0000:00:03.0: BAR 1 [mem 0x81001000-0x81001fff] [ 140.595308][ T6907] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref] [ 140.615032][ T6907] pci 0000:00:03.0: Adding to iommu group 3 [ 140.628265][ T6907] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned [ 140.634731][ T6907] pci 0000:00:03.0: BAR 1 [mem 0x81001000-0x81001fff]: assigned [ 140.635062][ T6907] pci 0000:00:03.0: BAR 0 [io 0x2000-0x201f]: assigned [ 140.992815][ T6924] IPVS: ip_vs_add_dest(): server weight less than zero [ 141.383387][ T25] tipc: Node number set to 1 [ 142.525010][ T42] kauditd_printk_skb: 43 callbacks suppressed [ 142.525021][ T42] audit: type=1326 audit(1790232099.901:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.1.219" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 142.525146][ T42] audit: type=1326 audit(1790232099.901:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.1.219" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 142.525966][ T42] audit: type=1326 audit(1790232099.901:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.1.219" exe="/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 142.526063][ T42] audit: type=1326 audit(1790232099.901:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.1.219" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 142.526151][ T42] audit: type=1326 audit(1790232099.901:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.1.219" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 142.526479][ T42] audit: type=1326 audit(1790232099.901:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.1.219" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 142.526623][ T42] audit: type=1326 audit(1790232099.901:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.1.219" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 142.526958][ T42] audit: type=1326 audit(1790232099.901:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.1.219" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 142.539926][ T42] audit: type=1326 audit(1790232099.921:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.1.219" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 142.539958][ T42] audit: type=1326 audit(1790232099.921:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.1.219" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 145.623565][ T6958] Console: switching to colour dummy device 80x25 [ 146.212342][ T6959] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 146.247976][ T6959] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 146.248210][ T6959] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 146.248757][ T6959] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 146.249663][ T6959] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 146.265963][ T6959] pci 0000:00:01.0: Adding to iommu group 1 [ 146.275473][ T6959] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 146.275488][ T6959] pci 0000:00:01.0: vgaarb: bridge control possible [ 146.275496][ T6959] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 146.283808][ T6959] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 146.283988][ T6959] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 146.289379][ T6959] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 146.556615][ T6959] [drm] Found bochs VGA, ID 0xb0c5. [ 146.556632][ T6959] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 146.574937][ T6959] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 146.776133][ T6959] Console: switching to colour frame buffer device 160x50 [ 146.807943][ T6959] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 147.152892][ T6973] IPv6: sit2: Disabled Multicast RS [ 147.153714][ T6973] sit2: entered allmulticast mode [ 147.231122][ T25] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 147.381916][ T25] usb 7-1: Using ep0 maxpacket: 32 [ 147.394068][ T25] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 147.395117][ T25] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 147.395140][ T25] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.395156][ T25] usb 7-1: config 0 has no interface number 0 [ 147.395187][ T25] usb 7-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 147.397447][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.397467][ T25] usb 7-1: Product: syz [ 147.397479][ T25] usb 7-1: Manufacturer: syz [ 147.397490][ T25] usb 7-1: SerialNumber: syz [ 147.401177][ T25] usb 7-1: config 0 descriptor?? [ 147.409163][ T25] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.119/input/input12 [ 147.964357][ T6989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.964714][ T6989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.978996][ T6989] netlink: 96 bytes leftover after parsing attributes in process `syz.2.225'. [ 148.076901][ T6992] tipc: Enabling of bearer rejected, already enabled [ 148.606255][ T5826] usb 7-1: USB disconnect, device number 6 [ 148.644814][ T6998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.230'. [ 150.467151][ T7018] IPVS: ip_vs_add_dest(): server weight less than zero [ 150.469462][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 150.469481][ T42] audit: type=1326 audit(1790232107.821:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.1.234" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 150.469526][ T42] audit: type=1326 audit(1790232107.821:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.1.234" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 150.469564][ T42] audit: type=1326 audit(1790232107.821:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.1.234" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71c75ab code=0x7ffc0000 [ 150.469602][ T42] audit: type=1326 audit(1790232107.821:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.1.234" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 150.469640][ T42] audit: type=1326 audit(1790232107.831:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.1.234" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 150.469674][ T42] audit: type=1326 audit(1790232107.831:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.1.234" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 150.469707][ T42] audit: type=1326 audit(1790232107.831:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.1.234" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 150.469742][ T42] audit: type=1326 audit(1790232107.831:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.1.234" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 150.469775][ T42] audit: type=1326 audit(1790232107.831:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.1.234" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 150.469808][ T42] audit: type=1326 audit(1790232107.831:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.1.234" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 152.059906][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.240'. [ 152.075734][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.240'. [ 152.081202][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.240'. [ 152.092035][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.240'. [ 152.715201][ T7044] mmap: syz.3.242 (7044) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 152.888406][ T7043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.241'. [ 153.915979][ T7057] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 153.925755][ T7057] pci 0000:00:03.0: BAR 0 [io 0x2000-0x201f] [ 153.925922][ T7057] pci 0000:00:03.0: BAR 1 [mem 0x81001000-0x81001fff] [ 153.926419][ T7057] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref] [ 153.971274][ T7057] pci 0000:00:03.0: Adding to iommu group 3 [ 153.996391][ T7057] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned [ 153.999046][ T7057] pci 0000:00:03.0: BAR 1 [mem 0x81001000-0x81001fff]: assigned [ 153.999376][ T7057] pci 0000:00:03.0: BAR 0 [io 0x2000-0x201f]: assigned [ 157.319413][ T989] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 157.489353][ T989] usb 8-1: Using ep0 maxpacket: 32 [ 157.489884][ T989] usb 8-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 157.492978][ T989] usb 8-1: config 0 has an invalid interface number: 119 but max is 0 [ 157.492992][ T989] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.493001][ T989] usb 8-1: config 0 has no interface number 0 [ 157.493018][ T989] usb 8-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 157.494831][ T989] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.494848][ T989] usb 8-1: Product: syz [ 157.494856][ T989] usb 8-1: Manufacturer: syz [ 157.494863][ T989] usb 8-1: SerialNumber: syz [ 157.498393][ T989] usb 8-1: config 0 descriptor?? [ 157.540249][ T989] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.119/input/input13 [ 157.793038][ T7101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.793386][ T7101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.807416][ T7101] netlink: 96 bytes leftover after parsing attributes in process `syz.3.254'. [ 157.878450][ T7104] tipc: Enabling of bearer rejected, already enabled [ 158.022443][ T25] usb 8-1: USB disconnect, device number 5 [ 159.989683][ T7121] netlink: 16 bytes leftover after parsing attributes in process `syz.2.258'. [ 160.428739][ T7127] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 161.076274][ T7133] netlink: 'syz.3.261': attribute type 1 has an invalid length. [ 161.282069][ T7133] bond1: entered promiscuous mode [ 161.286316][ T7133] 8021q: adding VLAN 0 to HW filter on device bond1 [ 162.838292][ T1041] Process accounting resumed [ 162.976893][ T7153] tipc: Started in network mode [ 162.976905][ T7153] tipc: Node identity , cluster identity 4711 [ 162.976913][ T7153] tipc: Failed to set node id, please configure manually [ 162.976930][ T7153] tipc: Enabling of bearer rejected, failed to enable media [ 163.539379][ T5736] Bluetooth: hci4: command 0x1003 tx timeout [ 163.541236][ T5740] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 164.399319][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 164.830757][ T7180] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 164.830803][ T7180] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 165.146694][ T5740] Bluetooth: hci1: command 0x0406 tx timeout [ 165.149033][ T5740] Bluetooth: hci2: command 0x0406 tx timeout [ 166.341325][ T7188] Console: switching to colour dummy device 80x25 [ 167.462210][ T7190] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 167.511565][ T7190] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 167.511676][ T7190] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 167.511863][ T7190] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 167.512667][ T7190] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 167.520919][ T7190] pci 0000:00:01.0: Adding to iommu group 1 [ 167.523783][ T7190] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 167.523800][ T7190] pci 0000:00:01.0: vgaarb: bridge control possible [ 167.523812][ T7190] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 167.547010][ T7190] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 167.547121][ T7190] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 167.551751][ T7190] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 167.581958][ T7190] [drm] Found bochs VGA, ID 0xb0c5. [ 167.581972][ T7190] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 167.638288][ T7190] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 167.797430][ T7190] Console: switching to colour frame buffer device 160x50 [ 167.827621][ T7190] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 168.222379][ T7205] netlink: 'syz.0.285': attribute type 1 has an invalid length. [ 168.222401][ T7205] netlink: 756 bytes leftover after parsing attributes in process `syz.0.285'. [ 168.434260][ T7205] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 168.643970][ T7219] Console: switching to colour dummy device 80x25 [ 168.717535][ T7216] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 168.782764][ T7221] netlink: 'syz.0.287': attribute type 1 has an invalid length. [ 168.782780][ T7221] netlink: 756 bytes leftover after parsing attributes in process `syz.0.287'. [ 168.913598][ T7222] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 168.929557][ T7222] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 168.929811][ T7222] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 168.930464][ T7222] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 168.932675][ T7222] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 169.326014][ T7222] pci 0000:00:01.0: Adding to iommu group 1 [ 169.360271][ T7222] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 169.360293][ T7222] pci 0000:00:01.0: vgaarb: bridge control possible [ 169.360306][ T7222] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 169.387076][ T7222] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 169.389366][ T7222] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 169.401361][ T7222] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 169.442119][ T7225] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 169.443252][ T7222] [drm] Found bochs VGA, ID 0xb0c5. [ 169.443264][ T7222] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 169.546667][ T7222] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 169.686594][ T7237] netlink: 'syz.0.291': attribute type 1 has an invalid length. [ 169.704911][ T7237] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.713543][ T7237] 9pnet_virtio: no channels available for device syz [ 169.867998][ T7222] Console: switching to colour frame buffer device 160x50 [ 169.901219][ T7222] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 171.096330][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.286'. [ 171.326114][ T7256] Console: switching to colour dummy device 80x25 [ 171.961622][ T7258] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 171.975100][ T7258] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 171.975219][ T7258] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 171.975397][ T7258] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 171.975732][ T7258] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 171.998370][ T7258] pci 0000:00:01.0: Adding to iommu group 1 [ 172.010201][ T7258] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 172.010215][ T7258] pci 0000:00:01.0: vgaarb: bridge control possible [ 172.010222][ T7258] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 172.025629][ T7258] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 172.026870][ T7258] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 172.034012][ T7258] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 172.046987][ T7258] [drm] Found bochs VGA, ID 0xb0c5. [ 172.047000][ T7258] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 172.064703][ T7258] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 172.198773][ T7258] Console: switching to colour frame buffer device 160x50 [ 172.243025][ T7258] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 172.315870][ T7264] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 172.315896][ T7264] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 172.371925][ T7264] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 172.371941][ T7264] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 172.377375][ T7264] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 172.377390][ T7264] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 172.950672][ T7294] fuseblk: Bad value for 'fd' [ 174.276056][ T7332] ptrace attach of ""[7334] was attempted by "/syz-executor exec"[7332] [ 174.290466][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 174.290485][ T42] audit: type=1800 audit(1790232131.661:238): pid=7332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.299" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 175.352718][ T7337] netlink: 16 bytes leftover after parsing attributes in process `syz.3.303'. [ 175.985664][ T7346] Console: switching to colour dummy device 80x25 [ 178.104114][ T7347] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 178.131096][ T7347] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 178.150499][ T7347] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 178.179806][ T7347] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 178.180306][ T7347] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 178.244201][ T7347] pci 0000:00:01.0: Adding to iommu group 1 [ 178.274689][ T7347] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 178.274716][ T7347] pci 0000:00:01.0: vgaarb: bridge control possible [ 178.274724][ T7347] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 178.307215][ T7347] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 178.307992][ T7347] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 178.326955][ T7347] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 178.428988][ T7347] [drm] Found bochs VGA, ID 0xb0c5. [ 178.429045][ T7347] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 178.472446][ T7347] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 178.666134][ T7347] Console: switching to colour frame buffer device 160x50 [ 178.696861][ T7347] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 178.918290][ T7351] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 178.931733][ T7351] pci 0000:00:03.0: BAR 0 [io 0x2000-0x201f] [ 178.931793][ T7351] pci 0000:00:03.0: BAR 1 [mem 0x81001000-0x81001fff] [ 178.932011][ T7351] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref] [ 178.954437][ T7351] pci 0000:00:03.0: Adding to iommu group 3 [ 178.972488][ T7351] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned [ 178.977094][ T7351] pci 0000:00:03.0: BAR 1 [mem 0x81001000-0x81001fff]: assigned [ 178.977205][ T7351] pci 0000:00:03.0: BAR 0 [io 0x2000-0x201f]: assigned [ 179.063229][ T7351] hwrng_fill thread creation failed [ 179.190165][ T7365] Console: switching to colour dummy device 80x25 [ 179.820440][ T7374] gadgetfs: bound to dummy_udc driver [ 179.987825][ T7369] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 179.998775][ T7369] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 179.999352][ T7369] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 179.999701][ T7369] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 180.000946][ T7369] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 180.059405][ T5826] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 180.059678][ C0] gadgetfs: connected [ 180.060884][ T5826] gadgetfs: disconnected [ 180.090224][ T7369] pci 0000:00:01.0: Adding to iommu group 1 [ 180.109074][ T7369] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 180.109087][ T7369] pci 0000:00:01.0: vgaarb: bridge control possible [ 180.109095][ T7369] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 180.122992][ T7369] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 180.123178][ T7369] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 180.125672][ T7369] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 180.169492][ T7369] [drm] Found bochs VGA, ID 0xb0c5. [ 180.169509][ T7369] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 180.177802][ T7369] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 180.623935][ T7369] Console: switching to colour frame buffer device 160x50 [ 180.653536][ T7369] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 181.502005][ T7406] pim6reg: entered allmulticast mode [ 181.591573][ T7405] FAULT_INJECTION: forcing a failure. [ 181.591573][ T7405] name failslab, interval 1, probability 0, space 0, times 0 [ 181.591636][ T7405] CPU: 3 UID: 0 PID: 7405 Comm: syz.0.320 Not tainted syzkaller #0 PREEMPT(full) [ 181.591657][ T7405] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 181.591668][ T7405] Call Trace: [ 181.591675][ T7405] [ 181.591699][ T7405] dump_stack_lvl+0x100/0x190 [ 181.591787][ T7405] should_fail_ex.cold+0x5/0xa [ 181.591812][ T7405] should_failslab+0xc2/0x120 [ 181.591863][ T7405] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 181.591890][ T7405] ? __d_alloc+0x35/0xa50 [ 181.591935][ T7405] __d_alloc+0x35/0xa50 [ 181.591964][ T7405] d_alloc+0x4a/0x1e0 [ 181.591991][ T7405] lookup_one_qstr_excl+0x171/0x250 [ 181.592019][ T7405] ? mnt_want_write+0x164/0x420 [ 181.592042][ T7405] filename_create+0x1cf/0x400 [ 181.592061][ T7405] ? __pfx_filename_create+0x10/0x10 [ 181.592083][ T7405] ? lock_acquire+0x1d1/0x380 [ 181.592111][ T7405] ? find_held_lock+0x2b/0x80 [ 181.592135][ T7405] filename_mkdirat+0xb9/0x5e0 [ 181.592161][ T7405] ? __pfx_filename_mkdirat+0x10/0x10 [ 181.592186][ T7405] ? strncpy_from_user+0x19d/0x2d0 [ 181.592223][ T7405] ? do_getname+0x191/0x390 [ 181.592255][ T7405] __ia32_sys_mkdirat+0x88/0xc0 [ 181.592283][ T7405] __do_fast_syscall_32+0x13a/0x8b0 [ 181.592333][ T7405] ? lockdep_hardirqs_on+0x7d/0x110 [ 181.592357][ T7405] do_fast_syscall_32+0x32/0x70 [ 181.592381][ T7405] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 181.592407][ T7405] RIP: 0023:0xf707efec [ 181.592428][ T7405] Code: Unable to access opcode bytes at 0xf707efc2. [ 181.592437][ T7405] RSP: 002b:00000000f544c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 181.592456][ T7405] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000100 [ 181.592470][ T7405] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 181.592482][ T7405] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 181.592494][ T7405] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 181.592506][ T7405] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 181.592532][ T7405] [ 182.022990][ T7414] Console: switching to colour dummy device 80x25 [ 182.343691][ T7423] netlink: 'syz.3.323': attribute type 12 has an invalid length. [ 182.350606][ T7419] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 182.400134][ T7419] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 182.404539][ T7419] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 182.414073][ T7419] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 182.449913][ T7419] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 182.710303][ T7419] pci 0000:00:01.0: Adding to iommu group 1 [ 182.725738][ T7419] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 182.725753][ T7419] pci 0000:00:01.0: vgaarb: bridge control possible [ 182.725761][ T7419] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 182.747204][ T7419] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 182.747500][ T7419] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 182.751633][ T7419] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 182.770291][ T7419] [drm] Found bochs VGA, ID 0xb0c5. [ 182.770304][ T7419] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 182.801142][ T7419] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 183.125802][ T7419] Console: switching to colour frame buffer device 160x50 [ 183.152119][ T7441] netlink: 'syz.3.325': attribute type 4 has an invalid length. [ 183.191823][ T7419] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 183.426909][ T7450] devpts: Unknown parameter 'ðצ““°þ«dv¸Ô}Ÿžð[€oÀ`’Tr¹Ö®´ž´Ã6„ [ 183.426909][ T7450] vÂw¿7É›·09]O[h¸\‰0~IZK×øüÈ•¡ÙPñ«~q^«­ÝPˆ(k¨]ß_ÍÊî>†™ ò–8Òs¸Åä>ÞÒ&»PMx{ÄçîÃUOz¥1Îos2¹þ‹zì¬cybÉÍ©Ä¿~ Z¨¡'Xkïy–˜¤¶ŽÒ„W‡î¬•ÄSg¹Â*Z½áë0x00000000ffffffff' [ 183.469582][ T7450] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x04 [ 183.479094][ T7450] i2c i2c-0: delete_device: Can't find device in list [ 184.275309][ T7458] Console: switching to colour dummy device 80x25 [ 184.719694][ T7457] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 184.725715][ T7457] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 184.725817][ T7457] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 184.725997][ T7457] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 184.726571][ T7457] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 184.730142][ T7457] pci 0000:00:01.0: Adding to iommu group 1 [ 184.732477][ T7457] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 184.732488][ T7457] pci 0000:00:01.0: vgaarb: bridge control possible [ 184.732495][ T7457] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 184.736596][ T7457] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 184.736708][ T7457] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 184.737689][ T7457] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 184.742380][ T7457] [drm] Found bochs VGA, ID 0xb0c5. [ 184.742391][ T7457] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 184.762555][ T7457] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 184.833850][ T7457] Console: switching to colour frame buffer device 160x50 [ 184.843416][ T7457] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 185.841003][ T7477] Console: switching to colour dummy device 80x25 [ 188.754971][ T7478] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 188.780321][ T7478] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 188.780467][ T7478] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 188.780655][ T7478] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 188.781104][ T7478] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 188.820595][ T7478] pci 0000:00:01.0: Adding to iommu group 1 [ 188.833127][ T7478] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 188.833150][ T7478] pci 0000:00:01.0: vgaarb: bridge control possible [ 188.833162][ T7478] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 188.859518][ T7478] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 188.859663][ T7478] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 188.869695][ T7478] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 188.898843][ T7478] [drm] Found bochs VGA, ID 0xb0c5. [ 188.898854][ T7478] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 188.902388][ T7478] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 189.300312][ T7500] jffs2: notice: (7500) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 1 of xref (0 dead, 1 orphan) found. [ 190.135617][ T7511] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 191.999861][ T7537] batman_adv: batadv0: Adding interface: dummy0 [ 191.999875][ T7537] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.999891][ T7537] batman_adv: batadv0: Interface activated: dummy0 [ 192.027756][ T7537] batadv0: mtu less than device minimum [ 192.028266][ T7537] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 192.029721][ T7537] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 192.030209][ T7537] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 192.030726][ T7537] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 192.031690][ T7537] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 192.032161][ T7537] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 192.032634][ T7537] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 192.033110][ T7537] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 192.033592][ T7537] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 192.416840][ T7541] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 192.423781][ T7541] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 192.424020][ T7541] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 192.424430][ T7541] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 192.426063][ T7541] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 192.472927][ T7541] pci 0000:00:01.0: Adding to iommu group 1 [ 192.515133][ T7541] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 192.515148][ T7541] pci 0000:00:01.0: vgaarb: bridge control possible [ 192.515155][ T7541] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 192.523722][ T7541] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 192.524174][ T7541] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 192.529450][ T7541] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 192.572000][ T7541] [drm] Found bochs VGA, ID 0xb0c5. [ 192.572013][ T7541] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 192.643061][ T7544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.350'. [ 192.643260][ T7544] bridge_slave_1: left allmulticast mode [ 192.643279][ T7544] bridge_slave_1: left promiscuous mode [ 192.645075][ T7544] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.823630][ T7544] bridge_slave_0: left allmulticast mode [ 192.823651][ T7544] bridge_slave_0: left promiscuous mode [ 192.823835][ T7544] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.832537][ T7541] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 193.297067][ T7541] Console: switching to colour frame buffer device 160x50 [ 193.364730][ T7541] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 193.780354][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.813067][ T7550] Console: switching to colour dummy device 80x25 [ 194.368856][ T7559] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 194.387400][ T7559] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 194.388268][ T7559] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 194.394780][ T7559] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 194.401205][ T7559] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 194.459492][ T7559] pci 0000:00:01.0: Adding to iommu group 1 [ 194.487348][ T7559] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 194.487373][ T7559] pci 0000:00:01.0: vgaarb: bridge control possible [ 194.487387][ T7559] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 194.504893][ T7559] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 194.505691][ T7559] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 194.516929][ T7559] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 194.598311][ T7559] [drm] Found bochs VGA, ID 0xb0c5. [ 194.598506][ T7559] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 194.675787][ T7559] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 195.209045][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 195.214511][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 195.217108][ T7565] ceph: No mds server is up or the cluster is laggy [ 195.274651][ T7559] Console: switching to colour frame buffer device 160x50 [ 195.335735][ T7559] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 196.647303][ T7584] netlink: 36 bytes leftover after parsing attributes in process `syz.0.359'. [ 196.696167][ T7584] netlink: 20 bytes leftover after parsing attributes in process `syz.0.359'. [ 196.696809][ T7584] cgroup: Invalid name [ 197.760097][ T7594] cgroup: fork rejected by pids controller in /syz0 [ 199.510260][ T7635] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 199.510278][ T7635] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 200.523356][ T7639] Console: switching to colour dummy device 80x25 [ 200.785023][ T7658] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes [ 200.785061][ T7658] Error validating options; rc = [-22] [ 200.883737][ T7640] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 200.893184][ T7640] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 200.893502][ T7640] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 200.894246][ T7640] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 200.897114][ T7640] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 200.944613][ T7640] pci 0000:00:01.0: Adding to iommu group 1 [ 200.947996][ T7640] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 200.948009][ T7640] pci 0000:00:01.0: vgaarb: bridge control possible [ 200.948017][ T7640] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 201.112235][ T7640] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 201.191009][ T7640] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 201.219783][ T7640] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 201.383362][ T7640] [drm] Found bochs VGA, ID 0xb0c5. [ 201.383443][ T7640] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 201.418106][ T7640] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 201.615594][ T7640] Console: switching to colour frame buffer device 160x50 [ 201.653384][ T7670] MTD: Couldn't look up './dev/mtdblock0': -2 [ 201.689600][ T7640] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 201.925724][ T7676] ceph: No mds server is up or the cluster is laggy [ 201.997677][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 202.029278][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 202.923370][ T7701] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 202.923387][ T7701] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 204.076800][ T7720] jffs2: notice: (7720) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 1 of xref (0 dead, 1 orphan) found. [ 204.282316][ T7724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.381'. [ 204.282331][ T7724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.381'. [ 204.282337][ T7724] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 205.106323][ T7736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.385'. [ 205.106343][ T7736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.385'. [ 205.131071][ T7736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.385'. [ 205.268141][ T6070] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 205.428532][ T6070] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 205.429229][ T6070] usb 5-1: Dual-Role OTG device on HNP port [ 205.429488][ T6070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.462271][ T6070] gspca_main: spca501-2.14.0 probing 0000:0000 [ 205.464072][ T6070] gspca_spca501: reg write: error -32 [ 205.464084][ T6070] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 205.464141][ T6070] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 206.997496][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.388'. [ 207.000618][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.388'. [ 207.000896][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.388'. [ 207.002226][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.388'. [ 207.007116][ T7751] Console: switching to colour dummy device 80x25 [ 207.096768][ T7754] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 207.161158][ T7759] fuse: fd is not a fuse device [ 207.275016][ T7754] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 207.275168][ T7754] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 207.275392][ T7754] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 207.275860][ T7754] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 207.766032][ T7766] nvme_fabrics: unknown parameter or missing value '#! »›¦1ÝÖæ³R¹Û?¾Ó&nâ¶õ%²ßõƒºë“~ˆÜì[6=pÍŠyz\UÔj@5NãfåWÎrs„)ìq²‰' in ctrl creation request [ 207.971961][ T7766] nvme nvme0: failed to connect socket: -111 [ 207.972313][ T7754] pci 0000:00:01.0: Adding to iommu group 1 [ 208.157202][ T7754] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 208.157246][ T7754] pci 0000:00:01.0: vgaarb: bridge control possible [ 208.157263][ T7754] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 208.164701][ T7754] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 208.164880][ T7754] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 208.167327][ T7754] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 208.186515][ T7754] [drm] Found bochs VGA, ID 0xb0c5. [ 208.186554][ T7754] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 208.209648][ T7754] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 208.560410][ T7754] Console: switching to colour frame buffer device 160x50 [ 208.638591][ T7754] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 208.754577][ T7775] tmpfs: Unknown parameter '‘Çhè9å­±ÍH{üÛÞdx‰iÿ‰©ø8¼àã­0ZÑl |wµ?–VHü²C\W4ÒÙÆtµC|þA [ 208.754577][ T7775] Ä5¾' [ 208.856437][ T7646] Bluetooth: hci4: Frame reassembly failed (-84) [ 209.377831][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 210.427248][ T7798] Console: switching to colour dummy device 80x25 [ 210.534228][ T7800] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 210.556804][ T7800] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 210.557039][ T7800] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 210.557556][ T7800] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 210.569001][ T7800] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 210.619529][ T7800] pci 0000:00:01.0: Adding to iommu group 1 [ 210.634944][ T7800] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 210.634959][ T7800] pci 0000:00:01.0: vgaarb: bridge control possible [ 210.634967][ T7800] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 210.667208][ T7800] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 210.667883][ T7800] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 210.682326][ T7800] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 210.714416][ T7800] [drm] Found bochs VGA, ID 0xb0c5. [ 210.714688][ T7800] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 210.759914][ T7800] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 210.829735][ T5092] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 211.429067][ T7800] Console: switching to colour frame buffer device 160x50 [ 211.474113][ T7800] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 212.297189][ T7816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.401'. [ 212.297211][ T7816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.401'. [ 212.297224][ T7816] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 212.419785][ T7820] net_ratelimit: 10 callbacks suppressed [ 212.419807][ T7820] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 212.768644][ T7823] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 212.952305][ T7824] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 216.306074][ T7867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.415'. [ 217.857455][ T2319] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 218.037375][ T2319] usb 7-1: Using ep0 maxpacket: 32 [ 218.038164][ T2319] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 218.039403][ T2319] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.039415][ T2319] usb 7-1: config 0 has no interfaces? [ 218.041560][ T2319] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 218.041572][ T2319] usb 7-1: Product: syz [ 218.041579][ T2319] usb 7-1: Manufacturer: syz [ 218.041586][ T2319] usb 7-1: SerialNumber: syz [ 218.078681][ T2319] usb 7-1: config 0 descriptor?? [ 218.268404][ T7902] gfs2: error -5 reading superblock [ 218.277962][ T7902] netlink: 'syz.0.421': attribute type 21 has an invalid length. [ 218.277980][ T7902] IPv6: NLM_F_CREATE should be specified when creating new route [ 219.367166][ T7912] jffs2: notice: (7912) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 1 of xref (0 dead, 1 orphan) found. [ 219.984513][ T50] usb 7-1: USB disconnect, device number 7 [ 220.943727][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.428'. [ 220.945111][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.428'. [ 220.945286][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.428'. [ 220.945667][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.428'. [ 220.945761][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.428'. [ 221.337524][ T7941] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 222.560909][ T7954] ALSA: mixer_oss: invalid OSS volume 'OGAI‹' [ 222.562136][ T7954] ALSA: mixer_oss: invalid OSS volume 'Šä:&ÇBŠG¤`TÝoÄD^z¿‡F?!k'' [ 222.564522][ T7954] ALSA: mixer_oss: invalid OSS volume '' [ 222.995152][ T7957] /dev/loop0: Can't open blockdev [ 226.157540][ T7962] blktrace: Concurrent blktraces are not allowed on sg0 [ 227.360348][ T8000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.445'. [ 227.363633][ T8000] netlink: 165 bytes leftover after parsing attributes in process `syz.0.445'. [ 227.845285][ T855] usb 5-1: USB disconnect, device number 8 [ 228.697151][ T8018] futex_wake_op: syz.0.451 tries to shift op by 144; fix this program [ 228.697296][ T8018] futex_wake_op: syz.0.451 tries to shift op by 144; fix this program [ 230.763616][ T8050] can0: slcan on ttyS3. [ 230.795139][ T8051] comedi comedi1: Minor 36 could not be opened [ 230.869665][ T8050] can0 (unregistered): slcan off ttyS3. [ 231.222855][ T8035] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 231.698000][ T8068] Console: switching to colour dummy device 80x25 [ 232.594306][ T8071] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 232.604816][ T8071] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 232.605149][ T8071] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 232.605494][ T8071] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 232.608787][ T8071] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 232.628501][ T8071] pci 0000:00:01.0: Adding to iommu group 1 [ 232.644015][ T8071] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 232.644037][ T8071] pci 0000:00:01.0: vgaarb: bridge control possible [ 232.644050][ T8071] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 232.654736][ T8071] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 232.654990][ T8071] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 232.668662][ T8071] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 232.705136][ T8071] [drm] Found bochs VGA, ID 0xb0c5. [ 232.705200][ T8071] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 232.743598][ T8071] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 233.159946][ T8071] Console: switching to colour frame buffer device 160x50 [ 233.204775][ T8071] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 234.045476][ T8094] 9p: Bad value for 'rfdno' [ 234.057046][ T8094] erspan0: entered promiscuous mode [ 234.060056][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.466'. [ 234.101621][ T8090] Console: switching to colour dummy device 80x25 [ 235.495310][ T8110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.472'. [ 235.512721][ T8104] netlink: 40 bytes leftover after parsing attributes in process `syz.3.471'. [ 235.512740][ T8104] tc_dump_action: action bad kind [ 235.639278][ T8114] comedi comedi1: Minor 36 could not be opened [ 236.314169][ T8119] netlink: 40 bytes leftover after parsing attributes in process `syz.1.470'. [ 236.341592][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.470'. [ 237.902443][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.479'. [ 237.902467][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.479'. [ 238.726324][ T8152] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 238.743569][ T8152] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 238.743998][ T8152] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 238.744431][ T8152] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 238.746104][ T8152] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 238.759654][ T8152] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 13458 usecs [ 238.817371][ T8152] pci 0000:00:01.0: Adding to iommu group 1 [ 238.843461][ T8152] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 238.843486][ T8152] pci 0000:00:01.0: vgaarb: bridge control possible [ 238.843500][ T8152] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 238.869814][ T8152] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 238.870162][ T8152] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 238.875211][ T8152] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 238.938991][ T8152] [drm] Found bochs VGA, ID 0xb0c5. [ 238.939006][ T8152] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 238.983071][ T8152] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 239.541678][ T8157] random: crng reseeded on system resumption [ 239.573975][ T8157] input: syz1 as /devices/virtual/input/input14 [ 239.589589][ T8158] overlayfs: failed to clone upperpath [ 239.601372][ T8159] netlink: 56 bytes leftover after parsing attributes in process `syz.2.483'. [ 239.674637][ T8152] Console: switching to colour frame buffer device 160x50 [ 239.706957][ T8152] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 241.040587][ T8175] comedi comedi1: Minor 36 could not be opened [ 241.606176][ T8178] Console: switching to colour dummy device 80x25 [ 242.609585][ T8182] cgroup: Unknown subsys name 'l@Ø$nc‘ : Failed to resolve address, err: -ENODEV [ 303.705819][ T9009] rtrs_client L2644: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 304.212407][ T9022] netlink: zone id is out of range [ 304.251895][ T9022] netlink: zone id is out of range [ 304.260435][ T9022] netlink: zone id is out of range [ 304.260611][ T9022] netlink: zone id is out of range [ 304.260830][ T9022] netlink: zone id is out of range [ 304.260905][ T9022] netlink: zone id is out of range [ 304.260929][ T9022] netlink: zone id is out of range [ 304.261102][ T9022] netlink: zone id is out of range [ 304.261165][ T9022] netlink: zone id is out of range [ 304.261548][ T9022] netlink: zone id is out of range [ 304.405705][ T9025] FAULT_INJECTION: forcing a failure. [ 304.405705][ T9025] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 304.405739][ T9025] CPU: 3 UID: 0 PID: 9025 Comm: syz.0.663 Not tainted syzkaller #0 PREEMPT(full) [ 304.405753][ T9025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 304.405760][ T9025] Call Trace: [ 304.405777][ T9025] [ 304.405784][ T9025] dump_stack_lvl+0x100/0x190 [ 304.405854][ T9025] should_fail_ex.cold+0x5/0xa [ 304.405871][ T9025] strncpy_from_user+0x3b/0x2d0 [ 304.405910][ T9025] do_getname+0x78/0x390 [ 304.405930][ T9025] do_sys_openat2+0xc7/0x1e0 [ 304.405949][ T9025] ? __pfx_do_sys_openat2+0x10/0x10 [ 304.405967][ T9025] ? do_sock_setsockopt+0x101/0x1d0 [ 304.405998][ T9025] ? kfree+0x1e5/0x6d0 [ 304.406011][ T9025] __ia32_compat_sys_openat+0x12d/0x210 [ 304.406029][ T9025] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 304.406050][ T9025] ? arch_syscall_is_vdso_sigreturn+0x19b/0x200 [ 304.406064][ T9025] ? syscall_user_dispatch+0x76/0x130 [ 304.406101][ T9025] __do_fast_syscall_32+0x13a/0x8b0 [ 304.406136][ T9025] do_fast_syscall_32+0x32/0x70 [ 304.406150][ T9025] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 304.406167][ T9025] RIP: 0023:0xf707efec [ 304.406180][ T9025] Code: Unable to access opcode bytes at 0xf707efc2. [ 304.406186][ T9025] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 304.406198][ T9025] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000080 [ 304.406205][ T9025] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 304.406212][ T9025] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 304.406219][ T9025] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 304.406225][ T9025] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 304.406239][ T9025] [ 304.962355][ T9020] syz.2.672 (9020): drop_caches: 1 [ 305.182776][ T9020] syz.2.672 (9020): drop_caches: 1 [ 305.189705][ T42] audit: type=1326 audit(1790232261.572:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.3.667" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fec code=0x7ffc0000 [ 305.194192][ T42] audit: type=1326 audit(1790232261.572:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.3.667" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fec code=0x7ffc0000 [ 305.200057][ T42] audit: type=1326 audit(1790232261.582:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.3.667" exe="/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf7f45fec code=0x7ffc0000 [ 305.204921][ T42] audit: type=1326 audit(1790232261.592:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.3.667" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fec code=0x7ffc0000 [ 305.206889][ T42] audit: type=1326 audit(1790232261.592:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.3.667" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fec code=0x7ffc0000 [ 305.208891][ T42] audit: type=1326 audit(1790232261.592:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.3.667" exe="/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf7f45fec code=0x7ffc0000 [ 305.210339][ T42] audit: type=1326 audit(1790232261.592:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.3.667" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fec code=0x7ffc0000 [ 305.212000][ T42] audit: type=1326 audit(1790232261.592:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.3.667" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fec code=0x7ffc0000 [ 305.216159][ T42] audit: type=1326 audit(1790232261.602:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.3.667" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f45fec code=0x7ffc0000 [ 305.218327][ T42] audit: type=1326 audit(1790232261.602:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.3.667" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fec code=0x7ffc0000 [ 305.895692][ T9045] Console: switching to colour dummy device 80x25 [ 305.923939][ T9047] netlink: 84 bytes leftover after parsing attributes in process `syz.0.671'. [ 307.306648][ T9048] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 307.316575][ T9048] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 307.316717][ T9048] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 307.316950][ T9048] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 307.317532][ T9048] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 307.330989][ T9048] pci 0000:00:01.0: Adding to iommu group 1 [ 307.334654][ T9048] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 307.334668][ T9048] pci 0000:00:01.0: vgaarb: bridge control possible [ 307.334676][ T9048] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 307.344739][ T9048] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 307.344888][ T9048] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 307.346276][ T9048] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 307.354935][ T9048] [drm] Found bochs VGA, ID 0xb0c5. [ 307.354950][ T9048] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 307.365336][ T9048] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 307.450799][ T9048] Console: switching to colour frame buffer device 160x50 [ 307.485002][ T9048] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 307.941216][ T9065] netlink: 'syz.0.676': attribute type 10 has an invalid length. [ 310.575317][ T9095] Console: switching to colour dummy device 80x25 [ 310.624738][ T9100] capability: warning: `syz.3.684' uses deprecated v2 capabilities in a way that may be insecure [ 310.822191][ T10] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 310.983024][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 310.984361][ T10] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 310.984387][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 310.987259][ T10] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 310.987278][ T10] usb 5-1: Product: syz [ 310.987289][ T10] usb 5-1: Manufacturer: syz [ 310.987300][ T10] usb 5-1: SerialNumber: syz [ 310.994398][ T10] usb 5-1: config 0 descriptor?? [ 311.023712][ T10] usb 5-1: selecting invalid altsetting 0 [ 311.186375][ T9098] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 311.209725][ T9098] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 311.209829][ T9098] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 311.210007][ T9098] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 311.210367][ T9098] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 311.224367][ T9098] pci 0000:00:01.0: Adding to iommu group 1 [ 311.233967][ T9098] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 311.233981][ T9098] pci 0000:00:01.0: vgaarb: bridge control possible [ 311.233989][ T9098] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 311.254833][ T9098] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 311.254950][ T9098] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 311.255982][ T9098] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 311.271108][ T9098] [drm] Found bochs VGA, ID 0xb0c5. [ 311.271118][ T9098] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 311.297586][ T9098] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 311.476034][ T9114] usb 5-1: BOGUS urb xfer, pipe 0 != type 1 [ 311.477441][ C2] ================================================================== [ 311.477454][ C2] BUG: KASAN: slab-out-of-bounds in find_endpoint+0x2a3/0x2c0 [ 311.477550][ C2] Read of size 1 at addr ffff88805f1860da by task syz.0.683/9114 [ 311.477567][ C2] [ 311.477576][ C2] CPU: 2 UID: 0 PID: 9114 Comm: syz.0.683 Not tainted syzkaller #0 PREEMPT(full) [ 311.477595][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 311.477607][ C2] Call Trace: [ 311.477614][ C2] [ 311.477621][ C2] dump_stack_lvl+0x100/0x190 [ 311.477648][ C2] print_report+0x13d/0x4b0 [ 311.477674][ C2] ? __virt_addr_valid+0x239/0x430 [ 311.477703][ C2] ? find_endpoint+0x2a3/0x2c0 [ 311.477723][ C2] kasan_report+0xdf/0x1c0 [ 311.477772][ C2] ? find_endpoint+0x2a3/0x2c0 [ 311.477811][ C2] find_endpoint+0x2a3/0x2c0 [ 311.477836][ C2] dummy_timer+0x500/0x3700 [ 311.477867][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 311.477918][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 311.477947][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 311.477970][ C2] ? rcu_is_watching+0x13/0xc0 [ 311.477991][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 311.478021][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 311.478071][ C2] __hrtimer_run_queues+0x462/0x9c0 [ 311.478098][ C2] hrtimer_run_softirq+0x1ca/0x360 [ 311.478128][ C2] handle_softirqs+0x1e6/0x9d0 [ 311.478158][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 311.478187][ C2] ? _raw_spin_unlock+0x28/0x50 [ 311.478209][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 311.478234][ C2] __irq_exit_rcu+0x16a/0x210 [ 311.478258][ C2] irq_exit_rcu+0x9/0x30 [ 311.478284][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 311.478312][ C2] [ 311.478318][ C2] [ 311.478325][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 311.478345][ C2] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 311.478371][ C2] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 7a 55 14 f6 48 89 df e8 02 ac 14 f6 e8 ad 5a 41 f6 fb bf 01 00 00 00 82 a2 03 f6 65 48 83 3d 41 f5 b9 08 00 74 06 5b c3 cc cc cc cc [ 311.478389][ C2] RSP: 0018:ffffc90003d678c8 EFLAGS: 00000206 [ 311.478407][ C2] RAX: 0000000000000163 RBX: ffff88806ad808f8 RCX: 0000000000000000 [ 311.478419][ C2] RDX: 0000000000000001 RSI: ffffffff8e390af9 RDI: 0000000000000001 [ 311.478429][ C2] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 311.478438][ C2] R10: 0000000000000001 R11: 0000000000000003 R12: ffff888028ba8000 [ 311.478444][ C2] R13: 0000000000007000 R14: dffffc0000000000 R15: ffff88804a39b000 [ 311.478455][ C2] ? _raw_spin_unlock_irq+0x23/0x50 [ 311.478471][ C2] snd_pcm_stream_unlock_irq+0x99/0xc0 [ 311.478484][ C2] __snd_pcm_lib_xfer+0x1298/0x20a0 [ 311.478497][ C2] ? __pfx_default_write_copy+0x10/0x10 [ 311.478515][ C2] ? __pfx_interleaved_copy+0x10/0x10 [ 311.478530][ C2] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 311.478542][ C2] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 311.478554][ C2] ? mark_held_locks+0x40/0x70 [ 311.478569][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 311.478585][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 311.478595][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 311.478614][ C2] snd_pcm_oss_write3+0x8f/0x180 [ 311.478627][ C2] io_playback_transfer+0x26e/0x2f0 [ 311.478641][ C2] snd_pcm_plug_write_transfer+0x2c7/0x400 [ 311.478654][ C2] ? __pfx_snd_pcm_plug_write_transfer+0x10/0x10 [ 311.478668][ C2] ? snd_pcm_format_physical_width+0x76/0xa0 [ 311.478680][ C2] ? snd_pcm_plug_client_channels_buf+0x212/0x450 [ 311.478694][ C2] snd_pcm_oss_write2+0x24a/0x400 [ 311.478705][ C2] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 311.478716][ C2] ? snd_pcm_kernel_ioctl+0x12e/0x280 [ 311.478730][ C2] ? snd_pcm_oss_prepare+0x11e/0x240 [ 311.478747][ C2] snd_pcm_oss_write+0x729/0xa30 [ 311.478758][ C2] ? security_file_permission+0x76/0x210 [ 311.478771][ C2] vfs_write+0x2aa/0x1050 [ 311.478782][ C2] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 311.478793][ C2] ? lock_acquire+0x1d1/0x380 [ 311.478807][ C2] ? __fget_files+0x34/0x3d0 [ 311.478820][ C2] ? __pfx_vfs_write+0x10/0x10 [ 311.478830][ C2] ? find_held_lock+0x2b/0x80 [ 311.478841][ C2] ? __fget_files+0x215/0x3d0 [ 311.478853][ C2] ? __fget_files+0x215/0x3d0 [ 311.478865][ C2] ? __fget_files+0x21f/0x3d0 [ 311.478879][ C2] ksys_write+0x12a/0x250 [ 311.478889][ C2] ? __pfx_ksys_write+0x10/0x10 [ 311.478903][ C2] __do_fast_syscall_32+0x13a/0x8b0 [ 311.478915][ C2] do_fast_syscall_32+0x32/0x70 [ 311.478927][ C2] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 311.478941][ C2] RIP: 0023:0xf707efec [ 311.478953][ C2] Code: Unable to access opcode bytes at 0xf707efc2. [ 311.478958][ C2] RSP: 002b:00000000f535050c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 311.478968][ C2] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080002200 [ 311.478975][ C2] RDX: 00000000fffffcd9 RSI: 0000000000000000 RDI: 0000000000000000 [ 311.478981][ C2] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 311.478988][ C2] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 311.478994][ C2] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 311.479003][ C2] [ 311.479008][ C2] [ 311.479010][ C2] The buggy address belongs to the object at ffff88805f185e00 [ 311.479010][ C2] which belongs to the cache rds_tcp_connection of size 640 [ 311.479019][ C2] The buggy address is located 90 bytes to the right of [ 311.479019][ C2] allocated 640-byte region [ffff88805f185e00, ffff88805f186080) [ 311.479029][ C2] [ 311.479031][ C2] The buggy address belongs to the physical page: [ 311.479036][ C2] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805f185500 pfn:0x5f184 [ 311.479046][ C2] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 311.479054][ C2] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 311.479065][ C2] page_type: f5(slab) [ 311.479074][ C2] raw: 04fff00000000240 ffff888045b65b80 ffff88804b809f48 ffffea0001341710 [ 311.479084][ C2] raw: ffff88805f185500 0000000200150007 00000000f5000000 0000000000000000 [ 311.479093][ C2] head: 04fff00000000240 ffff888045b65b80 ffff88804b809f48 ffffea0001341710 [ 311.479106][ C2] head: ffff88805f185500 0000000200150007 00000000f5000000 0000000000000000 [ 311.479116][ C2] head: 04fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 311.479125][ C2] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 311.479131][ C2] page dumped because: kasan: bad access detected [ 311.479135][ C2] page_owner tracks the page as allocated [ 311.479139][ C2] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5811, tgid 5811 (kworker/u32:3), ts 243385804837 [ 311.479156][ C2] post_alloc_hook+0xfd/0x120 [ 311.479172][ C2] get_page_from_freelist+0x110d/0x35d0 [ 311.479182][ C2] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 311.479193][ C2] new_slab+0xa9/0x6e0 [ 311.479202][ C2] refill_objects+0xe3/0x410 [ 311.479216][ C2] __pcs_replace_empty_main+0x35e/0x650 [ 311.479231][ C2] kmem_cache_alloc_noprof+0x4c4/0x6a0 [ 311.479250][ C2] rds_tcp_conn_alloc+0x61/0x4d0 [ 311.479267][ C2] __rds_conn_create+0x16f4/0x25a0 [ 311.479286][ C2] rds_conn_create+0x44/0x60 [ 311.479303][ C2] rds_tcp_accept_one+0x2fa/0xe80 [ 311.479322][ C2] rds_tcp_accept_worker+0x41/0x60 [ 311.479349][ C2] process_one_work+0xac7/0x1b10 [ 311.479372][ C2] worker_thread+0x5ef/0xe50 [ 311.479387][ C2] kthread+0x373/0x450 [ 311.479398][ C2] ret_from_fork+0x730/0xd60 [ 311.479410][ C2] page last free pid 5811 tgid 5811 ts 243379030158 stack trace: [ 311.479421][ C2] __free_frozen_pages+0x79f/0x10f0 [ 311.479445][ C2] stack_depot_save_flags+0x456/0x9f0 [ 311.479472][ C2] kasan_save_stack+0x3f/0x50 [ 311.479491][ C2] kasan_save_track+0x14/0x30 [ 311.479510][ C2] __kasan_kmalloc+0xaa/0xb0 [ 311.479521][ C2] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 311.479530][ C2] once_disable_jump+0x46/0x200 [ 311.479542][ C2] __rds_conn_create+0x1426/0x25a0 [ 311.479552][ C2] rds_conn_create+0x44/0x60 [ 311.479561][ C2] rds_tcp_accept_one+0x2fa/0xe80 [ 311.479571][ C2] rds_tcp_accept_worker+0x41/0x60 [ 311.479585][ C2] process_one_work+0xac7/0x1b10 [ 311.479597][ C2] worker_thread+0x5ef/0xe50 [ 311.479610][ C2] kthread+0x373/0x450 [ 311.479620][ C2] ret_from_fork+0x730/0xd60 [ 311.479629][ C2] ret_from_fork_asm+0x1a/0x30 [ 311.479638][ C2] [ 311.479641][ C2] Memory state around the buggy address: [ 311.479646][ C2] ffff88805f185f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 311.479653][ C2] ffff88805f186000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 311.479660][ C2] >ffff88805f186080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 311.479665][ C2] ^ [ 311.479671][ C2] ffff88805f186100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 311.479678][ C2] ffff88805f186180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 311.479683][ C2] ================================================================== [ 311.479689][ C2] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 311.773829][ C2] CPU: 2 UID: 0 PID: 9114 Comm: syz.0.683 Not tainted syzkaller #0 PREEMPT(full) [ 311.776702][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 311.779873][ C2] Call Trace: [ 311.780953][ C2] [ 311.781896][ C2] dump_stack_lvl+0x100/0x190 [ 311.783434][ C2] vpanic+0x553/0x970 [ 311.784707][ C2] ? __pfx_vpanic+0x10/0x10 [ 311.786147][ C2] ? __pfx_vprintk_emit+0x10/0x10 [ 311.787728][ C2] ? find_endpoint+0x2a3/0x2c0 [ 311.789242][ C2] panic+0xd1/0xe0 [ 311.790438][ C2] ? __pfx_panic+0x10/0x10 [ 311.791849][ C2] ? end_report.part.0+0x23/0x90 [ 311.793407][ C2] ? rcu_is_watching+0x13/0xc0 [ 311.794940][ C2] ? end_report.part.0+0x23/0x90 [ 311.796511][ C2] check_panic_on_warn.cold+0x19/0x34 [ 311.798209][ C2] end_report.part.0+0x3a/0x90 [ 311.799721][ C2] kasan_report.cold+0xe/0x18 [ 311.801222][ C2] ? find_endpoint+0x2a3/0x2c0 [ 311.802747][ C2] find_endpoint+0x2a3/0x2c0 [ 311.804224][ C2] dummy_timer+0x500/0x3700 [ 311.805674][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 311.807513][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 311.809274][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 311.810856][ C2] ? rcu_is_watching+0x13/0xc0 [ 311.812374][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 311.814247][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 311.815819][ C2] __hrtimer_run_queues+0x462/0x9c0 [ 311.817460][ C2] hrtimer_run_softirq+0x1ca/0x360 [ 311.819073][ C2] handle_softirqs+0x1e6/0x9d0 [ 311.820776][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 311.822492][ C2] ? _raw_spin_unlock+0x28/0x50 [ 311.824071][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 311.825855][ C2] __irq_exit_rcu+0x16a/0x210 [ 311.827370][ C2] irq_exit_rcu+0x9/0x30 [ 311.828713][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 311.830500][ C2] [ 311.831458][ C2] [ 311.832409][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 311.834341][ C2] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 311.836171][ C2] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 7a 55 14 f6 48 89 df e8 02 ac 14 f6 e8 ad 5a 41 f6 fb bf 01 00 00 00 82 a2 03 f6 65 48 83 3d 41 f5 b9 08 00 74 06 5b c3 cc cc cc cc [ 311.842104][ C2] RSP: 0018:ffffc90003d678c8 EFLAGS: 00000206 [ 311.844025][ C2] RAX: 0000000000000163 RBX: ffff88806ad808f8 RCX: 0000000000000000 [ 311.846493][ C2] RDX: 0000000000000001 RSI: ffffffff8e390af9 RDI: 0000000000000001 [ 311.848972][ C2] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 311.851437][ C2] R10: 0000000000000001 R11: 0000000000000003 R12: ffff888028ba8000 [ 311.853900][ C2] R13: 0000000000007000 R14: dffffc0000000000 R15: ffff88804a39b000 [ 311.856400][ C2] ? _raw_spin_unlock_irq+0x23/0x50 [ 311.858054][ C2] snd_pcm_stream_unlock_irq+0x99/0xc0 [ 311.859780][ C2] __snd_pcm_lib_xfer+0x1298/0x20a0 [ 311.861433][ C2] ? __pfx_default_write_copy+0x10/0x10 [ 311.863160][ C2] ? __pfx_interleaved_copy+0x10/0x10 [ 311.864871][ C2] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 311.866624][ C2] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 311.868507][ C2] ? mark_held_locks+0x40/0x70 [ 311.870027][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 311.871888][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 311.873523][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 311.875393][ C2] snd_pcm_oss_write3+0x8f/0x180 [ 311.876962][ C2] io_playback_transfer+0x26e/0x2f0 [ 311.878616][ C2] snd_pcm_plug_write_transfer+0x2c7/0x400 [ 311.880460][ C2] ? __pfx_snd_pcm_plug_write_transfer+0x10/0x10 [ 311.882470][ C2] ? snd_pcm_format_physical_width+0x76/0xa0 [ 311.884359][ C2] ? snd_pcm_plug_client_channels_buf+0x212/0x450 [ 311.886371][ C2] snd_pcm_oss_write2+0x24a/0x400 [ 311.887962][ C2] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 311.889682][ C2] ? snd_pcm_kernel_ioctl+0x12e/0x280 [ 311.891450][ C2] ? snd_pcm_oss_prepare+0x11e/0x240 [ 311.893339][ C2] snd_pcm_oss_write+0x729/0xa30 [ 311.894943][ C2] ? security_file_permission+0x76/0x210 [ 311.896721][ C2] vfs_write+0x2aa/0x1050 [ 311.898112][ C2] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 311.899835][ C2] ? lock_acquire+0x1d1/0x380 [ 311.901355][ C2] ? __fget_files+0x34/0x3d0 [ 311.902835][ C2] ? __pfx_vfs_write+0x10/0x10 [ 311.904369][ C2] ? find_held_lock+0x2b/0x80 [ 311.905870][ C2] ? __fget_files+0x215/0x3d0 [ 311.907376][ C2] ? __fget_files+0x215/0x3d0 [ 311.908872][ C2] ? __fget_files+0x21f/0x3d0 [ 311.910400][ C2] ksys_write+0x12a/0x250 [ 311.911806][ C2] ? __pfx_ksys_write+0x10/0x10 [ 311.913463][ C2] __do_fast_syscall_32+0x13a/0x8b0 [ 311.915560][ C2] do_fast_syscall_32+0x32/0x70 [ 311.917513][ C2] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 311.920039][ C2] RIP: 0023:0xf707efec [ 311.921680][ C2] Code: Unable to access opcode bytes at 0xf707efc2. [ 311.924326][ C2] RSP: 002b:00000000f535050c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 311.927623][ C2] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080002200 [ 311.930769][ C2] RDX: 00000000fffffcd9 RSI: 0000000000000000 RDI: 0000000000000000 [ 311.933918][ C2] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 311.937091][ C2] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 311.940238][ C2] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 311.942845][ C2] [ 311.944528][ C2] Kernel Offset: disabled [ 311.945999][ C2] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:44:30 Registers: info registers vcpu 0 CPU#0 RAX=ffffea0001b23dc0 RBX=ffff88806c8f7800 RCX=000000000000002e RDX=0000000000000000 RSI=ffffffff827e2ac3 RDI=ffff88806c8f7800 RBP=ffffffff8f933578 RSP=ffffc90004d27b88 R8 =0000000000000007 R9 =00000000001fffff R10=fffffffff1cf7800 R11=0000000000000000 R12=ffffffff84f0dfc0 R13=ffff88806c8f7800 R14=ffff88806c8f7820 R15=ffff88806c8f7818 RIP=ffffffff827153aa RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096959000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73cc86c CR3=0000000058f03000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000f000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000ed57bf RBX=0000000000000000 RCX=ffffffff8213d43f RDX=0000000000000002 RSI=ffffffff8e390af9 RDI=ffffffff8c623a80 RBP=0000000000000003 RSP=ffffc9000047fb48 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000000 R12=ffff88802b33c040 R13=dffffc0000000000 R14=ffff88802b23c088 R15=ffff88802b53c040 RIP=ffffffff810014f0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096a59000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008001b000 CR3=0000000058f03000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85af7645 RDI=ffffffff9bc5e3e0 RBP=ffffffff9bc5e3a0 RSP=ffffc900005483c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=000000000000000a R14=0000000000000006 R15=ffffc900005486e0 RIP=ffffffff85af766f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096b59000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f707f000 CR3=0000000052e3f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000005fe4ad RBX=ffff88801cf00000 RCX=ffffffff8bcf91c5 RDX=0000000000000001 RSI=ffffffff8e390af9 RDI=ffffffff8c623a80 RBP=ffffed10039e0000 RSP=ffffc9000049fe00 R8 =0000000000000001 R9 =ffffed10056a67bd R10=ffff88802b533deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000093fc4 R15=dffffc0000000000 RIP=ffffffff8bcf76ff RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096c59000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5350da4 CR3=00000000704e8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000f000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000