last executing test programs: 6.67788764s ago: executing program 3 (id=977): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x10201, 0x3, 0x6000, 0x2000, &(0x7f0000ff8000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 3) 6.197543286s ago: executing program 3 (id=980): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x7, 0x4, 0x5}, 0x50) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc01c5869, &(0x7f0000000140)={r1, &(0x7f0000000980)=')\x00\x12F\xdfR\xc4\xdb\x81\xe3\xc9\xc4\x1a\x7f9a2 \xfe\x9e\xc1W\x02\xce+\xa6\xdf\x91\xe0\x9d\x9dDE23-/\xbd}#\xbeRYE\x87\xbeM\x9b\xa1\xa5\xcf\xa6~\xeb\x13\xdcm\x81\xe7o\x93\xf6\xf8\x86\xcb\xc8N\xa5\xe4\xaba\x00\xe6g\x8er{\b\x8d\a\xfd\x15s\xef\r\x95\x1f\xfe\xf3\xad2\x91\x86\xb2g\xc1uh\x0f\xd8/\aQ\xb9\xdd\xe8\'|\xc4\xfa^\xe9\xf2^(\x92\x14~\x1e\x84\x817\xa2\xae&W\x19v\xeffR\xbe\xfdf\x99\xeeHS|H4N\xb4\x7f\b(\x1c\xee\x17P\x93\xb7\x02\xd5\xba\x8f\x9c\xfaJS\xcd\x02\x1a/\x1a|6\xa9\xc80\x1c\r\x88\x17V\x80\xe3x\xdb\xd4E\xd5\x96\x04_\xfc^\x80\x87J\x1a\x91\x0eZ', 0x402, &(0x7f0000000080)={@_ha_fsid={[0x0, 0x1]}, {0x161a, 0x200, 0xe9f, 0x9}}, 0x5d7, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x1ff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000780)="b9ff03076003008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="240000a789be4a0cfeb2000239a392e186ecfff93255f017a5d8ae9ededd9fa534818c28ebffb856748c1c003a2185b3ddea14413b253b88f0e427e285973c95a8de5d27cdc26b85e98f3ac3eccfcd67058d18d918a7521b331965969481a3d6d3033680", @ANYRES16=r5, @ANYBLOB="010025bd7000fedbdf250e0000000c00018008000100", @ANYRES32=r7, @ANYBLOB="04000280"], 0x24}, 0x1, 0x0, 0x0, 0x200048c4}, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r9, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x8) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r11 = syz_usb_connect(0x1, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r12 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r12, &(0x7f0000000a80)=""/188, 0xba) write$tun(r12, 0x0, 0x0) syz_usb_disconnect(r11) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f00000005c0)={0xc, &(0x7f0000000300)={0x40, 0x7, 0xdf, {0xdf, 0x11, "2111209ada0d7339286ec391855f842366fcb8c5dd195a6a4fe90acbc6e48cdf5ff0bc4305fccd5b2eafdac022cbe748c9b9d5b7a23558895c924ff63526c87254107651cadce73d25bb772dd766e2d93062b70b9d5b4aaf46293b1ea0892472d6bfebdfb443bc9ccffdd59a339d5aec1ebda2bb65eddac6e3be415c7015b937c1201a43c9c38ea48513e5b3aad9c0c97eca364906559c337a9daa891af633de124152f5a582854ff92ae4e831a058f2d5437a9985e261743fe7a25e4ef23d37a08edd3e854bed33a3eb67dcbfce8aeca50e94541b229b10372aa18a0b"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}}, &(0x7f0000000940)={0x24, &(0x7f00000006c0)={0x0, 0x14, 0x88, "9f76a5e21191220c7563b7c0b5c30626705e706ccc3e218731d5423025460bcba177fc8bd0448d10d4549cc2d690bca620fd51d5eb14dd0e95ada040c06f362c6f6cfaff298b297185bc97300fcc21f9f7603d1195278b71eb7c44da278572a5e23adf8229c021e5097195d09559cfad106b3ef32dad0696f192baa2be3b311e9e7ebc272bbb3563"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000840)=ANY=[@ANYBLOB="ea81030425edda5faeac796fdad54279fa3a2d92006bf92500"], &(0x7f0000000b40)=ANY=[@ANYBLOB="208202000000a059f11631e163afb5c5b6d2634d2012185392304ad44846e4b91048c5ab222517bef0e4f2827b6b69a34b78f1e79335cee2decdabcd2d8bbf3f242535f67f70dc9f53a4fbe38d42466ae881d67fa05a5e67d48e4b88cf61aa69767caa8b2721d0bf76b4f7dbcad6b777808ad770fe"], &(0x7f0000000880)={0x20, 0x83, 0x1, '{'}, &(0x7f00000008c0)={0x20, 0x84, 0x4, "a48ce73d"}, &(0x7f0000000900)={0x20, 0x85, 0x3, "24ad79"}}) close(r12) 3.936853669s ago: executing program 3 (id=994): syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x20, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x4e21, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x2}]}}}}}}}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f", 0xb4}], 0x3}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000300)=""/135, 0x87}], 0x3}, 0x0) r3 = epoll_create1(0x80000) r4 = fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) r5 = getpid() r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, &(0x7f0000000140), 0x4) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r4, &(0x7f0000000100)={r3}) 3.85782984s ago: executing program 3 (id=995): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}}, 0xb4}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x500}}}}}}}, 0x0) 3.857269332s ago: executing program 3 (id=996): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0xfffffffc, 0xb, 0x6, 0xfffffffc, 0x7d, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[], 0x5eaa) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000200)={0x2c754362, 0x4, 0x9, 0xd, 0x9, "0100000000e409878000000040000000000018"}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x400001, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x4049004) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600006fb96d", 0xe}], 0x1}, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000001c0)={0x0, 0x80000, 0x0, 0x2, 0x18, "00000000000700000000fffe00"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) openat$sw_sync(0xffffff9c, &(0x7f0000000280), 0x18080, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r10 = syz_open_pts(r1, 0x0) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000240)=0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="600000000206010400000000000000000000000014000780080011400000000005001500030000000500010006000000050005000200000005000400000000000900020073797a300000000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) 3.087102355s ago: executing program 2 (id=1003): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8002}]}) sched_setscheduler(0x0, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mount$binder(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x8000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x221408a, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r3, &(0x7f0000002240)={0x2020}, 0x2020) writev(r3, &(0x7f0000002140)=[{&(0x7f0000000680)='T01\n', 0x4}, {&(0x7f00000013c0)="ae2019ebbf2d421169ff32201b71", 0xe}], 0x2) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl2\x00', r5, 0x2f, 0x6, 0xa, 0x40, 0x40, @private0, @loopback, 0x7800, 0x40, 0x8, 0x7bf}}) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000300)=""/222, 0xde}, {&(0x7f0000000480)=""/128, 0x80}, {&(0x7f0000000500)=""/160, 0xa0}, {&(0x7f0000000600)=""/243, 0xf3}, {&(0x7f0000000700)=""/44, 0x2c}, {&(0x7f0000000740)=""/214, 0xd6}, {&(0x7f0000000840)=""/114, 0x72}, {&(0x7f00000008c0)=""/221, 0xdd}, {&(0x7f00000009c0)=""/246, 0xf6}, {&(0x7f0000000ac0)=""/222, 0xde}], 0xa, &(0x7f0000000c40)=""/163, 0xa3}, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175"], 0xfdef) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=""/56, 0x38) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000140)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.935495533s ago: executing program 2 (id=1005): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_io_uring_setup(0x32cb, &(0x7f00000003c0)={0x0, 0xd979, 0x1000, 0x1, 0x18a, 0x0, r1}, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x278, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000000)) syz_usbip_server_init(0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) dup2(r6, r5) write$cgroup_devices(r6, 0x0, 0x8) write(r3, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, 0x0, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.807859464s ago: executing program 3 (id=1006): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f00000000c0)) 2.424949984s ago: executing program 1 (id=1008): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) close_range(r0, r0, 0x2) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) 2.42472757s ago: executing program 1 (id=1009): r0 = syz_ublk_setup_io_uring(0x471, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x1, 0x158}, &(0x7f0000000780)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x60ff, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x3, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x32, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0xf, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.031113546s ago: executing program 1 (id=1013): r0 = openat$drirender128(0xffffff9c, &(0x7f00000000c0), 0x9e581, 0x0) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(0xffffffffffffffff, 0xc0386447, &(0x7f0000000180)={{0x8, 0x4, &(0x7f0000000140)=[{0x80, 0x0, 0x1}, {0xc0, 0x0, 0x800}, {0x5, 0x0, 0xb86}, {0x0, 0x0, 0xffff}]}, 0xb0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x2, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(r0, 0xc0086448, &(0x7f00000001c0)={r1}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(&(0x7f0000000580)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000680)='proc\x00', 0x1008061, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x404c2, 0xc4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2}, './file0/file0\x00'}) mount$overlay(0x0, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000600), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r3 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f10000", @ANYRES8=r3], 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) setxattr$incfs_metadata(&(0x7f0000000380)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000440)="22cff58056bb404c4ab63c127a5fb72e52a26599", 0x14, 0x1) r4 = openat$btrfs_control(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1/file0\x00', &(0x7f0000000140), &(0x7f0000000500)=ANY=[@ANYBLOB="00fb3b0002476db1944203d7fbe0fb6b4b9b25d26111f49fc684a99d645d5afdeaec17ac66588bb392e98fde69673b722f13663944c8b3392d0c22633de78334c8e5ade85e01010938564dd7897530d3db3ebbf99770e6fef0681f62b531a3b6c51c1274039a"], 0x3b, 0x0) fsync(r4) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f00000006c0)={0x0, 0x0, 0xe, 0x59, 0x200000000003}) r6 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff26650042e2dacd300062e2adacd2737d00ad6f9fa9f3d7145e15dd9d6d2e19d211220900ad5def53b911ba5b9da13641f9826d7012a749f54b901ee80ea6132ca6e88c776553e1833052ca376304313c4b37780136a4b8385702000000000000000f2d00000000000100"}, 0x80, 0x0}, 0x0) setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r8, 0x0, 0x30, 0xffffffffffffffff, &(0x7f0000000040)=0xa3) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/uevent_seqnum', 0x0, 0x8) 2.029200471s ago: executing program 0 (id=1014): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndpcmc(&(0x7f0000000240), 0x0, 0x0) io_setup(0x1, &(0x7f00000005c0)=0x0) io_submit(r2, 0x1, &(0x7f0000001a40)=[&(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004854) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r4 = epoll_create1(0x80000) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfffd, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x3, 0x3ff, 0x2, 0x7, 0xfffffff7, 0x7, 0x2a3c14c8, 0x0, 0x140, 0x9cd0, 0x78e, 0x8, 0x9, 0x2, 0x80000000, 0x5, 0x80000000, 0x9, 0x1ff, 0xfff, 0x27, 0x52a67a94, 0xf, 0x1, 0x4, 0xfffffffe, 0x6, 0x0, 0x2, 0x800, 0x8, 0x2, 0xffffffad, 0x8, 0x68, 0x0, 0x10000, 0x7ff, 0x7, 0xffffff64, 0x4, 0x9, 0x7, 0x5, 0x14000000, 0xffff, 0x2, 0x1ff, 0x4, 0xffff5edc, 0x8, 0x4, 0x81, 0x5, 0x94c, 0x1cf, 0x10000000, 0x3, 0x6, 0xfffffffb, 0x1, 0x2, 0x7, 0x1, 0x6, 0x0, 0xa, 0xf43, 0xa, 0x4, 0x5, 0x1, 0xfeba, 0x3ff, 0x100, 0x2, 0x2, 0x8, 0x0, 0x24000000, 0x4, 0x80000000, 0x6, 0xac5, 0x9, 0xffb, 0x2, 0x67, 0xa, 0x9, 0x5, 0x7fffffff, 0xfffffff8, 0x86, 0x0, 0x0, 0x8ac7, 0x5, 0x78, 0x8000, 0xc, 0x6, 0x400, 0x20, 0x5, 0xffffffdf, 0x389, 0x3, 0x1e800000, 0x80000001, 0x4a, 0xff, 0x2, 0x3, 0x1ff, 0x9, 0x400004, 0x6, 0x2, 0x7, 0x8001, 0x2, 0x263, 0xb, 0x8, 0x6, 0x6, 0x9, 0x6, 0xa, 0x13d, 0x9, 0x3fed, 0x2, 0x4, 0x2, 0x101, 0x4, 0x7, 0x240, 0x4, 0x5, 0x1, 0xfffffffb, 0x1, 0x800, 0x7fffffff, 0x8fc, 0x2, 0x68a4, 0x600000, 0x6, 0x4, 0x8, 0x4, 0x37, 0xa, 0x9, 0x3, 0x5, 0x8, 0x100, 0x7, 0x101, 0x6, 0x7, 0x7, 0x3, 0x2, 0x3, 0x8, 0x9, 0x0, 0xd6, 0x4ad, 0x7, 0x9, 0x2, 0x0, 0x7e6, 0x54d6, 0x2, 0x3, 0x8, 0x1, 0xf32, 0xffff, 0xae, 0x0, 0x6, 0x7, 0x8, 0x1, 0x4, 0x7, 0x9, 0x959a, 0x0, 0x7, 0x2, 0x4, 0x7f, 0x2, 0x80000000, 0x10000, 0x10, 0x6, 0x2, 0x4, 0x1000, 0x8, 0x9, 0xfffffffc, 0xe6, 0x2, 0x9, 0x4, 0x1, 0x4, 0x9, 0xff, 0x9, 0x9, 0xb, 0x3, 0x7fff, 0x200, 0x5, 0xca1, 0x7f, 0xe, 0x1, 0x1000, 0xfff, 0x5, 0xc1, 0x0, 0x7, 0x40, 0x7fffffff, 0x1, 0x7, 0x6, 0x8, 0xe9375e5, 0x8cf5, 0x7, 0xdf0d, 0x2, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x10, 0xd, 0xd36, 0x4, 0x6bc, 0x2, 0x7, 0xf, 0x800, 0x7, 0x7, 0xe7f, 0xffff, 0x7, 0x5, 0x1, 0x0, 0x4, 0x909e, 0x89cd, 0xffffffff, 0x8, 0x9, 0x4, 0x5, 0x2, 0x8, 0x4, 0xf23, 0x3ff, 0x9, 0xa, 0x5, 0x0, 0xff, 0x7f, 0x4, 0x0, 0x3, 0x382, 0x40, 0x80, 0x8, 0x2, 0x5, 0x20002, 0x9, 0x7, 0x4, 0x0, 0x7, 0x80000000, 0x80000001, 0x8000, 0x9e, 0xe4, 0x200000, 0x7fffffff, 0x5a, 0x9, 0xfffffff7, 0x4, 0x6, 0x6, 0x459, 0x2, 0xff, 0x14000000, 0x5f72, 0x3, 0x8, 0x7, 0x5, 0x0, 0x6, 0x0, 0x6, 0x1000, 0xffffffff, 0x101, 0x2, 0x5, 0x7, 0x9, 0x1000, 0x9, 0x3, 0xfbb4, 0x4a, 0x0, 0x7, 0x8, 0x9, 0x0, 0x7, 0x101, 0x0, 0x3ff, 0x5, 0x800, 0x7fffffff, 0x2, 0x1, 0x3, 0x4, 0x101, 0x6, 0x19, 0x6c, 0x9, 0x7fffffff, 0xceb6, 0x5, 0x7, 0x53c0, 0x6, 0x4, 0x9, 0x1, 0x9, 0x2, 0x7, 0x8, 0x3, 0x3ff, 0x18, 0x6, 0xffffff7b, 0x15ef7157, 0x4, 0x5, 0x2, 0x7, 0x7fffffff, 0xdb5, 0x1000, 0x800, 0x8, 0x80000000, 0x100, 0x7, 0x3fd1, 0x40, 0x1000, 0x3, 0xfffffffb, 0x5270e9b, 0x5, 0x7f, 0x9, 0x40, 0x9, 0x3, 0x0, 0x9, 0xb, 0x7, 0x1, 0x7, 0x3, 0x9, 0x0, 0xfe23, 0x6, 0x5, 0x8, 0xffffff7f, 0x3, 0xd, 0x80, 0x4, 0x9, 0x4, 0xff, 0x8001, 0x78, 0x80, 0x72e, 0x5c, 0x1, 0xb0, 0x6, 0x8, 0x9, 0x0, 0x80000001, 0x8, 0x4, 0x4, 0x0, 0x1, 0x1, 0x59ac, 0xebda, 0x7, 0x10000, 0x4, 0x100, 0x0, 0x7, 0x138, 0x1, 0x8, 0xcb18, 0x0, 0xb, 0x5, 0xe489, 0x8, 0x5, 0x6, 0x8d03, 0x1800000, 0x80000000, 0xc4800000, 0x4251, 0x7fff, 0x8001, 0x6, 0x7, 0x5, 0x3, 0x4, 0x371, 0xaa67, 0x2, 0x0, 0x10, 0x8, 0x5a5, 0x400, 0x0, 0x4, 0xf, 0x8, 0x9, 0xc2b3, 0x0, 0x7fffffff, 0xfffffffa, 0x9, 0x3ff, 0x6, 0x7, 0x5, 0x7, 0x4, 0xc, 0x9, 0x1, 0x0, 0x10000, 0x4, 0x4, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x8, 0x6, 0x4d2, 0x2, {0x8, 0x0, 0xa, 0x8, 0x8, 0x9}, {0x4, 0x0, 0xa380, 0x7ff, 0x5, 0x7d487c2b}, 0x9, 0x4}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) bind$alg(r7, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000100)={0xa0000003}) epoll_pwait2(r4, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x3, 0x80000) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x13, r8, 0xff) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r0, &(0x7f0000000080)={0x8000004}) 1.887907666s ago: executing program 1 (id=1015): r0 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001100)=@raw={'raw\x00', 0x8, 0x3, 0x2d4, 0x0, 0x25, 0x148, 0x0, 0x60, 0x240, 0x2a8, 0x2a8, 0x240, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x1f}, 0xffffffff, 0xff000000, 'ip6_vti0\x00', 'tunl0\x00', {0xff}, {0xff}, 0x6, 0x1, 0x28}, 0x0, 0x70, 0xa4, 0x0, {0x200003ae, 0x7f00}}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0x1, 0x1, 0x4}, {0x2, 0x4, 0x2}, {0x4, 0x3, 0x6}, 0xe, 0x4}}}, {{@uncond, 0x0, 0x154, 0x19c, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x8, 0x9, 'fsm\x00', "bb290d0df204c87d2fd5f0c6a4dc7d30c67c7eec252facefbbcf8d3a344afbe087ba9e3f6dbd635b6e574bbbf2ed83bb96b36ff25958aa80ca7be4d0ee442af458f50b12a9c036e70c5bdf1207ff01b786f95bdf93433002672b982815d9b64fb1cbd1103c62f6f9751560df6c99a7001d1af21c3626032c8f3609b3c194f5d2", 0xc, 0x3, {0x2924}}}, @inet=@rpfilter={{0x24}, {0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x330) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x200003}, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = gettid() r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB="252019e45c184bea9f125864cbb32e2188e4e641c3cb799950ec437b75c6b061f1f420c3be45496c11e82ec713cb2a08cacb1baa6611495f7e4ba62ad3ded6ae25afe680", @ANYRES16=r8, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088018000c80140d"], 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) tkill(r6, 0xb) pread64(r0, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f00000002c0)=0x10000) pwritev2(r0, &(0x7f0000000200)=[{0x0}, {&(0x7f00000000c0)="3a4002c716d6a76c8c4954a5376cbb6f97620bfe3824433daae61da82f787afff91cf673ef7ebed356e623497f0489", 0x2f}, {&(0x7f0000000100)="14647874f50593fbd741385970459568ce343ccd4ca406866df429c6830d4bed180761c6379067d47e193a152b8d9b9da24d5e2bfff31cabce47132c5f77935c3daa805711c8891ca27689fc7040b552c98f8497e0f83d29d4d31a5428db4e0b66c4f2cb4a58658f48f111a2d19940a9fdc06ef423164c716d82f62fbfec4a93993b602b0ae83752df6dc833066afb0806d527718d646510a82a215b61d8cbfb270fca0317890b361155dfa0a614209ff9cd54f0f116b87d9a4b25f7b04a5318ecbb78440b2eaee36182408db4a31885717297d9ac1a2347feb0c981cd", 0xdd}], 0x3, 0x3, 0xffff8000, 0x14) 1.717968326s ago: executing program 0 (id=1016): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000011c0)='/proc/locks\x00', 0x0, 0x0) preadv2(r0, 0x0, 0x0, 0x2f, 0x80, 0x4) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) 1.607836224s ago: executing program 0 (id=1017): r0 = socket$alg(0x26, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_DISALLOCATE(r1, 0x4bfb) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='0000:00:02.0\x00', 0xd) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/drivers/net2280/new_id\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='8086 10d3 ffffffff ffffffff 0 0 8\x00', 0x22) 1.487385734s ago: executing program 2 (id=1018): r0 = creat(&(0x7f0000000540)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(r0, &(0x7f0000000240)='./file1/file0\x00', 0xed) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f0000000300), 0xc, &(0x7f0000000340)={&(0x7f0000000380)=@setlink={0x20, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) syz_emit_ethernet(0x35, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c2000000020000000001002742420300"/56], 0x0) 1.288234773s ago: executing program 2 (id=1019): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {0xf5}, {0x8, 0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x13}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) 1.17282703s ago: executing program 2 (id=1020): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0/control/extensions/xu.0\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000f54c0)={0x0, 0x0, "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", "43494302a2097d0297589042f0c54f056523467e6e38beedc60d44d22b02f6c485df761961b1452df52b2e79c7d31f45537f7ade6810fd5baa5b450690b021c5c25b7b304ca2149949afe51aceec2ee055e50dd2e200d63ae322975d1444bcf4b6ef8647034b0ef1dddc33f214aea0c5a2d4d941395819be34fdd9064377e279c375aa6440f9faf654929f624f56c9d4bf397eb90d320673bb6313c8773f5b8c668664c219114f5ce579772e6264b156d81ae4e590aaff3e5ecd607fddc24bee8dd6d8a1fe0cb73732e8a79fabf860c8fcab3dd4f76e38abf964d1caab777de8197650d30d4359a55243b083e2bde99921f3652ab0e837a94c97e136cdad34b40ea8c27b79268639915623cf5aa3ab01ec8af14bc45f7f9797727ffc35e8770a9f9ac3fdf4f6e5ec70f20c95fc175783c14e92066e7afe5340943005eca3ad927ed4259b28db134e34f9c86bd9a947f26ace58df305e9a9cffc2df1a72e6c4b07a2db0ba5844e25291da2f712d7b310b0fa3956b510814444ba0ac132703565a556c14b3ce01eb7ba21e1aea2b1a707eb38b988e7d41203198ba33c5fea17e7176d1d68ca8bccbb3fac02b6b63c726b95c813f3a305ab2770fc4bb90cbef7b80bb2c9043a5f36a02f9264daa965e349d93ba6f22db225695a73cd965e1609592fa9bbf585a410b36cd49c984b660fe30df6e14f32b0bb9364ae937c8d61732edfdfe84e6369bf0fbd649c3a0459807eb81bd256c7b748c76e7b136ded17ec20a66851326ab60e15aad1f3b954cd82b9f4aafc41022995d0c00b31ff44b1a07df74b053f5a5d06bc94fb84d474712d05456282a9ce3fd1ceb5293793e0e5e378b3caed0fbe9ae6132f59004d0dfc1ec2ad4c1ab1ef31732a85fd5ac5a742340b6eb85bcf61d96360a707a1a73e74648a9d9d04a7dc3cb5d95d7e824ab9a4ce032da2fbce53191db69e17dd401b12d82d45684a4b98d7ef6afd5921d3faf20bbdca8e3c843863e4c8f5342b7cf3f6cb41d54956ec99cbfb19e00d32c902279d7f7133e1faf1bd618ab27479f28bcaa3555cb7954cd8a60b5c69ae01141c312ed64b743312d057a689fafc118992c886d0a07e2e4159035d94fc836c8a163918694c15a5e247932acbe5e8f50e1d73246beb6a45a0a94e30bdabe7fe9e60dc9c044159b83d2537b3faf50b13701b234b428d3dadb03dedd79b76030ef1af47cc7defc18a4a4c26936ae427563d3e1b96024152df9945a6845f8a4758c39b857cb8bc497bea015d804a29a6c6ba972cca702057d8b2a711bea769ea17f061694d9c77eff6b7359d719918f9f53fe54e23f4a00320fec43cc2eda2bc19747e876ddfd01073efcfd6fd1878905044abbe12cca7f3d4f194c9a8298300056ded395c60a8969483ccb873b54bc1abd57ab93f88b83abcd9cf13c07b0665b0d9eca3a1bab27a106fd895613b086c64b7509e9cb4ae6f77e6188b8f177646b52e489a709293798268908fa38d37516e15fff972e1a4f307c3a46d0c853fb37f532426cc4415a75fcb44b9f1ad8238803a0470bf9a0b3298eaedd0db1899888790d19e421b22658c0119ecfd8500024d135b3fb67499c21851f194edf1e5f79533551a4c4c7aa2854a5f43bc3f318df0ad812e3f6163b89a7e03a72e50456ba60b6c479ab1bb2597331fbdce53a2fece8c619e7e830f0a99b4f7075c36c2408dd615d8c6d7bf8d02df89aa4fe236a30917709d4a0b2bead2531132f17315d365f796dfb9818503c346cb082a4f3124b733e251c3ea0dad4e60c07281d123ce1c657a48bc5d2ba3f90ff2dcca5e92e3b5cbecb4c0e7230cb5b937c8005e842a405fb95c5c6742dae3a049fd44745ba1b3a91503ec55dbfa661c249ba9838a6a2a703d9d78f41596ee098115e7cf09b9a60b1dc77c18fbaaf4287140166b5b934cac7b33470b1e4e456942846ac614bb121a69687ef29940b6d5047781ea186c9c535c63a9028a3fb45ff51c50d3eadb05b2a6797627a6c0432e8890016827301c618a2d3280cb2be5bfb5b792135b58dbb12eb79a27ff58d5c510e7593466b1e06dd43e0c6e548944d5db9a72405e187dcbf1bbeb083a9f2658861e09da398f66949ced56065497c4e3b0a17d2b19dc8e0d24515fd9d95db66a5889bf9439491518ad3fee4bd9f46473fe421b9adb290df1b39e3d6c604ca2cd4cc5ca6d1aac6824535a94a107a6ec859024d088fee47eec0ddc29046b27cc8879f226c784510fa0e2617494fc707e22d4a850e555363fa5296d16213ed260bd1d4190fe24ba8382aebf823e931c0accbde28b1ed7b05a9d3b17e7e56a86246df4c1abd11cc9e95ab4e9fb127c1ba94754b7f4b94b86729c5cdf555df5920368bd01a190876a3e29d972bd9bdef69b97e88a4d9390a77a20d239c73dc35406d39080d02babe2f9bd5f70c2bc9d7b59efb20e7c5946b3c53bad8aa296206ceb366ac99c6837e35bc2d63df865bacfd985ac424d4b583a3cf7c2dc5ec9ceef15c88adef1c296bfd7fa44cf130aff6080c62816dd5282f7c586b71bb2fd4663a96b8b5a78eddb590f23da7a75ecf9732c2c779cb8011013c3d8c1ad55b08bea0a0dc88197e65c54dc05cbc75dae082e6e8780a44157fc3b94e1f2b65b72323ad14ea5568974b361abb9ede5ca41d537e26389d7a023d1da8670477fa6b53b48c54294ce311f49181013f9877f3ac04e367e5b39460772d072fe6ea13fd70cd237dde2fe4b8f1365f6b029c5c37ae4e39b847ea4c0ab4a3d654bf1559bb936c32f0ce80ef59936ed53e5542934d58c08cd59580b56f4e6bdfd6325ce635c0d44406e6743f894c5e31711af569d2cd5e4cce052bbad77433d96023c5c659f25fdee6225adaa647b649bb714f55d19e5b4aecb801cf25d2b627106a1def70263d535a1bd815b4404736599c4b38a17868b3984f60d9ad6f65914f0dfc582a08c1fdbb23a8166e18086b850c617b3aa5840ddbabf35bcb1c2ea5200571b9126fbbe98b70130388a9111543211e0f23566a6becf80c0e1549db1635f581b422a8e77f53f295444cac04a0ed9cadc10be5c27ce556765472ff3b8041de0129bda528cc6a0707200ca688271656fe3363c478af50c7633e390c5531b102d4ff7025d5590a8c60fa2f555cdc013fb83842ed5419fecef632ddd59818a8efd4c0eaf5bb066b21b03dc63bec018b24d10d0df77a69ba5265bfd441b487f63e104b492ced94d89f1f44c24e171677f74f9e84495b195d6fc63414b1be5956df0dc33107dfc884f5c60489e30252fd077749b847dcdc4f7a039ea91f7d9bf13246759aa7461b1945e8265c2ba422bfb3ed82b3d6055a577f487ccbf1bcd7e8b2d24e172996e195899a1084371aae4a6df6a2690978c84b0ddee92cb7256980b5dd4de389910023a1a09aeccbd9ce53dd9ce083badbaa47ccbd15554de9412d087209c9c98563586e70f5ba384dfcddfe53db09408c1145744b1d9fd05fd74741bcb65786728c9aa530fb896f2610d08f5f781cc3a4fc92a80762374dfdc4e0783a238cf67aa8424ab208266f569a584167c86deed822ec1fb611b5f3431ce87538cf7dda1af747ea361eb10aa11f8a939b47f99765a5dcc2ec2af866256bd58c500a32f07c4ce7de5f20c78286fdae99735b1cf294b45e04aa3552f5c3d8845aedad098d8ce3c2c3ba8dea0850eeb5e79b1942f9f4152145ffc09b90050546847a467413b5ec7cb259efc3823b78483808a3ec737483999758c0e23b5f2a18685c67c8a75dd2e42423922973ee7f05cced7ec54b3d294f847b4d0a525d29db4f35c7e945b796ceefe32c2e5eb96e4e8f83adae4ed6610e4cca3c12e8de6e024fb7664bc52918825978d3c6b1e5a3f96650df0cc1f25e85a6b4464565865c06524482210442f7ef27ec530f3beeeb608e3945094f735fffb99f250762f098785a6a256d95bb4329f440c3b73d1b5972e7a99b94f68a6abfab28702b073c52225f920b6ccff070323cbc1b80554226ab8ec592f7860a7a1bde103cf55f9b2fed835a5d50d7f9ffd60f4270703ff74ffc5667fba483f6463528838ecf9e90472dc532e445308dccb44189c20eb2a77dfc9523fe90cf2c135b42e66ea082db925756fc39abcb3bf8785f9be2a4e58d5c3290b114afa483ac4de7c2cdb1a60ee0b14c4188260c67576e38aad879af741cddc8d1e99eef9f0e16166baf1eea35a12120dd9bd6452f6ceaa95d4f732c9728dbf9f1216fc48d75266042a48bec1b6659d6b433699dc216002541a1111e33da39a332c73cfdae89c4ad3c42a1f87d1bf3d397030f8fb2ccce70af595d555ecd96cc367465faa700b77511e0931714639a2f9d002206822510f0a6b1e051180ce281d7afcf11cc82183a9ff4697d19229ee5b25288712f4dc4cde636ab4cfaf371544bc74b29f9e51f8c20f764b35be0c53525e5d6be7b3e316c47349970be1bdac90d2c7caad5698ea16b8228341e7d094ca055ef0c1b14f1ba63adf127808a2bcab1182b3f809afc2295eed867bd12b6203ebba23b8746700875acd50195c4c74d6584811a22899c6df846687fb4baa1570f45fc54db1cc170052f3159627eda2ac4ca0e4ac8c80342693f8bd257b0913760bac8cd97729949f26c187a6c203247557a7fa6c7119a7b734bf46e480e296e6a1c0df3947d78a7d96aa05b67ccab77804651e6f0c11899adc1423bc3611c4d3281398f1229593048d89179bb0dc9ea0faac2146508cbc536eb1666ae1e5e2603f9b41108bbaa048daf3058697ab1d82bbba1fcd12f0663f2ee999be4724ddc7ab95d076c23da5f4fd735800ccec76ed0b9dc61293bea59dc723bd5c2e17a6cd57afc6c1b08a64bbcebd86a5aca0bcfde98dcfa8636f201f7590d8c576d0e852702ef253e56a93e93052dcfb7ba681e1be23f9882bd6ef396444b6549c389f932abb40fe6d7ca263007f910fcb050c555a0152968375fa7dea6b20debb9d5d6636f954a4341289e250d24192f8940424c0f5f4b7ae45a5c16a412275a1d6d74d07c87e7fd354a4453ecfb698b25d7fb57090bad02aa93e456f855d5fc89ed8813578b8053db6a76e820edd9649e5a0e6fa246c70538899cd5d4c5acdf15e47e1e7847842a652e0d67480a4a40e7c191ee40f6639bcc68e7472ea8ae735d4d49dc3b4b54c8a09fb5bd5043f8697b3e8350e0b304072498ec3fe3ef4ae3a7fe656ef3c05e86392b900bbdc454e2a562511ca48bc8ef3342453f2669f28df9b0bd21670a0b474b03d938a2a50780c8c2594c732be90a5ee3c936f8b989b07cef8d04f2a1bad7b329b52830b40a80238d9625ae568a79757835a8583b178d06fdf01a45ad303d59f2c254cfce3298178486ee8faf16e44064bd8cfd75e22be5a97ffdee4be6"}) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000100)="26c2", 0xfffff, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="050000ed7336c4f5c87daced8a32cb7408000900", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003, r0}, 0x38) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x4}, 0x38) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x3, 0x53b480) getsockname$netlink(r1, &(0x7f0000000040), &(0x7f00000000c0)=0xc) 1.058715911s ago: executing program 0 (id=1021): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r8 = getpgrp(0xffffffffffffffff) move_pages(r8, 0x3, &(0x7f0000000500)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff3000/0xd000)=nil], &(0x7f0000000540)=[0x7, 0xb4, 0x4, 0x6, 0x0, 0xff, 0x80, 0x40], &(0x7f0000000580)=[0x0, 0x0], 0x2) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r9, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) pselect6(0x40, &(0x7f0000000040)={0x3, 0x2, 0x4, 0x81, 0x77d, 0x2, 0x14, 0xc0000000000}, 0x0, &(0x7f0000000180)={0x8, 0x10000, 0x3, 0x9, 0xfffffffffffffff7, 0x3, 0x37339521, 0x1}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0) write$FUSE_ATTR(r9, &(0x7f0000000240)={0x78, 0x0, r10, {0x2000000007, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x55, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x1ff, 0xa000, 0xa0000000, 0x0, r12, 0x0, 0x0, 0x1000000}}}, 0x78) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000180)={0x1d, r13, 0x1, {0x0, 0xf0, 0x4}, 0xfd}, 0x18) r14 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r14, &(0x7f0000000340)={0x1d, r7, 0x1, {0x0, 0xff, 0x6}, 0xfe}, 0x18) close_range(r4, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_io_uring_setup(0x6c2a, &(0x7f0000000080)={0x0, 0x8a98, 0x4, 0x1, 0x1fd}, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)=0x0) r18 = socket$pppoe(0x18, 0x1, 0x0) syz_io_uring_submit(0x0, r2, r17, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x40, 0x4007, @fd=r18, 0x7fff, &(0x7f0000000340)=[{&(0x7f0000000200)="d64d17fd10dcba02c2e58810e1a0288feaf89df28d6dcbdba756e87dbb22bb18f60ce3fdd1562cf62bee2e2bfdad71f82d3238aea8015c4a298564ddc08e58e47d7cd943c7394dba7beca3734fd44b37083b674d59381d067d4f0e7ae75b1fe8f8e0791ac7f927b893108d075056423469e624d3f3d8cabff667b48096716dd536a9d440ba3ba9a16a700e508072ae84401b3e5aab53e6dd2513b2bf466ba7de06d6b01d32e6cd8f2a1b0e6967e6028ed5576ba6949e4679b3763e88e20c532b0d68c018a65e4274134788af0d8b1d5673c2ec22a79dc8", 0xd7}, {&(0x7f0000000300)="7e5262f087907512ee0ba7e348428b97fa234cc1c8f6ecc5a9443518cc5ec593609a1811d8287c0dfe58dc7644", 0x2d}], 0x2, 0x0, 0x0, {0x2, 0x0, 0x4, '\x00', &(0x7f0000000400)={0xa98c, 0x7, 0x69, &(0x7f0000000380)="a924512ab0899f6a09ffcc7e93c4e7e572fa4c802cad28cf8e2f9d1b3b50cb6f951aa9eaaed72892951195f96de5f6b88485c116d397c053558348ca3c57db5eb180f19ca478bead15233cfd10d3c2a7527d1c9206b21d00a0d475638bcca69d475327d65f8239bfd4", 0x9}, 0x1001}}) read$FUSE(0xffffffffffffffff, &(0x7f00000059c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r9, &(0x7f0000007a00)={0x490, 0x0, r15, [{{0x6, 0x0, 0x6, 0x0, 0x4, 0x9, {0x5, 0x3, 0x4, 0x2, 0x8, 0x10000, 0xb, 0x1, 0xffffffff, 0xc000, 0x9, r16, r12, 0x200, 0xe607}}, {0x0, 0xcd, 0xa, 0xa, '/dev/cuse\x00'}}, {{0x1, 0x2, 0x0, 0x4, 0xd71, 0x0, {0x0, 0xc22c, 0x4, 0x1, 0xe6, 0x5, 0x0, 0x6, 0xfff, 0x6000, 0x9, r11, r12, 0xd, 0x4}}, {0x0, 0xfff, 0x5, 0x7b, '$(-\x11&'}}, {{0x6, 0x3, 0x1, 0x5, 0x0, 0x5, {0x6, 0x6, 0x20000000006, 0x8, 0x6, 0xd, 0x9, 0x47f, 0x8, 0x4000, 0x39, 0xee01, r12, 0x8, 0x4}}, {0x9, 0x2, 0xb, 0x3, 'SMC_PNETID\x00'}}, {{0x5, 0x0, 0x6, 0x200000, 0x1000, 0x3, {0x6, 0x0, 0x0, 0x62fe, 0x9, 0xe7, 0x7, 0x1, 0x3, 0x4000, 0x7ff, 0x0, 0x0, 0x369, 0x7ff}}, {0x3, 0xff, 0xa, 0x1, '/dev/cuse\x00'}}, {{0x2, 0x0, 0x19, 0x7fffffffffffffff, 0x5, 0x5, {0x5, 0xe, 0x2, 0x101, 0x2, 0x8000000000000001, 0x6, 0x8, 0x6, 0x4000, 0x7, 0x0, r12, 0x8, 0x9}}, {0x1, 0x8001, 0x2, 0xb, ':]'}}, {{0x2, 0x0, 0x6, 0x2, 0x6, 0x2, {0x2, 0x4, 0xfffffffffffffffa, 0xe63, 0x8000000000000000, 0x6, 0x1, 0x4, 0x2, 0x6000, 0x1, r16, r19, 0x10001, 0x8}}, {0x5, 0x1, 0x5, 0x5e, '\xa6-]+\''}}, {{0x4, 0x0, 0x400, 0x5, 0xe74, 0x3, {0x3, 0x7ff0000000000, 0x0, 0xe, 0x94f6, 0x1, 0x4, 0x8, 0x7, 0x8000, 0xfffffff8, r16, r12, 0xa2b, 0xec0000}}, {0x5, 0xffffffffffff8000, 0xa, 0x6, '/dev/vmci\x00'}}]}, 0x490) r20 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r20, 0x117, 0x1, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00i\x00\x00\x00\x00', 0x10) r21 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r21, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r21, 0x7a9, 0x0) r22 = accept4(r20, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r22) 1.058326216s ago: executing program 2 (id=1022): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000007000000c3650000ffffffff12010000", @ANYRES32=0x1, @ANYBLOB="02cf00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0x1, 0x5, 0xd4af6242c2bee7c9, @mcast2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8, 0x7800, 0x8, 0x4}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='6\x00'], 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058", @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r6, 0x400455c8, 0x1) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r6, 0x8008f512, &(0x7f0000000080)) write$binfmt_script(r6, &(0x7f0000000100)={'#! ', './file0', [{0x20, '/dev/ptmx\x00'}, {0x20, '/dev/ptmx\x00'}, {0x20, '0@%'}, {0x20, '/dev/ptmx\x00'}], 0xa, "cc682e403f2d5c055ed168c2895b909dce8939f0e72c77735915eb276fb58b838e230911c433be9c7b92b01def953ab0d044f85c1bf3"}, 0x66) r7 = openat$vim2m(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r7, 0xc0cc5640, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0xfc) 1.01186805s ago: executing program 1 (id=1023): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) flistxattr(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_clone(0x50083100, &(0x7f00000003c0)="3dcb2229d4015ecee4f5c2b80a14fcda733da0aa1d183d644e6288afeadc6481ce4a1a8de0ef6db4dce0d7905ee48cf27fed4d4618b393443456f66ee8dcb2cdc8eeab84805e788c7a6c593c3acb880f038b24b63239f59d4dfe4e41d2bae1711bc3ebe57928d1b97d825f30257ae1525d87c29e07b2e49d501a067c23e0708ea9f53852bc3bb8ea8f606d8adc6c5c824ce28384e5b8955a28818e136ac456b4f80fbdb5d79ca45ea776936a5284ac941f14dda311e9a6280fd981", 0xbb, &(0x7f0000000480), &(0x7f00000006c0), &(0x7f0000000700)="3839d1326dd91b5f8d3d863339578bc3b21fd41c6036c7ee008db6512e2ca866c3f4f3e89b07692676eb6cc6c22b40c93948c469c3dcb2055ef69bd0419eabd442f7afaba4755352b616d0e7a0d8058b9d38e3790b0528c08d44346d8a9c6d56fbdf2fb7b78e820753993e3962e34347ce7aec0383b6745205b8cf3fd70edbb4111130f9") r2 = getpgrp(0x0) tgkill(r1, r2, 0x19) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000038000180060001000200000008000500000000000c0007000000"], 0x4c}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) mkdir(&(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r5, &(0x7f00000007c0)="3300eba51e821efba578e5fde7dda41741194e9b34968877b68c793d1ad4eec6a5e1d59d26c3afa2cdc82682949e2b486ed1c3c96174969d28e47b2557bf9854b761a8a6a5a67c9aa3260e788e", 0x4d) r6 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="d20000000504000087000000757ec1471be8f8f93fd5e142eaf9cfd60c3eeb2be0de6a65860fd51df7bd4ad05d2e47a4311d59ff71b7393433e9fa581402c46958961dab41eaf5ff41f17906ce0883498e542d0008000024a3c9346fe51101a197d212796eef655ff935f473d81a011e607a31ec47095549b6e20190e5b9daaecaeb7f7ecfdb47dd6e711ed28f125f5748bd051bb4c2d4ad915259138e07f79a13c528babbdccb83e2c92aa54006e802a791042ff39a41bfde9ba4956a744d2a33b938a9a4c73cb3cca453dd7340fd3e51ac63fbc7636be0027ae0f679a637e42a68de35ca1a912505f637a8c0908fa70062572822c557e6bd96a22992aa8e0dc18e5491d228ae9852f168a8ce96b015b063e27f7a6b160828caf66bbac4a4b36f5962e2da4cbfcbfc19d090f8826a2294f21aa2ddf70c73a0a4f4813366f1bad9b40bac9dfaf8c93c0592ed6c13a8224194c9019492f47a1635f76809c2394e2cdc90b524024f7474afc9261a7ab70611c6b21c38292d508a3da2836fc0792f400673f5bdd42e9905f616071af7f3028742b678f819ab4b285f014b9525d68524e170270e515f4f"]) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) 855.927081ms ago: executing program 0 (id=1024): r0 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000340)) timer_settime(r1, 0x1, &(0x7f000006b000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r2 = eventfd2(0x8, 0x0) syz_clone3(&(0x7f0000000080)={0x1801480, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x7ffffffe, 0x0, 0x0) r5 = pidfd_getfd(r3, r3, 0x0) write$eventfd(r2, &(0x7f0000000140)=0xfffffffffffffffc, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x1, 0x0) write(r7, &(0x7f0000000680)='1', 0x1) syz_usb_connect$uac3(0x3, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat$dir(0xffffff9c, &(0x7f0000000040)='./trace/events/mac80211/enable\x00', 0xc040, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) read(r2, &(0x7f0000000980)=""/81, 0x51) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x50, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10d, 0x0, 0x1, [@typed={0x8, 0x150, 0x0, 0x0, @fd=r5}]}]}, @nested={0x28, 0x2, 0x0, 0x1, [@nested={0x22, 0x14, 0x0, 0x1, [@generic="1e0013ac58eccc52a6179d4896ee29a9355bf31e841904efec71a57d9766"]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) 56.466057ms ago: executing program 0 (id=1025): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000a40)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x8000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000340)='$', 0x1}], 0x1}}], 0x2, 0x40408d1) shutdown(r1, 0x1) setsockopt(r1, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001780), 0xa00, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000017c0), 0x44003, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffff, 0xffe0}, {}, {0xa, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1ff, 0xc, 0x0, 0x7, 0x400}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000001300)={0xe, 0x18, 0xfa00, @id_tos={0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1b}}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r7 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r7, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000004c0)={0x0, 0xc8, "59a51ceec9107aafb1798239af64a96c29932a96a77eb43b8ae2815c308eeec66ac276189efd2766bcc95732ea9d5f8e136ba89a2fe773bd405d1584ddb355499d3cd14f984f9b20f1b699c5460a7d8c3444bf50cc6f1460488b0e2433764714617be12bcf0d5e2815624880643f3f436bca3139dbcaa219b410ca73cfdf54540943bbbde555f291a7300236011b6968daaaba7a5126a61f8ebf828ceb070923dc990b835f11c795347c1051356b4b60e3b8d8365dbfd5bb9be824857e21cb9e9b33d2289074e44d"}, &(0x7f00000005c0)=0xd0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000700)={r9, @in={{0x2, 0x4e20, @local}}}, &(0x7f00000007c0)=0x84) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r10 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) 0s ago: executing program 1 (id=1026): select(0xfffffffffffffe43, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 0/0x190 [ 121.526825][ T7742] should_fail_ex.cold+0x5/0xa [ 121.526838][ T7742] _copy_from_user+0x2e/0xd0 [ 121.526856][ T7742] get_compat_msghdr+0xb3/0x480 [ 121.526874][ T7742] ? __pfx_get_compat_msghdr+0x10/0x10 [ 121.526895][ T7742] ___sys_sendmsg+0x1b6/0x1e0 [ 121.526908][ T7742] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.526926][ T7742] ? find_held_lock+0x2b/0x80 [ 121.526950][ T7742] __sys_sendmsg+0x160/0x210 [ 121.526965][ T7742] ? __pfx___sys_sendmsg+0x10/0x10 [ 121.526984][ T7742] ? __pfx_ksys_write+0x10/0x10 [ 121.526997][ T7742] __do_fast_syscall_32+0xe7/0x970 [ 121.527013][ T7742] ? lockdep_hardirqs_on+0x78/0x100 [ 121.527027][ T7742] do_fast_syscall_32+0x32/0x70 [ 121.527042][ T7742] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 121.527056][ T7742] RIP: 0023:0xf7f82fec [ 121.527070][ T7742] Code: Unable to access opcode bytes at 0xf7f82fc2. [ 121.527075][ T7742] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 121.527086][ T7742] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 121.527093][ T7742] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 121.527099][ T7742] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 121.527105][ T7742] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 121.527111][ T7742] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 121.527124][ T7742] [ 121.570955][ T5601] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 121.662361][ T7750] ip6gretap1: entered allmulticast mode [ 121.665392][ T7750] batman_adv: batadv0: Adding interface: ip6gretap1 [ 121.667535][ T7750] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.675571][ T7750] batman_adv: batadv0: Interface activated: ip6gretap1 [ 121.759740][ T7752] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 121.761841][ T7752] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 121.765238][ T7752] vhci_hcd vhci_hcd.0: Device attached [ 121.784181][ T5601] usb 8-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice= 1.00 [ 121.790423][ T5601] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.794741][ T5601] usb 8-1: Product: syz [ 121.797334][ T5601] usb 8-1: Manufacturer: syz [ 121.801902][ T5601] usb 8-1: SerialNumber: syz [ 121.817085][ T7752] wg2 speed is unknown, defaulting to 1000 [ 121.832379][ T7752] wg2 speed is unknown, defaulting to 1000 [ 121.853631][ T7752] wg2 speed is unknown, defaulting to 1000 [ 121.912237][ T5601] viperboard 8-1:1.0: version 0.00 found at bus 008 address 009 [ 121.938566][ T5601] viperboard-i2c viperboard-i2c.3.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 121.943300][ T5601] viperboard-i2c viperboard-i2c.3.auto: probe with driver viperboard-i2c failed with error -5 [ 122.093555][ T7761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.475'. [ 122.095993][ T5831] usb 38-1: SetAddress Request (2) to port 0 [ 122.098558][ T5831] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 122.246010][ T5601] wg2 speed is unknown, defaulting to 1000 [ 122.252986][ T7752] infiniband syz2: set active [ 122.261455][ T7752] infiniband syz2: added wg2 [ 122.304387][ T7752] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 122.316303][ T7752] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 122.328170][ T7752] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 122.370230][ T7753] vhci_hcd: connection reset by peer [ 122.371904][ T7752] RDS/IB: syz2: added [ 122.374383][ T7752] smc: adding ib device syz2 with port count 1 [ 122.374442][ T13] vhci_hcd vhci_hcd.0: stop threads [ 122.376754][ T7752] smc: ib device syz2 port 1 has no pnetid [ 122.380257][ T13] vhci_hcd vhci_hcd.0: release socket [ 122.383476][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 122.383847][ T5601] wg2 speed is unknown, defaulting to 1000 [ 122.392138][ T7752] wg2 speed is unknown, defaulting to 1000 [ 122.529257][ T7752] wg2 speed is unknown, defaulting to 1000 [ 122.639391][ T7752] wg2 speed is unknown, defaulting to 1000 [ 122.763138][ T7752] wg2 speed is unknown, defaulting to 1000 [ 123.076084][ T5832] usb 8-1: USB disconnect, device number 9 [ 123.293832][ T7780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.490'. [ 123.298938][ T7780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.490'. [ 123.704119][ T7786] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 123.878195][ T7786] can0: slcan on ttyS3. [ 123.967155][ T42] audit: type=1804 audit(1785578394.001:47): pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.494" name="bus" dev="ramfs" ino=17492 res=1 errno=0 [ 123.986361][ T42] audit: type=1804 audit(1785578394.021:48): pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.494" name="bus" dev="ramfs" ino=17492 res=1 errno=0 [ 124.006372][ T7786] can0 (unregistered): slcan off ttyS3. [ 124.135081][ T7796] CIFS mount error: No usable UNC path provided in device string! [ 124.135081][ T7796] [ 124.138473][ T7796] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 124.251369][ T7796] overlayfs: failed to resolve './file1/file0': -2 [ 124.615009][ T7804] netlink: 36 bytes leftover after parsing attributes in process `syz.1.497'. [ 124.626139][ T7804] netlink: 16 bytes leftover after parsing attributes in process `syz.1.497'. [ 125.631157][ T7826] __nla_validate_parse: 1 callbacks suppressed [ 125.631176][ T7826] netlink: 72 bytes leftover after parsing attributes in process `syz.3.501'. [ 126.614328][ T42] audit: type=1326 audit(1785578396.651:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.3.506" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7fec code=0x7ffc0000 [ 126.648392][ T42] audit: type=1326 audit(1785578396.661:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.3.506" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7fb7fec code=0x7ffc0000 [ 126.677319][ T42] audit: type=1326 audit(1785578396.661:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.3.506" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7fec code=0x7ffc0000 [ 126.703209][ T42] audit: type=1326 audit(1785578396.661:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.3.506" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb7fec code=0x7ffc0000 [ 126.727431][ T42] audit: type=1326 audit(1785578396.661:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.3.506" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7fec code=0x7ffc0000 [ 126.754546][ T42] audit: type=1326 audit(1785578396.661:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.3.506" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7fb7fec code=0x7ffc0000 [ 126.770663][ T42] audit: type=1326 audit(1785578396.661:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.3.506" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7fec code=0x7ffc0000 [ 126.779380][ T42] audit: type=1326 audit(1785578396.661:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.3.506" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb7fec code=0x7ffc0000 [ 126.794121][ T7865] syzkaller0: entered promiscuous mode [ 126.796612][ T7865] syzkaller0: entered allmulticast mode [ 126.810487][ T7865] tipc: Enabled bearer , priority 0 [ 126.822883][ T7865] tipc: Resetting bearer [ 126.837219][ T7863] tipc: Resetting bearer [ 126.855116][ T7863] tipc: Disabling bearer [ 127.152471][ T5831] usb 38-1: device descriptor read/8, error -110 [ 127.158469][ T7877] netlink: zone id is out of range [ 127.164781][ T7877] netlink: zone id is out of range [ 127.176504][ T7877] netlink: zone id is out of range [ 127.180648][ T7877] netlink: zone id is out of range [ 127.189784][ T7877] netlink: zone id is out of range [ 127.193952][ T7877] netlink: zone id is out of range [ 127.196202][ T7877] netlink: zone id is out of range [ 127.203498][ T7877] netlink: zone id is out of range [ 127.206770][ T7877] netlink: zone id is out of range [ 127.211714][ T7877] netlink: zone id is out of range [ 127.576100][ T5831] usb usb38-port1: attempt power cycle [ 128.162129][ T5831] usb usb38-port1: unable to enumerate USB device [ 128.316893][ T7893] tmpfs: Bad value for 'mpol' [ 128.492742][ T7896] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 128.507108][ T7897] IPVS: stopping backup sync thread 7896 ... [ 128.660595][ T7899] siw: device registration error -23 [ 128.733420][ T7900] lo speed is unknown, defaulting to 1000 [ 128.751169][ T7900] lo speed is unknown, defaulting to 1000 [ 128.784749][ T7900] lo speed is unknown, defaulting to 1000 [ 129.295259][ T7904] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 129.298756][ T7904] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 129.421205][ T5832] lo speed is unknown, defaulting to 1000 [ 129.429221][ T7900] infiniband sz1: set active [ 129.430754][ T7900] infiniband sz1: added lo [ 129.438103][ T7900] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 129.442854][ T7900] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 129.448327][ T7900] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 129.469827][ T7900] RDS/IB: sz1: added [ 129.471561][ T7900] smc: adding ib device sz1 with port count 1 [ 129.473599][ T7900] smc: ib device sz1 port 1 has no pnetid [ 129.475514][ T5832] lo speed is unknown, defaulting to 1000 [ 129.477916][ T7900] lo speed is unknown, defaulting to 1000 [ 129.568691][ T7900] lo speed is unknown, defaulting to 1000 [ 129.587178][ T7914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.521'. [ 129.596915][ T5923] libceph: connect (1)[c::]:6789 error -101 [ 129.599611][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 129.602613][ T5923] libceph: connect (1)[c::]:6789 error -101 [ 129.605017][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 129.643844][ T7915] ceph: No mds server is up or the cluster is laggy [ 129.665648][ T7900] lo speed is unknown, defaulting to 1000 [ 129.749195][ T7900] lo speed is unknown, defaulting to 1000 [ 129.832591][ T7899] infiniband syz1: set down [ 129.834116][ T7899] infiniband syz1: added syz_tun [ 129.839726][ T7899] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 129.842702][ T7899] infiniband syz1: Couldn't open port 1 [ 129.847226][ T7899] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 129.851937][ T7899] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 129.857213][ T7899] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 129.877428][ T7899] RDS/IB: syz1: added [ 129.880038][ T7899] smc: adding ib device syz1 with port count 1 [ 129.882489][ T7899] smc: ib device syz1 port 1 has no pnetid [ 130.309008][ T7923] syzkaller0: entered promiscuous mode [ 130.316437][ T7923] syzkaller0: entered allmulticast mode [ 130.422757][ T7927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.525'. [ 130.426310][ T7927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.525'. [ 130.799027][ T7938] can0: slcan on ttyS3. [ 130.915797][ T7947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.528'. [ 130.919521][ T7947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.528'. [ 131.008236][ T7949] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 131.012125][ T7949] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 131.159362][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 131.159374][ T42] audit: type=1800 audit(1785578401.191:89): pid=7951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.530" name="/" dev="fuse" ino=1 res=0 errno=0 [ 131.249755][ T7955] tipc: Started in network mode [ 131.251429][ T7955] tipc: Node identity 5a5f346b7388, cluster identity 4711 [ 131.254236][ T7955] tipc: Enabled bearer , priority 0 [ 131.366028][ T7928] can0 (unregistered): slcan off ttyS3. [ 131.453940][ T7953] tipc: Disabling bearer [ 131.570208][ T7975] comedi comedi0: comedi_bond: 4:2 attached, 32 channels from 1 devices [ 131.703486][ T7982] syzkaller0: entered promiscuous mode [ 131.705323][ T7982] syzkaller0: entered allmulticast mode [ 131.880282][ T7985] CIFS mount error: No usable UNC path provided in device string! [ 131.880282][ T7985] [ 131.892341][ T7985] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 132.033921][ T7992] overlayfs: failed to resolve './file1/file0': -2 [ 132.267694][ T42] audit: type=1326 audit(1785578402.301:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7989 comm="syz.3.540" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb7fec code=0x0 [ 132.294678][ T7987] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 132.317260][ T7987] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 132.319958][ T7987] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 132.322746][ T7987] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 132.326758][ T7987] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 132.393926][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.497034][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.523461][ T7987] pci 0000:00:01.0: Adding to iommu group 1 [ 132.544365][ T7987] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 132.547328][ T7987] pci 0000:00:01.0: vgaarb: bridge control possible [ 132.550124][ T7987] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 132.570704][ T7987] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 132.586084][ T7987] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 132.686287][ T7987] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 132.688086][ T5923] libceph: connect (1)[c::]:6789 error -101 [ 132.693671][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 132.717318][ T8005] ceph: No mds server is up or the cluster is laggy [ 132.787766][ T7987] [drm] Found bochs VGA, ID 0xb0c5. [ 132.802028][ T7987] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 132.931972][ T7987] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 132.961487][ T5831] libceph: connect (1)[c::]:6789 error -101 [ 132.965367][ T5831] libceph: mon0 (1)[c::]:6789 connect error [ 133.179572][ T8016] netlink: 'syz.1.547': attribute type 12 has an invalid length. [ 133.193075][ T8016] netlink: 'syz.1.547': attribute type 29 has an invalid length. [ 133.206262][ T8016] netlink: 148 bytes leftover after parsing attributes in process `syz.1.547'. [ 133.224406][ T8016] netlink: 59 bytes leftover after parsing attributes in process `syz.1.547'. [ 133.243286][ T7987] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 133.552714][ T8018] ucma_write: process 410 (syz.0.548) changed security contexts after opening file descriptor, this is not allowed. [ 133.637251][ T8020] CIFS mount error: No usable UNC path provided in device string! [ 133.637251][ T8020] [ 133.640522][ T8020] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 133.643127][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.551'. [ 133.755084][ T8020] overlayfs: failed to resolve './file1/file0': -2 [ 133.929267][ T8039] net_ratelimit: 9 callbacks suppressed [ 133.929280][ T8039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.953311][ T8039] netlink: 20 bytes leftover after parsing attributes in process `syz.2.557'. [ 133.964100][ T8039] netlink: 144 bytes leftover after parsing attributes in process `syz.2.557'. [ 134.091826][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.557'. [ 134.349591][ T5831] libceph: connect (1)[c::]:6789 error -101 [ 134.356623][ T5831] libceph: mon0 (1)[c::]:6789 connect error [ 134.362442][ T8045] ceph: No mds server is up or the cluster is laggy [ 134.993994][ T8064] CIFS mount error: No usable UNC path provided in device string! [ 134.993994][ T8064] [ 134.998292][ T8064] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 135.001740][ T5853] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 135.113696][ T8064] overlayfs: failed to resolve './file1/file0': -2 [ 135.160907][ T5853] usb 7-1: Using ep0 maxpacket: 8 [ 135.168782][ T5853] usb 7-1: config 0 has no interfaces? [ 135.173403][ T5853] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 135.185836][ T5853] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.198413][ T5853] usb 7-1: config 0 descriptor?? [ 135.249870][ T8068] netlink: 36 bytes leftover after parsing attributes in process `syz.1.565'. [ 135.311919][ T42] audit: type=1800 audit(1785578405.351:91): pid=8075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.566" name="c_srate" dev="configfs" ino=17984 res=0 errno=0 [ 135.433904][ T10] usb 7-1: USB disconnect, device number 4 [ 135.620554][ T8092] Cannot find set identified by id 1 to match [ 135.994690][ T8101] syzkaller1: entered promiscuous mode [ 135.996481][ T8101] syzkaller1: entered allmulticast mode [ 136.209629][ T8108] syz_tun: left allmulticast mode [ 136.211961][ T8108] syz_tun: left promiscuous mode [ 136.217415][ T8108] bridge0: port 3(syz_tun) entered disabled state [ 136.227581][ T8108] CIFS mount error: No usable UNC path provided in device string! [ 136.227581][ T8108] [ 136.234530][ T8108] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 136.346378][ T8108] overlayfs: failed to resolve './file1/file0': -2 [ 136.393769][ T5831] libceph: connect (1)[c::]:6789 error -101 [ 136.400067][ T5831] libceph: mon0 (1)[c::]:6789 connect error [ 136.451871][ T8115] netlink: 36 bytes leftover after parsing attributes in process `syz.0.575'. [ 136.456231][ T8111] ceph: No mds server is up or the cluster is laggy [ 136.773051][ T8136] No source specified [ 137.116636][ T8153] syz_tun: left allmulticast mode [ 137.118975][ T8153] syz_tun: left promiscuous mode [ 137.124490][ T8153] bridge0: port 3(syz_tun) entered disabled state [ 137.133697][ T8153] CIFS mount error: No usable UNC path provided in device string! [ 137.133697][ T8153] [ 137.137913][ T8153] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 137.197661][ T8158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.586'. [ 137.201448][ T8158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.586'. [ 137.251324][ T8153] overlayfs: failed to resolve './file1/file0': -2 [ 137.586699][ T8163] netlink: 'syz.3.588': attribute type 1 has an invalid length. [ 137.702917][ T8173] bridge0: port 3(syz_tun) entered blocking state [ 137.705884][ T8173] bridge0: port 3(syz_tun) entered disabled state [ 137.708840][ T8173] syz_tun: entered allmulticast mode [ 137.716761][ T8173] syz_tun: entered promiscuous mode [ 137.727199][ T8176] program syz.1.587 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.727604][ T8173] CIFS mount error: No usable UNC path provided in device string! [ 137.727604][ T8173] [ 137.727922][ T8175] syzkaller1: entered promiscuous mode [ 137.727951][ T8175] syzkaller1: entered allmulticast mode [ 137.754176][ T8173] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 137.904892][ T8173] overlayfs: failed to resolve './file1/file0': -2 [ 137.907532][ T42] audit: type=1800 audit(1785578663.942:92): pid=8180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.593" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 138.060746][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.595'. [ 138.087878][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.595'. [ 138.199164][ T8188] overlayfs: missing 'lowerdir' [ 138.297479][ T8190] syz_tun: left allmulticast mode [ 138.299284][ T8190] syz_tun: left promiscuous mode [ 138.307494][ T8190] bridge0: port 3(syz_tun) entered disabled state [ 138.362825][ T8190] CIFS mount error: No usable UNC path provided in device string! [ 138.362825][ T8190] [ 138.371447][ T8190] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 138.630413][ T8197] overlayfs: failed to resolve './file1/file0': -2 [ 138.913345][ T5923] lo speed is unknown, defaulting to 1000 [ 139.186705][ T8201] program syz.1.599 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.303001][ T8214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.604'. [ 139.304729][ T8213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.306572][ T8214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.604'. [ 139.820908][ T8216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.605'. [ 140.293790][ T8223] netlink: 128 bytes leftover after parsing attributes in process `syz.1.606'. [ 140.302302][ T8223] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 140.323065][ T8225] CIFS mount error: No usable UNC path provided in device string! [ 140.323065][ T8225] [ 140.330455][ T8223] netlink: 28 bytes leftover after parsing attributes in process `syz.1.606'. [ 140.334239][ T8225] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 140.405722][ T8228] FAULT_INJECTION: forcing a failure. [ 140.405722][ T8228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.414861][ T8228] CPU: 1 UID: 0 PID: 8228 Comm: syz.0.610 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.414881][ T8228] Tainted: [L]=SOFTLOCKUP [ 140.414885][ T8228] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.414900][ T8228] Call Trace: [ 140.414910][ T8228] [ 140.414915][ T8228] dump_stack_lvl+0x100/0x190 [ 140.414991][ T8228] should_fail_ex.cold+0x5/0xa [ 140.415011][ T8228] _copy_to_user+0x32/0xd0 [ 140.415051][ T8228] simple_read_from_buffer+0xcb/0x170 [ 140.415070][ T8228] proc_fail_nth_read+0x1af/0x230 [ 140.415086][ T8228] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.415115][ T8228] ? rw_verify_area+0xce/0x6d0 [ 140.415139][ T8228] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.415154][ T8228] vfs_read+0x1e4/0xb40 [ 140.415167][ T8228] ? __pfx_vfs_read+0x10/0x10 [ 140.415176][ T8228] ? find_held_lock+0x2b/0x80 [ 140.415196][ T8228] ? __fget_files+0x215/0x3d0 [ 140.415210][ T8228] ? __fget_files+0x21f/0x3d0 [ 140.415223][ T8228] ksys_read+0x12a/0x250 [ 140.415233][ T8228] ? __pfx_ksys_read+0x10/0x10 [ 140.415247][ T8228] do_int80_emulation+0x14b/0x720 [ 140.415285][ T8228] asm_int80_emulation+0x1a/0x20 [ 140.415297][ T8228] RIP: 0023:0xf71673eb [ 140.415307][ T8228] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 140.415319][ T8228] RSP: 002b:00000000f54264bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 140.415344][ T8228] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54265d0 [ 140.415352][ T8228] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 140.415358][ T8228] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 140.415364][ T8228] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 140.415371][ T8228] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 140.415384][ T8228] [ 140.486961][ T8230] bond2: Invalid ad_actor_system MAC address. [ 140.488821][ T8225] overlayfs: failed to resolve './file1/file0': -2 [ 140.489044][ T8230] bond2: option ad_actor_system: invalid value (5) [ 140.497006][ T8230] bond2 (unregistering): Released all slaves [ 140.999146][ T8259] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 142.046070][ T8284] __nla_validate_parse: 6 callbacks suppressed [ 142.046086][ T8284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.624'. [ 142.113821][ T8286] FAULT_INJECTION: forcing a failure. [ 142.113821][ T8286] name failslab, interval 1, probability 0, space 0, times 0 [ 142.132854][ T8286] CPU: 3 UID: 0 PID: 8286 Comm: syz.0.623 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.132875][ T8286] Tainted: [L]=SOFTLOCKUP [ 142.132880][ T8286] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 142.132886][ T8286] Call Trace: [ 142.132891][ T8286] [ 142.132896][ T8286] dump_stack_lvl+0x100/0x190 [ 142.132918][ T8286] should_fail_ex.cold+0x5/0xa [ 142.132931][ T8286] should_failslab+0xc2/0x120 [ 142.132962][ T8286] __kmalloc_noprof+0xfc/0x820 [ 142.132983][ T8286] ? tomoyo_encode2+0xfb/0x3c0 [ 142.133002][ T8286] tomoyo_encode2+0xfb/0x3c0 [ 142.133020][ T8286] tomoyo_encode+0x29/0x50 [ 142.133036][ T8286] tomoyo_realpath_from_path+0x18c/0x690 [ 142.133056][ T8286] tomoyo_path_number_perm+0x23c/0x580 [ 142.133070][ T8286] ? tomoyo_path_number_perm+0x22e/0x580 [ 142.133086][ T8286] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 142.133101][ T8286] ? get_pid_task+0x106/0x250 [ 142.133133][ T8286] ? find_held_lock+0x2b/0x80 [ 142.133148][ T8286] ? __fget_files+0x215/0x3d0 [ 142.133157][ T8286] ? hook_file_ioctl_common+0x140/0x440 [ 142.133172][ T8286] ? __fget_files+0x215/0x3d0 [ 142.133184][ T8286] ? __fget_files+0x21f/0x3d0 [ 142.133197][ T8286] security_file_ioctl_compat+0xd3/0x230 [ 142.133213][ T8286] __ia32_compat_sys_ioctl+0xc2/0x360 [ 142.133232][ T8286] __do_fast_syscall_32+0xe7/0x970 [ 142.133247][ T8286] ? lockdep_hardirqs_on+0x78/0x100 [ 142.133262][ T8286] do_fast_syscall_32+0x32/0x70 [ 142.133277][ T8286] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 142.133292][ T8286] RIP: 0023:0xf7f68fec [ 142.133306][ T8286] Code: Unable to access opcode bytes at 0xf7f68fc2. [ 142.133311][ T8286] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 142.133323][ T8286] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040104d07 [ 142.133330][ T8286] RDX: 0000000080000a00 RSI: 0000000000000000 RDI: 0000000000000000 [ 142.133336][ T8286] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 142.133342][ T8286] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 142.133349][ T8286] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 142.133362][ T8286] [ 142.133373][ T8286] ERROR: Out of memory at tomoyo_realpath_from_path. [ 142.317275][ T8290] IPv6: NLM_F_CREATE should be specified when creating new route [ 142.560218][ T8302] netlink: 28 bytes leftover after parsing attributes in process `syz.2.629'. [ 143.406833][ T8307] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 143.616983][ T8374] netlink: 318 bytes leftover after parsing attributes in process `syz.3.637'. [ 143.653704][ T8375] batadv_slave_1: entered promiscuous mode [ 143.661068][ T8375] batadv_slave_1: left promiscuous mode [ 143.729036][ T8381] CIFS mount error: No usable UNC path provided in device string! [ 143.729036][ T8381] [ 143.737313][ T8381] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 143.865254][ T8381] overlayfs: failed to resolve './file1/file0': -2 [ 144.155846][ T8391] netlink: 36 bytes leftover after parsing attributes in process `syz.2.644'. [ 144.377330][ T8400] program syz.3.645 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.192727][ T8421] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 145.195768][ T8421] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 145.240219][ T8424] netlink: 'syz.0.651': attribute type 1 has an invalid length. [ 145.250195][ T8424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.651'. [ 145.483040][ T8422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.650'. [ 145.512606][ T5601] libceph: connect (1)[c::]:6789 error -101 [ 145.515332][ T5601] libceph: mon0 (1)[c::]:6789 connect error [ 145.620410][ T8435] ceph: No mds server is up or the cluster is laggy [ 145.625954][ T5104] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 145.758867][ T8443] netlink: 36 bytes leftover after parsing attributes in process `syz.1.655'. [ 145.896184][ T8451] comedi comedi3: 8255: I/O base address not correctly aligned [ 146.241954][ T8468] binder: BINDER_SET_CONTEXT_MGR already set [ 146.246039][ T8468] binder: 8467:8468 ioctl 4018620d 80000040 returned -16 [ 146.249386][ T8468] binder: 8467:8468 ioctl c0306201 800001c0 returned -14 [ 146.660372][ T8478] netlink: 68 bytes leftover after parsing attributes in process `syz.2.662'. [ 146.683696][ T8479] netlink: 20 bytes leftover after parsing attributes in process `syz.3.663'. [ 146.725287][ T8479] smc: removing ib device syz2 [ 146.909974][ T8479] smbdirect: ib_dev[syz2] removed [ 147.489312][ T8483] CIFS mount error: No usable UNC path provided in device string! [ 147.489312][ T8483] [ 147.493498][ T8483] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 147.606082][ T8485] overlayfs: failed to resolve './file1/file0': -2 [ 147.761071][ T8489] netlink: 36 bytes leftover after parsing attributes in process `syz.0.666'. [ 148.757847][ T8504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.670'. [ 148.796496][ T8504] bridge1: port 1(dummy0) entered blocking state [ 148.799525][ T8504] bridge1: port 1(dummy0) entered disabled state [ 148.802877][ T8504] dummy0: entered allmulticast mode [ 148.808091][ T8504] dummy0: entered promiscuous mode [ 148.815849][ T8504] netlink: 'syz.3.670': attribute type 10 has an invalid length. [ 148.819296][ T8504] netlink: 40 bytes leftover after parsing attributes in process `syz.3.670'. [ 148.828422][ T8504] bridge1: port 1(dummy0) entered blocking state [ 148.832000][ T8504] bridge1: port 1(dummy0) entered forwarding state [ 148.838841][ T8504] dummy0: left allmulticast mode [ 148.841650][ T8504] bridge1: port 1(dummy0) entered disabled state [ 149.286259][ T8507] netlink: 136 bytes leftover after parsing attributes in process `syz.2.669'. [ 149.291338][ T8507] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 149.863012][ T5601] libceph: connect (1)[c::]:6789 error -101 [ 149.865238][ T5601] libceph: mon0 (1)[c::]:6789 connect error [ 149.901955][ T8523] ceph: No mds server is up or the cluster is laggy [ 150.053060][ T8541] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 150.074202][ T8541] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 150.077281][ T8541] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 150.080325][ T8541] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 150.087561][ T8541] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 150.143438][ T8541] pci 0000:00:01.0: Adding to iommu group 1 [ 150.158151][ T8541] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 150.160314][ T8541] pci 0000:00:01.0: vgaarb: bridge control possible [ 150.162409][ T8541] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 150.180494][ T8541] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 150.183709][ T8541] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 150.190065][ T8541] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 150.216417][ T8541] [drm] Found bochs VGA, ID 0xb0c5. [ 150.218144][ T8541] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 150.248737][ T8541] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 150.364384][ T8547] netlink: 96 bytes leftover after parsing attributes in process `syz.0.681'. [ 150.633494][ T8541] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 150.914898][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.686'. [ 150.921107][ T8564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.966973][ T8340] Bluetooth: hci4: Frame reassembly failed (-84) [ 150.973000][ T8560] overlayfs: missing 'lowerdir' [ 150.974636][ T8564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.997950][ T8572] netlink: 'syz.3.688': attribute type 9 has an invalid length. [ 151.138687][ T8580] netlink: 'syz.3.691': attribute type 10 has an invalid length. [ 151.151462][ T8580] bridge0: port 3(syz_tun) entered disabled state [ 151.159321][ T8580] syz_tun: left allmulticast mode [ 151.159959][ T5831] libceph: connect (1)[c::]:6789 error -101 [ 151.162074][ T8580] bridge0: port 3(syz_tun) entered disabled state [ 151.166688][ T5831] libceph: mon0 (1)[c::]:6789 connect error [ 151.173251][ T8580] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 151.177880][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.692'. [ 151.255711][ T8581] ceph: No mds server is up or the cluster is laggy [ 151.262699][ T5751] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 151.300654][ T8591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.694'. [ 151.487250][ T8593] xt_CT: You must specify a L4 protocol and not use inversions on it [ 151.494706][ T8589] bridge0: port 3(syz_tun) entered disabled state [ 151.515516][ T8589] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.519953][ T8589] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.684777][ T8589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.803564][ T5823] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.807175][ T5823] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.830983][ T5612] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.834512][ T5612] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.908753][ T8602] syzkaller0: entered promiscuous mode [ 151.911265][ T8602] syzkaller0: entered allmulticast mode [ 152.136772][ T8610] CIFS mount error: No usable UNC path provided in device string! [ 152.136772][ T8610] [ 152.140310][ T8610] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 152.290321][ T8613] overlayfs: failed to resolve './file1/file0': -2 [ 152.990947][ T5751] Bluetooth: hci4: command 0x1003 tx timeout [ 152.996418][ T5104] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 154.419763][ T8645] netlink: 'syz.2.706': attribute type 5 has an invalid length. [ 154.575482][ T8655] bridge0: port 3(vlan2) entered blocking state [ 154.577887][ T8655] bridge0: port 3(vlan2) entered disabled state [ 154.580581][ T8655] vlan2: entered allmulticast mode [ 154.583037][ T8655] geneve0: entered allmulticast mode [ 154.586936][ T8655] vlan2: entered promiscuous mode [ 154.588711][ T8655] geneve0: entered promiscuous mode [ 155.030101][ T8658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.711'. [ 155.069462][ T8660] CIFS mount error: No usable UNC path provided in device string! [ 155.069462][ T8660] [ 155.073590][ T8660] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 155.235793][ T8660] overlayfs: failed to resolve './file1/file0': -2 [ 155.699320][ T8681] syzkaller0: entered promiscuous mode [ 155.701923][ T8681] syzkaller0: entered allmulticast mode [ 155.890691][ T8683] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 156.324943][ T8698] CIFS mount error: No usable UNC path provided in device string! [ 156.324943][ T8698] [ 156.328200][ T8698] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 156.451751][ T8703] overlayfs: failed to resolve './file1/file0': -2 [ 157.220872][ T5751] Bluetooth: hci0: command tx timeout [ 158.093785][ T8708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.728'. [ 158.905234][ T8724] veth0_to_bond: entered allmulticast mode [ 159.081830][ T8728] kernel profiling enabled (shift: 7) [ 159.877476][ T8746] netlink: 36 bytes leftover after parsing attributes in process `syz.3.739'. [ 160.275664][ T8758] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 160.278312][ T8758] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 160.288134][ T8758] vhci_hcd vhci_hcd.0: Device attached [ 160.571059][ T5601] usb 44-1: SetAddress Request (6) to port 0 [ 160.573327][ T5601] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 160.896543][ T8759] vhci_hcd: connection reset by peer [ 160.900013][ T5824] vhci_hcd vhci_hcd.3: stop threads [ 160.904115][ T5824] vhci_hcd vhci_hcd.3: release socket [ 160.906125][ T5824] vhci_hcd vhci_hcd.3: disconnect device [ 161.147062][ T8773] netlink: 36 bytes leftover after parsing attributes in process `syz.1.746'. [ 161.221909][ T8782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.747'. [ 161.339554][ T8790] CIFS mount error: No usable UNC path provided in device string! [ 161.339554][ T8790] [ 161.342798][ T8790] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 161.462562][ T8790] overlayfs: failed to resolve './file1/file0': -2 [ 161.550890][ T1494] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 161.703015][ T1494] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 161.706030][ T1494] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 161.709657][ T1494] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 161.714766][ T1494] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 161.718565][ T1494] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 161.722342][ T1494] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 161.727126][ T1494] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 161.730112][ T1494] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 161.732940][ T1494] usb 6-1: Product: syz [ 161.734268][ T1494] usb 6-1: Manufacturer: syz [ 161.738621][ T8787] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 161.742850][ T1494] cdc_wdm 6-1:1.0: skipping garbage [ 161.744742][ T1494] cdc_wdm 6-1:1.0: skipping garbage [ 161.747626][ T1494] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 161.749558][ T1494] cdc_wdm 6-1:1.0: Unknown control protocol [ 161.850971][ T34] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 161.946807][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 161.948995][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 161.951136][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 161.953217][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 161.955413][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 161.957567][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 161.959689][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 161.961781][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 161.963861][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 161.965969][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 161.968049][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 161.970170][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 161.972270][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 161.974339][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 161.976624][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 161.978888][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 161.981037][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 161.983099][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 161.985335][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 161.987440][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 161.989424][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 161.994900][ T846] usb 6-1: USB disconnect, device number 8 [ 162.021032][ T34] usb 8-1: Using ep0 maxpacket: 16 [ 162.025049][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.028694][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.031965][ T34] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 162.036268][ T34] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 162.039149][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.043813][ T34] usb 8-1: config 0 descriptor?? [ 162.367981][ T8805] FAULT_INJECTION: forcing a failure. [ 162.367981][ T8805] name failslab, interval 1, probability 0, space 0, times 0 [ 162.373334][ T8805] CPU: 2 UID: 0 PID: 8805 Comm: syz.1.753 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.373365][ T8805] Tainted: [L]=SOFTLOCKUP [ 162.373372][ T8805] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 162.373403][ T8805] Call Trace: [ 162.373421][ T8805] [ 162.373429][ T8805] dump_stack_lvl+0x100/0x190 [ 162.373525][ T8805] should_fail_ex.cold+0x5/0xa [ 162.373554][ T8805] should_failslab+0xc2/0x120 [ 162.373589][ T8805] __kmalloc_node_noprof+0x101/0x830 [ 162.373618][ T8805] ? __get_vm_area_node+0x1dc/0x330 [ 162.373643][ T8805] ? __get_vm_area_node+0x208/0x330 [ 162.373665][ T8805] ? __vmalloc_node_range_noprof+0x409/0x1630 [ 162.373696][ T8805] __vmalloc_node_range_noprof+0x409/0x1630 [ 162.373730][ T8805] ? bpf_prog_calc_tag+0x67/0x350 [ 162.373770][ T8805] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 162.373804][ T8805] ? __pfx_bpf_check_btf_info+0x10/0x10 [ 162.373842][ T8805] ? bpf_prog_calc_tag+0x67/0x350 [ 162.373866][ T8805] __vmalloc_node_noprof+0xad/0xf0 [ 162.373891][ T8805] ? bpf_prog_calc_tag+0x67/0x350 [ 162.373916][ T8805] bpf_prog_calc_tag+0x67/0x350 [ 162.373939][ T8805] bpf_check+0x536e/0xb7d0 [ 162.373967][ T8805] ? trace_contention_end+0x126/0x160 [ 162.374001][ T8805] ? __pfx___css_rstat_updated+0x10/0x10 [ 162.374049][ T8805] ? __pfx_bpf_check+0x10/0x10 [ 162.374080][ T8805] ? find_held_lock+0x2b/0x80 [ 162.374101][ T8805] ? bpf_prog_load+0x1933/0x2fa0 [ 162.374124][ T8805] ? __asan_memset+0x23/0x50 [ 162.374143][ T8805] ? lsm_blob_alloc+0x2b/0x90 [ 162.374203][ T8805] ? bpf_prog_load+0x244d/0x2fa0 [ 162.374221][ T8805] bpf_prog_load+0x244d/0x2fa0 [ 162.374246][ T8805] ? __pfx_bpf_prog_load+0x10/0x10 [ 162.374270][ T8805] ? __lock_acquire+0x49f/0x1a40 [ 162.374318][ T8805] __sys_bpf+0x18dc/0x4e80 [ 162.374344][ T8805] ? __pfx___sys_bpf+0x10/0x10 [ 162.374367][ T8805] ? find_held_lock+0x2b/0x80 [ 162.374390][ T8805] ? get_pid_task+0xfc/0x250 [ 162.374420][ T8805] ? get_pid_task+0xfc/0x250 [ 162.374449][ T8805] ? proc_fail_nth_write+0x9f/0x220 [ 162.374476][ T8805] ? find_held_lock+0x2b/0x80 [ 162.374504][ T8805] ? rcu_read_lock_any_held+0x6a/0xa0 [ 162.374527][ T8805] ? find_held_lock+0x2b/0x80 [ 162.374548][ T8805] ? ksys_write+0x190/0x250 [ 162.374574][ T8805] ? ksys_write+0x190/0x250 [ 162.374607][ T8805] ? fput+0x79/0x100 [ 162.374630][ T8805] ? __ia32_sys_bpf+0xcc/0x170 [ 162.374645][ T8805] __ia32_sys_bpf+0xcc/0x170 [ 162.374665][ T8805] ? __do_fast_syscall_32+0x98/0x970 [ 162.374717][ T8805] __do_fast_syscall_32+0xe7/0x970 [ 162.374739][ T8805] ? lockdep_hardirqs_on+0x78/0x100 [ 162.374761][ T8805] do_fast_syscall_32+0x32/0x70 [ 162.374785][ T8805] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 162.374808][ T8805] RIP: 0023:0xf70cefec [ 162.374831][ T8805] Code: Unable to access opcode bytes at 0xf70cefc2. [ 162.374858][ T8805] RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 162.374877][ T8805] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 162.374888][ T8805] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 162.374898][ T8805] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 162.374907][ T8805] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 162.374918][ T8805] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 162.374941][ T8805] [ 162.375178][ T8805] syz.1.753: vmalloc error: size 4096, failed to allocated page array size 8, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 162.516319][ T8805] CPU: 2 UID: 0 PID: 8805 Comm: syz.1.753 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.516338][ T8805] Tainted: [L]=SOFTLOCKUP [ 162.516342][ T8805] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 162.516349][ T8805] Call Trace: [ 162.516354][ T8805] [ 162.516358][ T8805] dump_stack_lvl+0x100/0x190 [ 162.516375][ T8805] warn_alloc.cold+0x94/0xa8 [ 162.516387][ T8805] ? __pfx_warn_alloc+0x10/0x10 [ 162.516400][ T8805] ? dump_stack_lvl+0x17c/0x190 [ 162.516411][ T8805] ? rcu_is_watching+0x12/0xc0 [ 162.516437][ T8805] ? __kasan_kmalloc+0x8a/0xb0 [ 162.516452][ T8805] ? __kmalloc_node_noprof+0x357/0x830 [ 162.516485][ T8805] ? __get_vm_area_node+0x1dc/0x330 [ 162.516502][ T8805] ? __get_vm_area_node+0x208/0x330 [ 162.516517][ T8805] ? __vmalloc_node_range_noprof+0x409/0x1630 [ 162.516537][ T8805] __vmalloc_node_range_noprof+0x1394/0x1630 [ 162.516559][ T8805] ? bpf_prog_calc_tag+0x67/0x350 [ 162.516578][ T8805] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 162.516600][ T8805] ? __pfx_bpf_check_btf_info+0x10/0x10 [ 162.516618][ T8805] ? bpf_prog_calc_tag+0x67/0x350 [ 162.516632][ T8805] __vmalloc_node_noprof+0xad/0xf0 [ 162.516649][ T8805] ? bpf_prog_calc_tag+0x67/0x350 [ 162.516665][ T8805] bpf_prog_calc_tag+0x67/0x350 [ 162.516683][ T8805] bpf_check+0x536e/0xb7d0 [ 162.516698][ T8805] ? trace_contention_end+0x126/0x160 [ 162.516714][ T8805] ? __pfx___css_rstat_updated+0x10/0x10 [ 162.516739][ T8805] ? __pfx_bpf_check+0x10/0x10 [ 162.516758][ T8805] ? find_held_lock+0x2b/0x80 [ 162.516771][ T8805] ? bpf_prog_load+0x1933/0x2fa0 [ 162.516785][ T8805] ? __asan_memset+0x23/0x50 [ 162.516796][ T8805] ? lsm_blob_alloc+0x2b/0x90 [ 162.516816][ T8805] ? bpf_prog_load+0x244d/0x2fa0 [ 162.516826][ T8805] bpf_prog_load+0x244d/0x2fa0 [ 162.516840][ T8805] ? __pfx_bpf_prog_load+0x10/0x10 [ 162.516852][ T8805] ? __lock_acquire+0x49f/0x1a40 [ 162.516882][ T8805] __sys_bpf+0x18dc/0x4e80 [ 162.516897][ T8805] ? __pfx___sys_bpf+0x10/0x10 [ 162.516909][ T8805] ? find_held_lock+0x2b/0x80 [ 162.516923][ T8805] ? get_pid_task+0xfc/0x250 [ 162.516936][ T8805] ? get_pid_task+0xfc/0x250 [ 162.516953][ T8805] ? proc_fail_nth_write+0x9f/0x220 [ 162.516969][ T8805] ? find_held_lock+0x2b/0x80 [ 162.516985][ T8805] ? rcu_read_lock_any_held+0x6a/0xa0 [ 162.517000][ T8805] ? find_held_lock+0x2b/0x80 [ 162.517012][ T8805] ? ksys_write+0x190/0x250 [ 162.517023][ T8805] ? ksys_write+0x190/0x250 [ 162.517042][ T8805] ? fput+0x79/0x100 [ 162.517056][ T8805] ? __ia32_sys_bpf+0xcc/0x170 [ 162.517068][ T8805] __ia32_sys_bpf+0xcc/0x170 [ 162.517080][ T8805] ? __do_fast_syscall_32+0x98/0x970 [ 162.517096][ T8805] __do_fast_syscall_32+0xe7/0x970 [ 162.517114][ T8805] ? lockdep_hardirqs_on+0x78/0x100 [ 162.517135][ T8805] do_fast_syscall_32+0x32/0x70 [ 162.517159][ T8805] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 162.517181][ T8805] RIP: 0023:0xf70cefec [ 162.517197][ T8805] Code: Unable to access opcode bytes at 0xf70cefc2. [ 162.517203][ T8805] RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 162.517213][ T8805] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 162.517220][ T8805] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 162.517227][ T8805] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 162.517233][ T8805] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 162.517239][ T8805] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 162.517259][ T8805] [ 162.517272][ T8805] Mem-Info: [ 162.631265][ T8808] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 162.633995][ T8805] active_anon:5274 inactive_anon:10167 isolated_anon:0 [ 162.633995][ T8805] active_file:10090 inactive_file:27433 isolated_file:0 [ 162.633995][ T8805] unevictable:1768 dirty:649 writeback:0 [ 162.633995][ T8805] slab_reclaimable:7540 slab_unreclaimable:56553 [ 162.633995][ T8805] mapped:27381 shmem:8807 pagetables:1453 [ 162.633995][ T8805] sec_pagetables:295 bounce:0 [ 162.633995][ T8805] kernel_misc_reclaimable:0 [ 162.633995][ T8805] free:28339 free_pcp:15272 free_cma:0 [ 162.640830][ T8809] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 162.641103][ T8805] Node 0 active_anon:24kB inactive_anon:2288kB active_file:40kB inactive_file:172kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:2156kB dirty:4kB writeback:0kB shmem:3664kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9184kB pagetables:1808kB sec_pagetables:1112kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 162.676211][ T8805] Node 1 active_anon:21072kB inactive_anon:38380kB active_file:40320kB inactive_file:109560kB unevictable:5536kB isolated(anon):0kB isolated(file):0kB mapped:107368kB dirty:2592kB writeback:0kB shmem:31564kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:8192kB kernel_stack:5112kB pagetables:4004kB sec_pagetables:68kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 162.690443][ T8805] Node 0 DMA free:2064kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:828kB local_pcp:216kB free_cma:0kB [ 162.700541][ T8805] lowmem_reserve[]: 0 280 280 280 280 [ 162.702432][ T8805] Node 0 DMA32 free:15580kB boost:0kB min:12772kB low:15964kB high:19156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24kB inactive_anon:2288kB active_file:40kB inactive_file:172kB unevictable:1536kB writepending:4kB zspages:84kB present:1032196kB managed:286900kB mlocked:0kB bounce:0kB free_pcp:9344kB local_pcp:2200kB free_cma:0kB [ 162.714306][ T8805] lowmem_reserve[]: 0 0 0 0 0 [ 162.716104][ T8805] Node 1 DMA32 free:95712kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21072kB inactive_anon:38380kB active_file:40320kB inactive_file:109560kB unevictable:5536kB writepending:2592kB zspages:2072kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:50508kB local_pcp:16112kB free_cma:0kB [ 162.727302][ T8805] lowmem_reserve[]: 0 0 0 0 0 [ 162.728830][ T8805] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 12*32kB (UM) 10*64kB (UM) 4*128kB (M) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2064kB [ 162.733772][ T8805] Node 0 DMA32: 1*4kB (E) 11*8kB (UME) 19*16kB (UME) 64*32kB (UME) 21*64kB (UME) 24*128kB (UME) 10*256kB (UME) 6*512kB (UM) 3*1024kB (UM) 0*2048kB 0*4096kB = 15564kB [ 162.740030][ T8805] Node 1 DMA32: 625*4kB (UME) 235*8kB (UME) 231*16kB (UME) 191*32kB (UME) 127*64kB (UME) 68*128kB (UME) 39*256kB (UME) 19*512kB (UME) 10*1024kB (UM) 7*2048kB (UM) 5*4096kB (UM) = 95788kB [ 162.747502][ T8805] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 162.751648][ T8805] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 162.755479][ T8805] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 162.771185][ T8805] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 162.775064][ T8805] 46808 total pagecache pages [ 162.777009][ T8805] 481 pages in swap cache [ 162.778852][ T8805] Free swap = 119300kB [ 162.780599][ T8805] Total swap = 124996kB [ 162.785477][ T8805] 524155 pages RAM [ 162.785532][ T34] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:045E:07DA.0003/input/input10 [ 162.787051][ T8805] 0 pages HighMem/MovableOnly [ 162.787062][ T8805] 211537 pages reserved [ 162.787069][ T8805] 0 pages cma reserved [ 162.946273][ T34] microsoft 0003:045E:07DA.0003: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 162.977616][ T8816] netlink: 'syz.1.756': attribute type 1 has an invalid length. [ 162.981454][ T8816] netlink: 224 bytes leftover after parsing attributes in process `syz.1.756'. [ 162.986888][ T8816] netlink: 'syz.1.756': attribute type 14 has an invalid length. [ 162.990589][ T8816] netlink: 16 bytes leftover after parsing attributes in process `syz.1.756'. [ 163.135353][ T8826] syzkaller0: entered promiscuous mode [ 163.137602][ T8826] syzkaller0: entered allmulticast mode [ 163.580528][ T5831] libceph: connect (1)[c::]:6789 error -101 [ 163.583766][ T5831] libceph: mon0 (1)[c::]:6789 connect error [ 163.631361][ T8835] ceph: No mds server is up or the cluster is laggy [ 163.635137][ T5751] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 164.027131][ T8844] tipc: Started in network mode [ 164.033325][ T8844] tipc: Node identity 76657468115f, cluster identity 4711 [ 164.035917][ T8844] tipc: Enabled bearer , priority 0 [ 164.039761][ T8844] netlink: 'syz.0.762': attribute type 9 has an invalid length. [ 164.064802][ T8844] tipc: Resetting bearer [ 164.071396][ T5853] usb 8-1: reset high-speed USB device number 10 using dummy_hcd [ 164.288951][ T8852] netlink: 36 bytes leftover after parsing attributes in process `syz.1.765'. [ 164.312858][ T8849] loop9: detected capacity change from 0 to 7 [ 164.790929][ T5831] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 164.943175][ T5831] usb 7-1: Using ep0 maxpacket: 16 [ 164.959783][ T5831] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.974165][ T5831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 164.979826][ T5831] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 165.008038][ T5831] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 165.014688][ T5831] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 165.018235][ T5831] usb 7-1: Manufacturer: syz [ 165.031408][ T8892] overlayfs: upper fs does not support file handles, falling back to index=off. [ 165.037788][ T8892] overlayfs: failed to set uuid (186/file2, err=-1); falling back to uuid=null. [ 165.059908][ T5832] tipc: Node number set to 1731884136 [ 165.093074][ T5831] usb 7-1: config 0 descriptor?? [ 165.443337][ T34] usb 8-1: USB disconnect, device number 10 [ 165.457673][ T8897] netlink: 20 bytes leftover after parsing attributes in process `syz.3.770'. [ 165.539634][ T8899] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.771'. [ 165.555667][ T8899] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.771'. [ 165.634090][ T5601] usb 44-1: device descriptor read/8, error -110 [ 165.655263][ T8900] netlink: 16 bytes leftover after parsing attributes in process `syz.2.766'. [ 165.667973][ T8900] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 165.688548][ T8900] bond3 (unregistering): Released all slaves [ 165.796906][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.772'. [ 165.883295][ T8910] openvswitch: netlink: Flow actions attr not present in new flow. [ 166.032053][ T5601] usb usb44-port1: attempt power cycle [ 166.606222][ T5601] usb usb44-port1: unable to enumerate USB device [ 167.205226][ T8937] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 167.242096][ T42] audit: type=1326 audit(1785578693.282:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.0.781" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68fec code=0x7ffc0000 [ 167.256584][ T42] audit: type=1326 audit(1785578693.282:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.0.781" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68fec code=0x7ffc0000 [ 167.268481][ T42] audit: type=1326 audit(1785578693.282:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.0.781" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f68fec code=0x7ffc0000 [ 167.280009][ T42] audit: type=1326 audit(1785578693.282:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.0.781" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68fec code=0x7ffc0000 [ 167.289305][ T42] audit: type=1326 audit(1785578693.282:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.0.781" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f68fec code=0x7ffc0000 [ 167.298019][ T42] audit: type=1326 audit(1785578693.282:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.0.781" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68fec code=0x7ffc0000 [ 167.309737][ T42] audit: type=1326 audit(1785578693.292:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.0.781" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f68fec code=0x7ffc0000 [ 167.318252][ T42] audit: type=1326 audit(1785578693.292:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.0.781" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68fec code=0x7ffc0000 [ 167.325622][ T42] audit: type=1326 audit(1785578693.292:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.0.781" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68fec code=0x7ffc0000 [ 167.347340][ T8942] gfs2: error -5 reading superblock [ 167.390521][ T8946] IPVS: set_ctl: invalid protocol: 191 224.0.0.2:20000 [ 167.539087][ T5831] usb 7-1: USB disconnect, device number 5 [ 167.693747][ T8948] syzkaller0: entered promiscuous mode [ 167.696204][ T8948] syzkaller0: entered allmulticast mode [ 167.775154][ T5601] libceph: connect (1)[c::]:6789 error -101 [ 167.777232][ T5601] libceph: mon0 (1)[c::]:6789 connect error [ 167.802225][ T8959] ceph: No mds server is up or the cluster is laggy [ 168.074562][ T5751] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 168.087801][ T5831] libceph: connect (1)[c::]:6789 error -101 [ 168.093007][ T5831] libceph: mon0 (1)[c::]:6789 connect error [ 168.095166][ T8964] ceph: No mds server is up or the cluster is laggy [ 168.101240][ T5831] libceph: connect (1)[c::]:6789 error -101 [ 168.103815][ T5831] libceph: mon0 (1)[c::]:6789 connect error [ 168.527071][ T8971] __nla_validate_parse: 1 callbacks suppressed [ 168.527084][ T8971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.788'. [ 169.086694][ T5601] libceph: connect (1)[c::]:6789 error -101 [ 169.091732][ T5601] libceph: mon0 (1)[c::]:6789 connect error [ 169.130628][ T8978] ceph: No mds server is up or the cluster is laggy [ 169.881318][ T8986] binfmt_misc: register: failed to install interpreter file ./bus [ 169.922636][ T8986] netlink: 'syz.3.792': attribute type 5 has an invalid length. [ 170.122085][ T8997] netlink: 36 bytes leftover after parsing attributes in process `syz.3.796'. [ 170.181386][ T5601] libceph: connect (1)[c::]:6789 error -101 [ 170.182896][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.795'. [ 170.188687][ T5601] libceph: mon0 (1)[c::]:6789 connect error [ 170.191196][ T5601] libceph: connect (1)[c::]:6789 error -101 [ 170.193675][ T5601] libceph: mon0 (1)[c::]:6789 connect error [ 170.224547][ T5751] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 170.309766][ T9012] bond0: (slave syz_tun): Releasing backup interface [ 170.318216][ T9012] bridge0: port 4(syz_tun) entered blocking state [ 170.322449][ T9012] bridge0: port 4(syz_tun) entered disabled state [ 170.325236][ T9012] syz_tun: entered allmulticast mode [ 170.341882][ T9012] CIFS mount error: No usable UNC path provided in device string! [ 170.341882][ T9012] [ 170.345845][ T9012] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 170.455114][ T9012] overlayfs: failed to resolve './file1/file0': -2 [ 170.461086][ T5831] libceph: connect (1)[c::]:6789 error -101 [ 170.463655][ T5831] libceph: mon0 (1)[c::]:6789 connect error [ 170.660578][ T5831] libceph: connect (1)[c::]:6789 error -101 [ 170.666317][ T5751] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 170.666441][ T5831] libceph: mon0 (1)[c::]:6789 connect error [ 170.672003][ T9024] ceph: No mds server is up or the cluster is laggy [ 170.674454][ T5831] libceph: connect (1)[c::]:6789 error -101 [ 170.676623][ T5831] libceph: mon0 (1)[c::]:6789 connect error [ 170.774918][ T9001] ceph: No mds server is up or the cluster is laggy [ 171.123614][ T9034] program syz.2.800 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.220939][ T5601] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 171.385837][ T5601] usb 6-1: Using ep0 maxpacket: 32 [ 171.389003][ T5601] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 171.392014][ T5601] usb 6-1: config 0 has no interface number 0 [ 171.396765][ T5601] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 171.401966][ T5601] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.404523][ T5601] usb 6-1: Product: syz [ 171.405848][ T5601] usb 6-1: Manufacturer: syz [ 171.407419][ T5601] usb 6-1: SerialNumber: syz [ 171.411537][ T5601] usb 6-1: config 0 descriptor?? [ 171.422927][ T5601] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 171.432506][ T5601] usb 6-1: selecting invalid altsetting 1 [ 171.434364][ T5601] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 171.442759][ T5601] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 171.446138][ T5601] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 171.448890][ T5601] usb 6-1: media controller created [ 171.456616][ T5601] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 171.575414][ T9036] pim6reg: entered allmulticast mode [ 171.585841][ T9036] pim6reg: left allmulticast mode [ 171.624519][ T9033] netlink: 19 bytes leftover after parsing attributes in process `syz.1.801'. [ 171.628034][ T9033] netlink: 19 bytes leftover after parsing attributes in process `syz.1.801'. [ 171.710550][ T9038] binder: 9031:9038 ioctl c0306201 80000080 returned -22 [ 171.722351][ T9038] binder: 9031:9038 ioctl c0a45320 80000900 returned -22 [ 171.735518][ T9040] netlink: 24 bytes leftover after parsing attributes in process `syz.2.804'. [ 171.738858][ T9040] netlink: 24 bytes leftover after parsing attributes in process `syz.2.804'. [ 171.745360][ T9040] overlayfs: workdir and upperdir must reside under the same mount [ 171.832583][ T9048] bridge0: port 3(syz_tun) entered blocking state [ 171.834888][ T9048] bridge0: port 3(syz_tun) entered disabled state [ 171.837114][ T9048] syz_tun: entered allmulticast mode [ 171.839940][ T9048] syz_tun: entered promiscuous mode [ 171.846627][ T9048] CIFS mount error: No usable UNC path provided in device string! [ 171.846627][ T9048] [ 171.850137][ T9048] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 171.960354][ T9048] overlayfs: failed to resolve './file1/file0': -2 [ 172.018921][ T9051] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 172.056629][ T9053] netlink: 36 bytes leftover after parsing attributes in process `syz.2.807'. [ 172.271075][ T5832] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 172.449748][ T5832] usb 8-1: config index 0 descriptor too short (expected 28277, got 36) [ 172.455836][ T5832] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.459719][ T5832] usb 8-1: config 0 has no interfaces? [ 172.462438][ T5832] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 172.465667][ T5832] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.478097][ T5832] usb 8-1: config 0 descriptor?? [ 172.509549][ T5601] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 172.518171][ T5601] zl10353_read_register: readreg error (reg=127, ret==-110) [ 172.669972][ T5601] usb 6-1: USB disconnect, device number 9 [ 172.703698][ T5832] usb 8-1: USB disconnect, device number 11 [ 172.754189][ T9070] program syz.2.811 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.380557][ T9088] overlayfs: failed lookup in lower (newroot/225, name='file1', err=-40): overlapping layers [ 173.440928][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 173.590864][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 173.596442][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 173.601263][ T10] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 173.607872][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 173.612189][ T10] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 173.618615][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.623946][ T10] usb 6-1: Product: syz [ 173.627632][ T10] usb 6-1: Manufacturer: syz [ 173.629160][ T10] usb 6-1: SerialNumber: syz [ 173.634767][ T10] usb 6-1: config 0 descriptor?? [ 173.692477][ T9092] Invalid ELF header magic: != ELF [ 173.718829][ T9092] overlayfs: overlapping lowerdir path [ 174.177886][ T9080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.189339][ T9080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.217617][ T10] gs_usb 6-1:0.0: Couldn't get device config: (err=-121) [ 174.220883][ T10] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -121 [ 174.317582][ T9098] program syz.3.819 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.469149][ T9100] syzkaller0: entered promiscuous mode [ 174.471379][ T9100] syzkaller0: entered allmulticast mode [ 174.500710][ T9100] netlink: 'syz.2.820': attribute type 12 has an invalid length. [ 174.507552][ T9100] netlink: 32 bytes leftover after parsing attributes in process `syz.2.820'. [ 175.386668][ T5751] Bluetooth: hci1: command 0x0406 tx timeout [ 175.388440][ T5759] Bluetooth: hci0: command 0x0406 tx timeout [ 175.388486][ T5762] Bluetooth: hci2: command 0x0406 tx timeout [ 176.202840][ T9117] netlink: 'syz.1.824': attribute type 1 has an invalid length. [ 176.206134][ T9117] netlink: 756 bytes leftover after parsing attributes in process `syz.1.824'. [ 176.298326][ T9118] syzkaller0: entered promiscuous mode [ 176.300687][ T9118] syzkaller0: entered allmulticast mode [ 176.331239][ T9118] Invalid logical block size (73728) [ 176.713260][ T9136] BIDI support in bsg has been removed. [ 176.778995][ T1042] hid_parser_main: 4 callbacks suppressed [ 176.779016][ T1042] hid-generic 0000:0000:0000.0004: unknown main item tag 0x3 [ 176.789884][ T1042] hid-generic 0000:0000:0000.0004: unknown main item tag 0x3 [ 176.793067][ T1042] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.796386][ T1042] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.798957][ T1042] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.801403][ T1042] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.803830][ T1042] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.806468][ T1042] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.809078][ T1042] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.811887][ T1042] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.820474][ T1042] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.03 Device [syz1] on syz1 [ 176.879155][ T9139] fido_id[9139]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 177.091000][ T9143] netlink: 40 bytes leftover after parsing attributes in process `syz.2.831'. [ 177.175587][ T9146] 9p: Bad value for 'rfdno' [ 177.211560][ T9148] netlink: 36 bytes leftover after parsing attributes in process `syz.2.833'. [ 177.574752][ T5601] libceph: connect (1)[c::]:6789 error -101 [ 177.577873][ T5601] libceph: mon0 (1)[c::]:6789 connect error [ 177.624875][ T5758] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 177.626152][ T9170] ceph: No mds server is up or the cluster is laggy [ 177.632323][ T5758] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 177.699904][ T9177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.836'. [ 177.780109][ T5601] libceph: connect (1)[c::]:6789 error -101 [ 177.790684][ T5601] libceph: mon0 (1)[c::]:6789 connect error [ 177.837324][ T5758] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 177.839580][ T5758] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 178.053892][ T5601] libceph: connect (1)[c::]:6789 error -101 [ 178.061586][ T5601] libceph: mon0 (1)[c::]:6789 connect error [ 178.332841][ T9185] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 178.334498][ T9178] ceph: No mds server is up or the cluster is laggy [ 178.334934][ T9185] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 178.336852][ T9185] vhci_hcd vhci_hcd.0: Device attached [ 178.601006][ T34] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 178.640888][ T5853] usb 44-1: SetAddress Request (10) to port 0 [ 178.643244][ T5853] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 178.753519][ T34] usb 8-1: device descriptor read/64, error -71 [ 178.990912][ T34] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 179.120991][ T34] usb 8-1: device descriptor read/64, error -71 [ 179.231283][ T34] usb usb8-port1: attempt power cycle [ 179.237992][ T9206] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 179.242619][ T9206] nfs: Unknown parameter '+' [ 179.284448][ T9208] CIFS mount error: No usable UNC path provided in device string! [ 179.284448][ T9208] [ 179.288232][ T9208] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 179.395939][ T9210] overlayfs: failed to resolve './file1/file0': -2 [ 179.536921][ T9212] netlink: 36 bytes leftover after parsing attributes in process `syz.1.843'. [ 179.580889][ T34] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 179.602857][ T34] usb 8-1: device descriptor read/8, error -71 [ 179.851009][ T34] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 179.881567][ T34] usb 8-1: device descriptor read/8, error -71 [ 179.993673][ T34] usb usb8-port1: unable to enumerate USB device [ 180.616730][ T34] libceph: connect (1)[c::]:6789 error -101 [ 180.618826][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 180.813186][ T5758] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 180.813456][ T9240] ceph: No mds server is up or the cluster is laggy [ 180.818953][ T5758] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 180.883592][ T5601] libceph: connect (1)[c::]:6789 error -101 [ 180.888655][ T5601] libceph: mon0 (1)[c::]:6789 connect error [ 180.936403][ T5758] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 180.937691][ T9250] ceph: No mds server is up or the cluster is laggy [ 180.952142][ T5758] Bluetooth: hci2: unexpected event for opcode 0x2011 [ 181.120671][ T9188] vhci_hcd: connection reset by peer [ 181.125804][ T5612] vhci_hcd vhci_hcd.3: stop threads [ 181.127737][ T5612] vhci_hcd vhci_hcd.3: release socket [ 181.130402][ T5612] vhci_hcd vhci_hcd.3: disconnect device [ 181.135736][ T9248] program syz.0.847 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.737159][ T9267] netlink: 36 bytes leftover after parsing attributes in process `syz.3.853'. [ 182.132117][ T9300] netlink: 60 bytes leftover after parsing attributes in process `syz.3.857'. [ 182.135543][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.857'. [ 182.279934][ T9303] netlink: 'syz.3.860': attribute type 1 has an invalid length. [ 182.280453][ T5601] libceph: connect (1)[c::]:6789 error -101 [ 182.285665][ T5601] libceph: mon0 (1)[c::]:6789 connect error [ 182.289056][ T5601] libceph: connect (1)[c::]:6789 error -101 [ 182.291529][ T5601] libceph: mon0 (1)[c::]:6789 connect error [ 182.295583][ T9303] bond1: entered promiscuous mode [ 182.299865][ T9303] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.325810][ T9303] bond1: (slave bridge2): making interface the new active one [ 182.329072][ T9303] bridge2: entered promiscuous mode [ 182.332862][ T9303] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 182.340036][ T9304] ceph: No mds server is up or the cluster is laggy [ 182.343101][ T5758] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 182.400157][ T9310] netlink: 256 bytes leftover after parsing attributes in process `syz.3.861'. [ 182.595768][ T9313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.757222][ T9314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.764783][ T9314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.766999][ T9316] netlink: 68 bytes leftover after parsing attributes in process `syz.2.863'. [ 182.812046][ T9318] kAFS: Can only specify source 'none' with -o dyn [ 183.002423][ T9323] syzkaller0: entered promiscuous mode [ 183.004431][ T9323] syzkaller0: entered allmulticast mode [ 183.059790][ T9327] netlink: 36 bytes leftover after parsing attributes in process `syz.0.867'. [ 183.369178][ T9352] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 183.371736][ T9352] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 183.382016][ T9352] vhci_hcd vhci_hcd.0: Device attached [ 183.389389][ T9353] vhci_hcd: connection closed [ 183.389600][ T5612] vhci_hcd vhci_hcd.3: stop threads [ 183.402062][ T5612] vhci_hcd vhci_hcd.3: release socket [ 183.403966][ T5612] vhci_hcd vhci_hcd.3: disconnect device [ 183.448059][ T9345] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.452940][ T9345] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.615500][ T9350] program syz.0.869 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.720968][ T5853] usb 44-1: device descriptor read/8, error -110 [ 183.799990][ T9357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.872'. [ 183.802919][ T9357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.872'. [ 183.831861][ T5612] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.834919][ T5612] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.837710][ T5612] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.840982][ T5612] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.209911][ T9361] program syz.1.873 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.489506][ T9366] fuse: Unknown parameter 'fd0x0000000000000007' [ 184.584706][ T5853] usb usb44-port1: attempt power cycle [ 184.664526][ T5831] libceph: connect (1)[c::]:6789 error -101 [ 184.666895][ T5831] libceph: mon0 (1)[c::]:6789 connect error [ 184.678921][ T9374] netlink: 36 bytes leftover after parsing attributes in process `syz.2.877'. [ 184.687660][ T9370] ceph: No mds server is up or the cluster is laggy [ 184.697531][ T5758] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 184.902229][ T9391] netlink: 'syz.1.879': attribute type 1 has an invalid length. [ 184.907510][ T9391] netlink: 224 bytes leftover after parsing attributes in process `syz.1.879'. [ 184.916163][ T9391] netlink: 'syz.1.879': attribute type 2 has an invalid length. [ 185.161408][ T5853] usb usb44-port1: unable to enumerate USB device [ 185.302113][ T9399] netlink: 20 bytes leftover after parsing attributes in process `syz.0.881'. [ 185.305163][ T9399] netlink: 20 bytes leftover after parsing attributes in process `syz.0.881'. [ 185.411623][ T42] audit: type=1326 audit(1785578711.442:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9401 comm="syz.3.882" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7fec code=0x7ffc0000 [ 185.424679][ T42] audit: type=1326 audit(1785578711.452:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9401 comm="syz.3.882" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7fec code=0x7ffc0000 [ 185.435713][ T42] audit: type=1326 audit(1785578711.452:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9401 comm="syz.3.882" exe="/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf7fb7fec code=0x7ffc0000 [ 185.665773][ T42] audit: type=1326 audit(1785578711.702:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9401 comm="syz.3.882" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb8008 code=0x7ffc0000 [ 185.673158][ T42] audit: type=1326 audit(1785578711.712:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9401 comm="syz.3.882" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7fec code=0x7ffc0000 [ 185.679859][ T42] audit: type=1326 audit(1785578711.712:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9401 comm="syz.3.882" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7fec code=0x7ffc0000 [ 185.722584][ T5853] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 185.893925][ T5853] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 185.897447][ T5853] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.900596][ T5853] usb 8-1: Product: syz [ 185.902522][ T5853] usb 8-1: Manufacturer: syz [ 185.904457][ T5853] usb 8-1: SerialNumber: syz [ 185.944408][ T5853] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 186.150074][ T42] audit: type=1326 audit(1785578712.182:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9401 comm="syz.3.882" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb7fec code=0x7ffc0000 [ 186.157753][ T42] audit: type=1326 audit(1785578712.192:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9401 comm="syz.3.882" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71b73eb code=0x7ffc0000 [ 186.358059][ T42] audit: type=1326 audit(1785578712.392:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9401 comm="syz.3.882" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7fec code=0x7ffc0000 [ 186.365243][ T42] audit: type=1326 audit(1785578712.392:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9401 comm="syz.3.882" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7fec code=0x7ffc0000 [ 186.530719][ T9402] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 186.540481][ T9402] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 186.546133][ T9423] program syz.1.884 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.562324][ T9402] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 186.609284][ T9402] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 186.612710][ T9402] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 186.808105][ T9402] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 186.811334][ T9402] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 186.876331][ T9402] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 186.894115][ T9402] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 186.968307][ T5831] libceph: connect (1)[c::]:6789 error -101 [ 186.972044][ T5831] libceph: mon0 (1)[c::]:6789 connect error [ 186.999612][ T5853] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 187.003833][ T5853] ath9k_htc: Failed to initialize the device [ 187.005607][ T9402] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 187.006792][ T9438] ceph: No mds server is up or the cluster is laggy [ 187.010537][ T5750] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 187.038419][ T5853] usb 8-1: ath9k_htc: USB layer deinitialized [ 187.262922][ T8845] lo speed is unknown, defaulting to 1000 [ 187.267169][ T8845] sz1: Port: 1 Link DOWN [ 187.269061][ T8845] lo speed is unknown, defaulting to 1000 [ 187.269187][ T9455] loop9: detected capacity change from 0 to 255852544 [ 187.282518][ T846] usb 8-1: USB disconnect, device number 16 [ 187.346158][ T9456] loop9: detected capacity change from 255852544 to 524287871 [ 187.617800][ T9464] binder: 9463:9464 unknown command 2 [ 187.619663][ T9464] binder: 9463:9464 ioctl c0306201 80000080 returned -22 [ 187.697941][ T9467] KVM: debugfs: duplicate directory 9467-5 [ 187.971470][ T9473] netlink: 24 bytes leftover after parsing attributes in process `syz.1.902'. [ 188.120531][ T9484] bridge3: entered allmulticast mode [ 188.216754][ T9488] FAULT_INJECTION: forcing a failure. [ 188.216754][ T9488] name failslab, interval 1, probability 0, space 0, times 0 [ 188.217065][ T9482] program syz.2.901 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.221330][ T9488] CPU: 3 UID: 0 PID: 9488 Comm: syz.3.905 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.221348][ T9488] Tainted: [L]=SOFTLOCKUP [ 188.221352][ T9488] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.221372][ T9488] Call Trace: [ 188.221377][ T9488] [ 188.221381][ T9488] dump_stack_lvl+0x100/0x190 [ 188.221400][ T9488] should_fail_ex.cold+0x5/0xa [ 188.221413][ T9488] should_failslab+0xc2/0x120 [ 188.221430][ T9488] __kmalloc_cache_noprof+0x91/0x6c0 [ 188.221444][ T9488] ? binder_alloc_mmap_handler+0x26e/0x6b0 [ 188.221466][ T9488] binder_alloc_mmap_handler+0x26e/0x6b0 [ 188.221486][ T9488] binder_mmap+0x353/0x4d0 [ 188.221502][ T9488] ? lockdep_init_map_type+0x5c/0x250 [ 188.221515][ T9488] __mmap_region+0x13c7/0x2db0 [ 188.221530][ T9488] ? __pfx___mmap_region+0x10/0x10 [ 188.221540][ T9488] ? find_held_lock+0x2b/0x80 [ 188.221565][ T9488] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 188.221596][ T9488] ? find_held_lock+0x2b/0x80 [ 188.221609][ T9488] ? is_bpf_text_address+0x8a/0x1a0 [ 188.221625][ T9488] ? is_bpf_text_address+0x8a/0x1a0 [ 188.221666][ T9488] mmap_region+0x35d/0x620 [ 188.221681][ T9488] ? __pfx_mmap_region+0x10/0x10 [ 188.221693][ T9488] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 188.221720][ T9488] ? cap_mmap_addr+0x4b/0x120 [ 188.221731][ T9488] ? bpf_lsm_mmap_addr+0x9/0x30 [ 188.221749][ T9488] ? security_mmap_addr+0x71/0x1e0 [ 188.221770][ T9488] ? __get_unmapped_area+0x255/0x3e0 [ 188.221797][ T9488] do_mmap+0xc63/0x12f0 [ 188.221827][ T9488] ? __pfx_do_mmap+0x10/0x10 [ 188.221849][ T9488] ? __pfx_down_write_killable+0x10/0x10 [ 188.221871][ T9488] vm_mmap_pgoff+0x29e/0x470 [ 188.221890][ T9488] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 188.221904][ T9488] ? __fget_files+0x215/0x3d0 [ 188.221918][ T9488] ? __fget_files+0x21f/0x3d0 [ 188.221931][ T9488] ksys_mmap_pgoff+0x3cb/0x610 [ 188.221947][ T9488] ? fput+0x79/0x100 [ 188.221960][ T9488] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 188.221974][ T9488] ? ksys_write+0x1ac/0x250 [ 188.221985][ T9488] ? __pfx_ksys_write+0x10/0x10 [ 188.221998][ T9488] __do_fast_syscall_32+0xe7/0x970 [ 188.222012][ T9488] ? lockdep_hardirqs_on+0x78/0x100 [ 188.222027][ T9488] do_fast_syscall_32+0x32/0x70 [ 188.222042][ T9488] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 188.222057][ T9488] RIP: 0023:0xf7fb7fec [ 188.222072][ T9488] Code: Unable to access opcode bytes at 0xf7fb7fc2. [ 188.222077][ T9488] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 188.222088][ T9488] RAX: ffffffffffffffda RBX: 0000000080ffd000 RCX: 0000000000003000 [ 188.222095][ T9488] RDX: 0000000000000001 RSI: 0000000000000011 RDI: 0000000000000003 [ 188.222102][ T9488] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 188.222108][ T9488] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 188.222114][ T9488] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 188.222128][ T9488] [ 188.222400][ T9488] binder_alloc: binder_alloc_mmap_handler: 9487 80ffd000-81000000 alloc buffer struct failed -12 [ 188.590912][ T5758] Bluetooth: hci0: command 0x0406 tx timeout [ 188.661667][ T5758] Bluetooth: hci1: command 0x0406 tx timeout [ 188.820952][ T5758] Bluetooth: hci2: command 0x0406 tx timeout [ 188.864533][ T10] libceph: connect (1)[c::]:6789 error -101 [ 188.866705][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 188.903121][ T5758] Bluetooth: hci3: command 0x0c1a tx timeout [ 188.912579][ T9493] ceph: No mds server is up or the cluster is laggy [ 188.914999][ T5758] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 189.254637][ T9508] EXT4-fs (nbd0): unable to read superblock [ 189.335521][ T9509] netlink: 16 bytes leftover after parsing attributes in process `syz.0.912'. [ 189.689723][ T9531] Invalid ELF header magic: != ELF [ 189.916297][ T9543] binder: 9542:9543 ioctl c0306201 80000040 returned -22 [ 190.036767][ T9547] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 190.058955][ T9547] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 190.063647][ T9547] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 190.068708][ T9547] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 190.075174][ T9547] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 190.078386][ T9547] kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 190.083453][ T9547] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 190.086554][ T9547] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 190.089714][ T9547] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 190.093525][ T9547] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 190.652932][ T5758] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 190.653781][ T5758] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 190.660939][ T5758] Bluetooth: hci0: command 0x0406 tx timeout [ 190.741102][ T5758] Bluetooth: hci1: command 0x0406 tx timeout [ 190.797854][ T9564] netlink: 36 bytes leftover after parsing attributes in process `syz.0.921'. [ 190.900913][ T5758] Bluetooth: hci2: command 0x0406 tx timeout [ 190.990968][ T5758] Bluetooth: hci3: command 0x0c1a tx timeout [ 191.187267][ T9578] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 191.196185][ T9578] FAULT_INJECTION: forcing a failure. [ 191.196185][ T9578] name failslab, interval 1, probability 0, space 0, times 0 [ 191.200508][ T9578] CPU: 1 UID: 0 PID: 9578 Comm: syz.0.922 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.200541][ T9578] Tainted: [L]=SOFTLOCKUP [ 191.200545][ T9578] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 191.200551][ T9578] Call Trace: [ 191.200556][ T9578] [ 191.200561][ T9578] dump_stack_lvl+0x100/0x190 [ 191.200578][ T9578] should_fail_ex.cold+0x5/0xa [ 191.200592][ T9578] should_failslab+0xc2/0x120 [ 191.200608][ T9578] __kmalloc_cache_noprof+0x91/0x6c0 [ 191.200621][ T9578] ? ovl_iterate+0xa74/0x10d0 [ 191.200638][ T9578] ovl_iterate+0xa74/0x10d0 [ 191.200651][ T9578] ? __pfx_down_write+0x10/0x10 [ 191.200668][ T9578] ? __pfx_down_read_killable+0x10/0x10 [ 191.200685][ T9578] ? __pfx_ovl_iterate+0x10/0x10 [ 191.200698][ T9578] wrap_directory_iterator+0xa2/0xe0 [ 191.200716][ T9578] iterate_dir+0x296/0xae0 [ 191.200735][ T9578] __ia32_sys_getdents64+0x13a/0x2c0 [ 191.200753][ T9578] ? __pfx___ia32_sys_getdents64+0x10/0x10 [ 191.200784][ T9578] ? __pfx_filldir64+0x10/0x10 [ 191.200800][ T9578] ? exit_to_user_mode_loop+0x166/0x6f0 [ 191.200812][ T9578] ? rcu_is_watching+0x12/0xc0 [ 191.200829][ T9578] __do_fast_syscall_32+0xe7/0x970 [ 191.200844][ T9578] ? lockdep_hardirqs_on+0x78/0x100 [ 191.200859][ T9578] do_fast_syscall_32+0x32/0x70 [ 191.200874][ T9578] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 191.200888][ T9578] RIP: 0023:0xf7f68fec [ 191.200901][ T9578] Code: Unable to access opcode bytes at 0xf7f68fc2. [ 191.200980][ T9578] RSP: 002b:00000000f53e450c EFLAGS: 00000292 ORIG_RAX: 00000000000000dc [ 191.200992][ T9578] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080004000 [ 191.200999][ T9578] RDX: 0000000000001003 RSI: 0000000000000000 RDI: 0000000000000000 [ 191.201005][ T9578] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 191.201011][ T9578] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 191.201018][ T9578] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 191.201032][ T9578] [ 192.232606][ T9597] FAULT_INJECTION: forcing a failure. [ 192.232606][ T9597] name failslab, interval 1, probability 0, space 0, times 0 [ 192.243685][ T9597] CPU: 3 UID: 0 PID: 9597 Comm: syz.3.925 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.243705][ T9597] Tainted: [L]=SOFTLOCKUP [ 192.243709][ T9597] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 192.243716][ T9597] Call Trace: [ 192.243720][ T9597] [ 192.243724][ T9597] dump_stack_lvl+0x100/0x190 [ 192.243741][ T9597] should_fail_ex.cold+0x5/0xa [ 192.243754][ T9597] should_failslab+0xc2/0x120 [ 192.243771][ T9597] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 192.243787][ T9597] ? __alloc_skb+0x5b7/0x710 [ 192.243802][ T9597] ? __alloc_skb+0x140/0x710 [ 192.243817][ T9597] __alloc_skb+0x140/0x710 [ 192.243831][ T9597] ? __alloc_skb+0x5b7/0x710 [ 192.243844][ T9597] ? __pfx___alloc_skb+0x10/0x10 [ 192.243859][ T9597] ? find_held_lock+0x2b/0x80 [ 192.243875][ T9597] netlink_ack+0x117/0xb80 [ 192.243892][ T9597] netlink_rcv_skb+0x333/0x420 [ 192.243904][ T9597] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 192.243919][ T9597] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 192.243936][ T9597] ? netlink_deliver_tap+0x1ae/0xcc0 [ 192.243950][ T9597] netlink_unicast+0x585/0x850 [ 192.243964][ T9597] ? __pfx_netlink_unicast+0x10/0x10 [ 192.243980][ T9597] netlink_sendmsg+0x8b0/0xda0 [ 192.243994][ T9597] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.244008][ T9597] ? apparmor_socket_sendmsg+0x15b/0x270 [ 192.244023][ T9597] ____sys_sendmsg+0xa4d/0xbe0 [ 192.244033][ T9597] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.244046][ T9597] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.244063][ T9597] ___sys_sendmsg+0x190/0x1e0 [ 192.244076][ T9597] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.244094][ T9597] ? find_held_lock+0x2b/0x80 [ 192.244115][ T9597] __sys_sendmsg+0x160/0x210 [ 192.244131][ T9597] ? __pfx___sys_sendmsg+0x10/0x10 [ 192.244150][ T9597] ? __pfx_ksys_write+0x10/0x10 [ 192.244164][ T9597] __do_fast_syscall_32+0xe7/0x970 [ 192.244179][ T9597] ? lockdep_hardirqs_on+0x78/0x100 [ 192.244194][ T9597] do_fast_syscall_32+0x32/0x70 [ 192.244209][ T9597] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.244238][ T9597] RIP: 0023:0xf7fb7fec [ 192.244253][ T9597] Code: Unable to access opcode bytes at 0xf7fb7fc2. [ 192.244258][ T9597] RSP: 002b:00000000f545550c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 192.244270][ T9597] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000380 [ 192.244277][ T9597] RDX: 0000000000054840 RSI: 0000000000000000 RDI: 0000000000000000 [ 192.244283][ T9597] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 192.244290][ T9597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.244296][ T9597] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.244310][ T9597] [ 192.308634][ T9580] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 192.320378][ T9580] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 192.338098][ T9580] overlayfs: failed to look up (tracing) for ino (-66) [ 192.625949][ T9604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.928'. [ 192.642490][ T9604] netlink: 156 bytes leftover after parsing attributes in process `syz.3.928'. [ 192.742653][ T5758] Bluetooth: hci0: command 0x0406 tx timeout [ 192.744299][ T9610] netlink: 36 bytes leftover after parsing attributes in process `syz.3.930'. [ 192.759693][ T9613] netlink: 72 bytes leftover after parsing attributes in process `syz.2.929'. [ 193.063345][ T5758] Bluetooth: hci3: command 0x0c1a tx timeout [ 193.094428][ T5831] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 193.177936][ T9631] syzkaller0: entered promiscuous mode [ 193.183863][ T9631] syzkaller0: entered allmulticast mode [ 193.273106][ T5831] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1951, setting to 1023 [ 193.278061][ T5831] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 193.342416][ T5831] usb 7-1: New USB device found, idVendor=0499, idProduct=2001, bcdDevice= 0.40 [ 193.347976][ T5831] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.355797][ T5831] usb 7-1: Product: syz [ 193.358004][ T9625] program syz.1.932 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.363333][ T5831] usb 7-1: Manufacturer: syz [ 193.364890][ T5831] usb 7-1: SerialNumber: syz [ 193.427066][ T9644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.938'. [ 193.438109][ T9644] bridge0: port 5(macvlan2) entered blocking state [ 193.440363][ T9644] bridge0: port 5(macvlan2) entered disabled state [ 193.443260][ T9644] macvlan2: entered allmulticast mode [ 193.445132][ T9644] bridge0: entered allmulticast mode [ 193.447012][ T9644] bridge0: entered promiscuous mode [ 193.455703][ T9644] macvlan2: left allmulticast mode [ 193.457532][ T9644] bridge0: left allmulticast mode [ 193.468684][ T5853] bridge0: left promiscuous mode [ 193.782137][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.065728][ T9649] program syz.0.940 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.138816][ T9650] program syz.3.939 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.153613][ T9609] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 194.166177][ T9609] qnx6: wrong signature (magic) in superblock #1. [ 194.175226][ T9609] qnx6: unable to read the first superblock [ 194.777305][ T9655] netlink: 112 bytes leftover after parsing attributes in process `syz.1.943'. [ 194.889816][ T9665] dlm: Using TCP for communications [ 194.909348][ T9665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.945'. [ 194.915371][ T9665] netlink: 5 bytes leftover after parsing attributes in process `syz.1.945'. [ 194.979212][ T9668] binder: 9667:9668 ioctl c0306201 80000440 returned -22 [ 195.003733][ T9672] tipc: Enabled bearer , priority 0 [ 195.007797][ T9671] tipc: Disabling bearer [ 195.069158][ T9674] netlink: 20 bytes leftover after parsing attributes in process `syz.1.948'. [ 195.079479][ T9674] tipc: Enabled bearer , priority 0 [ 195.085484][ T9674] syzkaller0: entered promiscuous mode [ 195.087293][ T9674] syzkaller0: entered allmulticast mode [ 195.108406][ T9674] tipc: Resetting bearer [ 195.115983][ T9673] tipc: Resetting bearer [ 195.128386][ T9673] tipc: Disabling bearer [ 195.133261][ T9676] fuse: Unknown parameter 'fd0x0000000000000003' [ 195.203956][ T9677] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 195.588569][ T9679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.593341][ T9679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.603009][ T9679] batman_adv: batadv0: Adding interface: macvtap1 [ 195.605607][ T9679] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.614090][ T9679] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 195.700470][ T9682] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 195.717938][ T9682] FAULT_INJECTION: forcing a failure. [ 195.717938][ T9682] name failslab, interval 1, probability 0, space 0, times 0 [ 195.723820][ T9682] CPU: 2 UID: 0 PID: 9682 Comm: syz.0.951 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.723839][ T9682] Tainted: [L]=SOFTLOCKUP [ 195.723843][ T9682] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.723850][ T9682] Call Trace: [ 195.723855][ T9682] [ 195.723860][ T9682] dump_stack_lvl+0x100/0x190 [ 195.723877][ T9682] should_fail_ex.cold+0x5/0xa [ 195.723890][ T9682] should_failslab+0xc2/0x120 [ 195.723908][ T9682] __kmalloc_cache_noprof+0x91/0x6c0 [ 195.723920][ T9682] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 195.723933][ T9682] ? tcf_block_get_ext+0x94d/0x1950 [ 195.723948][ T9682] tcf_block_get_ext+0x94d/0x1950 [ 195.723959][ T9682] ? qdisc_alloc+0x7cc/0xb30 [ 195.723976][ T9682] ? netlink_rcv_skb+0x159/0x420 [ 195.723988][ T9682] ? netlink_unicast+0x585/0x850 [ 195.724000][ T9682] tcf_block_get+0xa8/0x100 [ 195.724011][ T9682] ? __pfx_tcf_block_get+0x10/0x10 [ 195.724022][ T9682] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 195.724041][ T9682] sfb_init+0x33/0xc0 [ 195.724055][ T9682] ? __pfx_sfb_init+0x10/0x10 [ 195.724068][ T9682] qdisc_create+0x47b/0x1060 [ 195.724084][ T9682] tc_modify_qdisc+0xdcf/0x2120 [ 195.724101][ T9682] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 195.724126][ T9682] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 195.724140][ T9682] rtnetlink_rcv_msg+0x3c9/0xe90 [ 195.724159][ T9682] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 195.724182][ T9682] ? ref_tracker_free+0x37e/0x6c0 [ 195.724195][ T9682] netlink_rcv_skb+0x159/0x420 [ 195.724207][ T9682] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 195.724224][ T9682] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 195.724241][ T9682] ? netlink_deliver_tap+0x1ae/0xcc0 [ 195.724255][ T9682] netlink_unicast+0x585/0x850 [ 195.724269][ T9682] ? __pfx_netlink_unicast+0x10/0x10 [ 195.724285][ T9682] netlink_sendmsg+0x8b0/0xda0 [ 195.724319][ T9682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.724336][ T9682] ? apparmor_socket_sendmsg+0x15b/0x270 [ 195.724351][ T9682] ____sys_sendmsg+0xa4d/0xbe0 [ 195.724362][ T9682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.724375][ T9682] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.724393][ T9682] ___sys_sendmsg+0x190/0x1e0 [ 195.724406][ T9682] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.724424][ T9682] ? find_held_lock+0x2b/0x80 [ 195.724448][ T9682] __sys_sendmsg+0x160/0x210 [ 195.724464][ T9682] ? __pfx___sys_sendmsg+0x10/0x10 [ 195.724483][ T9682] ? __pfx_ksys_write+0x10/0x10 [ 195.724497][ T9682] __do_fast_syscall_32+0xe7/0x970 [ 195.724512][ T9682] ? lockdep_hardirqs_on+0x78/0x100 [ 195.724526][ T9682] do_fast_syscall_32+0x32/0x70 [ 195.724542][ T9682] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 195.724557][ T9682] RIP: 0023:0xf7f68fec [ 195.724572][ T9682] Code: Unable to access opcode bytes at 0xf7f68fc2. [ 195.724577][ T9682] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 195.724589][ T9682] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800003c0 [ 195.724596][ T9682] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 195.724602][ T9682] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 195.724608][ T9682] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 195.724615][ T9682] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 195.724629][ T9682] [ 196.163460][ T5831] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 196.165899][ T5831] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 196.170361][ T5831] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 196.172853][ T5831] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 196.177159][ T5831] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 196.201272][ T846] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 196.210007][ T5831] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 196.218083][ T5831] usb 7-1: USB disconnect, device number 6 [ 196.245047][ T5897] udevd[5897]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 196.325996][ T9692] FAULT_INJECTION: forcing a failure. [ 196.325996][ T9692] name failslab, interval 1, probability 0, space 0, times 0 [ 196.332982][ T9692] CPU: 3 UID: 0 PID: 9692 Comm: syz.1.955 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.333009][ T9692] Tainted: [L]=SOFTLOCKUP [ 196.333015][ T9692] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 196.333025][ T9692] Call Trace: [ 196.333030][ T9692] [ 196.333037][ T9692] dump_stack_lvl+0x100/0x190 [ 196.333061][ T9692] should_fail_ex.cold+0x5/0xa [ 196.333080][ T9692] should_failslab+0xc2/0x120 [ 196.333102][ T9692] kmem_cache_alloc_noprof+0x91/0x6a0 [ 196.333118][ T9692] ? __pfx_stack_trace_save+0x10/0x10 [ 196.333136][ T9692] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 196.333152][ T9692] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 196.333167][ T9692] idr_get_free+0x52e/0xa00 [ 196.333185][ T9692] idr_alloc_u32+0x1ac/0x320 [ 196.333201][ T9692] ? __pfx_idr_alloc_u32+0x10/0x10 [ 196.333214][ T9692] ? do_raw_spin_lock+0x128/0x260 [ 196.333232][ T9692] l2tp_tunnel_register+0xfc/0xc10 [ 196.333246][ T9692] ? __pfx___debug_object_init+0x10/0x10 [ 196.333263][ T9692] ? __pfx_l2tp_tunnel_register+0x10/0x10 [ 196.333276][ T9692] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 196.333287][ T9692] ? __local_bh_enable_ip+0x9e/0x120 [ 196.333300][ T9692] ? l2tp_tunnel_get+0x20c/0x490 [ 196.333312][ T9692] ? lockdep_init_map_type+0x5c/0x250 [ 196.333322][ T9692] ? l2tp_tunnel_create+0x2cf/0x460 [ 196.333339][ T9692] ? l2tp_tunnel_create+0x37d/0x460 [ 196.333357][ T9692] pppol2tp_tunnel_get.constprop.0+0x3f0/0x540 [ 196.333372][ T9692] ? __pfx_pppol2tp_tunnel_get.constprop.0+0x10/0x10 [ 196.333393][ T9692] pppol2tp_connect+0xaf0/0x1c20 [ 196.333406][ T9692] ? aa_sk_perm+0x309/0xaa0 [ 196.333420][ T9692] ? __pfx_pppol2tp_connect+0x10/0x10 [ 196.333432][ T9692] ? __pfx_tomoyo_socket_connect_permission+0x10/0x10 [ 196.333450][ T9692] ? __pfx_aa_sk_perm+0x10/0x10 [ 196.333468][ T9692] ? apparmor_socket_connect+0x100/0x1b0 [ 196.333481][ T9692] ? __pfx_pppol2tp_connect+0x10/0x10 [ 196.333492][ T9692] __sys_connect_file+0x141/0x1a0 [ 196.333507][ T9692] __sys_connect+0x141/0x170 [ 196.333536][ T9692] ? __pfx___sys_connect+0x10/0x10 [ 196.333549][ T9692] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 196.333573][ T9692] ? ksys_write+0x1ac/0x250 [ 196.333584][ T9692] ? __pfx_ksys_write+0x10/0x10 [ 196.333595][ T9692] __ia32_sys_connect+0x71/0xb0 [ 196.333608][ T9692] ? lockdep_hardirqs_on+0x78/0x100 [ 196.333621][ T9692] __do_fast_syscall_32+0xe7/0x970 [ 196.333636][ T9692] ? lockdep_hardirqs_on+0x78/0x100 [ 196.333650][ T9692] do_fast_syscall_32+0x32/0x70 [ 196.333665][ T9692] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 196.333680][ T9692] RIP: 0023:0xf70cefec [ 196.333694][ T9692] Code: Unable to access opcode bytes at 0xf70cefc2. [ 196.333699][ T9692] RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 000000000000016a [ 196.333711][ T9692] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 196.333717][ T9692] RDX: 000000000000002e RSI: 0000000000000000 RDI: 0000000000000000 [ 196.333724][ T9692] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 196.333730][ T9692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.333737][ T9692] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 196.333751][ T9692] [ 196.551779][ T9695] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 196.554549][ T9695] FAULT_INJECTION: forcing a failure. [ 196.554549][ T9695] name failslab, interval 1, probability 0, space 0, times 0 [ 196.558455][ T9695] CPU: 2 UID: 0 PID: 9695 Comm: syz.1.957 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.558473][ T9695] Tainted: [L]=SOFTLOCKUP [ 196.558477][ T9695] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 196.558484][ T9695] Call Trace: [ 196.558489][ T9695] [ 196.558494][ T9695] dump_stack_lvl+0x100/0x190 [ 196.558512][ T9695] should_fail_ex.cold+0x5/0xa [ 196.558525][ T9695] should_failslab+0xc2/0x120 [ 196.558542][ T9695] __kmalloc_node_noprof+0x101/0x830 [ 196.558557][ T9695] ? find_held_lock+0x2b/0x80 [ 196.558573][ T9695] ? qdisc_alloc+0xbb/0xb30 [ 196.558592][ T9695] qdisc_alloc+0xbb/0xb30 [ 196.558611][ T9695] qdisc_create_dflt+0x93/0x490 [ 196.558629][ T9695] fifo_create_dflt+0x76/0xf0 [ 196.558645][ T9695] tbf_change+0x1090/0x1440 [ 196.558665][ T9695] ? __pfx_tbf_change+0x10/0x10 [ 196.558686][ T9695] ? __lock_acquire+0x49f/0x1a40 [ 196.558704][ T9695] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 196.558725][ T9695] ? ktime_get+0x22c/0x320 [ 196.558743][ T9695] ? lockdep_hardirqs_on+0x78/0x100 [ 196.558757][ T9695] ? ktime_get+0x23e/0x320 [ 196.558775][ T9695] tbf_init+0x94/0xd0 [ 196.558790][ T9695] ? __pfx_tbf_init+0x10/0x10 [ 196.558805][ T9695] qdisc_create+0x47b/0x1060 [ 196.558821][ T9695] tc_modify_qdisc+0xdcf/0x2120 [ 196.558838][ T9695] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 196.558863][ T9695] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 196.558877][ T9695] rtnetlink_rcv_msg+0x3c9/0xe90 [ 196.558895][ T9695] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 196.558915][ T9695] ? __lock_acquire+0x49f/0x1a40 [ 196.558935][ T9695] netlink_rcv_skb+0x159/0x420 [ 196.558947][ T9695] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 196.558964][ T9695] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 196.558981][ T9695] ? netlink_deliver_tap+0x1ae/0xcc0 [ 196.558995][ T9695] netlink_unicast+0x585/0x850 [ 196.559009][ T9695] ? __pfx_netlink_unicast+0x10/0x10 [ 196.559025][ T9695] netlink_sendmsg+0x8b0/0xda0 [ 196.559039][ T9695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.559053][ T9695] ? apparmor_socket_sendmsg+0x15b/0x270 [ 196.559068][ T9695] ____sys_sendmsg+0xa4d/0xbe0 [ 196.559079][ T9695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.559091][ T9695] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.559109][ T9695] ___sys_sendmsg+0x190/0x1e0 [ 196.559122][ T9695] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.559140][ T9695] ? find_held_lock+0x2b/0x80 [ 196.559162][ T9695] __sys_sendmsg+0x160/0x210 [ 196.559178][ T9695] ? __pfx___sys_sendmsg+0x10/0x10 [ 196.559198][ T9695] ? __pfx_ksys_write+0x10/0x10 [ 196.559212][ T9695] __do_fast_syscall_32+0xe7/0x970 [ 196.559226][ T9695] ? lockdep_hardirqs_on+0x78/0x100 [ 196.559241][ T9695] do_fast_syscall_32+0x32/0x70 [ 196.559256][ T9695] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 196.559270][ T9695] RIP: 0023:0xf70cefec [ 196.559285][ T9695] Code: Unable to access opcode bytes at 0xf70cefc2. [ 196.559290][ T9695] RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 196.559301][ T9695] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800002c0 [ 196.559308][ T9695] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 196.559315][ T9695] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 196.559321][ T9695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.559327][ T9695] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 196.559341][ T9695] [ 196.714125][ T5758] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 196.748880][ T9698] program syz.2.953 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.079927][ T5758] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 197.086856][ T5758] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 197.601891][ T9728] bridge0: port 3(syz_tun) entered blocking state [ 197.606894][ T9728] bridge0: port 3(syz_tun) entered disabled state [ 197.609192][ T9728] syz_tun: entered allmulticast mode [ 197.616459][ T9728] syz_tun: entered promiscuous mode [ 197.635356][ T9728] CIFS mount error: No usable UNC path provided in device string! [ 197.635356][ T9728] [ 197.638825][ T9728] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 197.833211][ T9728] overlayfs: failed to resolve './file1/file0': -2 [ 197.871040][ T9741] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 197.873766][ T9741] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 197.881292][ T9741] vhci_hcd vhci_hcd.0: Device attached [ 197.961015][ T9739] program syz.1.971 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.170934][ T1042] usb 38-1: SetAddress Request (6) to port 0 [ 198.172914][ T1042] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 198.369885][ T9742] vhci_hcd: connection reset by peer [ 198.372410][ T5612] vhci_hcd vhci_hcd.0: stop threads [ 198.374132][ T5612] vhci_hcd vhci_hcd.0: release socket [ 198.380091][ T5612] vhci_hcd vhci_hcd.0: disconnect device [ 198.757148][ T9758] FAULT_INJECTION: forcing a failure. [ 198.757148][ T9758] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 198.765750][ T9758] CPU: 1 UID: 0 PID: 9758 Comm: syz.3.977 Tainted: G L syzkaller #0 PREEMPT(full) [ 198.765771][ T9758] Tainted: [L]=SOFTLOCKUP [ 198.765775][ T9758] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 198.765782][ T9758] Call Trace: [ 198.765787][ T9758] [ 198.765792][ T9758] dump_stack_lvl+0x100/0x190 [ 198.765810][ T9758] should_fail_ex.cold+0x5/0xa [ 198.765821][ T9758] ? prepare_alloc_pages+0x16d/0x5f0 [ 198.765840][ T9758] should_fail_alloc_page+0xeb/0x140 [ 198.765858][ T9758] prepare_alloc_pages+0x1f0/0x5f0 [ 198.765876][ T9758] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 198.765897][ T9758] ? __cgroup_account_cputime+0xd5/0x130 [ 198.765925][ T9758] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 198.765945][ T9758] ? pick_eevdf+0x121/0x860 [ 198.765973][ T9758] ? update_curr+0x3f2/0x540 [ 198.765989][ T9758] ? kvm_sched_clock_read+0x11/0x20 [ 198.766002][ T9758] ? sched_clock+0x38/0x60 [ 198.766023][ T9758] ? sched_clock_cpu+0x6c/0x570 [ 198.766040][ T9758] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 198.766063][ T9758] ? policy_nodemask+0xed/0x4f0 [ 198.766081][ T9758] alloc_pages_mpol+0x1fb/0x540 [ 198.766098][ T9758] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 198.766118][ T9758] folio_alloc_mpol_noprof+0x36/0x260 [ 198.766137][ T9758] vma_alloc_folio_noprof+0xed/0x1d0 [ 198.766155][ T9758] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 198.766178][ T9758] do_anonymous_page+0xb2b/0x2080 [ 198.766190][ T9758] ? rcu_read_unlock+0x2d/0xb0 [ 198.766205][ T9758] __handle_mm_fault+0x1d2c/0x2a00 [ 198.766219][ T9758] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 198.766249][ T9758] ? __pfx___handle_mm_fault+0x10/0x10 [ 198.766262][ T9758] ? pte_offset_map_lock+0x174/0x320 [ 198.766278][ T9758] ? find_held_lock+0x2b/0x80 [ 198.766296][ T9758] ? follow_page_pte+0x4d0/0x13f0 [ 198.766316][ T9758] handle_mm_fault+0x37b/0xa30 [ 198.766330][ T9758] __get_user_pages+0x1178/0x32a0 [ 198.766349][ T9758] ? down_read_killable+0x35e/0x520 [ 198.766366][ T9758] ? __pfx___get_user_pages+0x10/0x10 [ 198.766382][ T9758] ? __pfx_gup_fast_fallback+0x10/0x10 [ 198.766401][ T9758] get_user_pages_unlocked+0x1cb/0x7d0 [ 198.766420][ T9758] ? __pfx_get_user_pages_unlocked+0x10/0x10 [ 198.766436][ T9758] ? get_user_pages_fast_only+0xae/0xf0 [ 198.766452][ T9758] ? __pfx_get_user_pages_fast_only+0x10/0x10 [ 198.766469][ T9758] ? __pfx___might_resched+0x10/0x10 [ 198.766490][ T9758] hva_to_pfn+0x871/0xd60 [ 198.766513][ T9758] ? trace_kvm_tdp_mmu_spte_changed+0x83/0x240 [ 198.766540][ T9758] ? __lock_acquire+0x49f/0x1a40 [ 198.766557][ T9758] ? __pfx_hva_to_pfn+0x10/0x10 [ 198.766572][ T9758] ? __lock_acquire+0x49f/0x1a40 [ 198.766602][ T9758] kvm_follow_pfn+0x291/0x430 [ 198.766616][ T9758] __kvm_faultin_pfn+0x11c/0x1a0 [ 198.766630][ T9758] ? __pfx___kvm_faultin_pfn+0x10/0x10 [ 198.766643][ T9758] ? __pfx_xa_load+0x10/0x10 [ 198.766662][ T9758] ? workingset_activation+0x18d/0x2f0 [ 198.766678][ T9758] kvm_mmu_faultin_pfn+0xb73/0x2240 [ 198.766706][ T9758] ? __pfx_fast_page_fault+0x10/0x10 [ 198.766722][ T9758] ? __pfx_kvm_mmu_faultin_pfn+0x10/0x10 [ 198.766739][ T9758] ? __kvm_mmu_topup_memory_cache+0x332/0x5f0 [ 198.766751][ T9758] ? find_held_lock+0x2b/0x80 [ 198.766765][ T9758] ? kvm_tdp_page_fault+0x295/0x3d0 [ 198.766780][ T9758] kvm_tdp_page_fault+0x182/0x3d0 [ 198.766793][ T9758] kvm_mmu_do_page_fault+0x5a4/0x6c0 [ 198.766807][ T9758] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 198.766824][ T9758] ? kvm_sched_in+0x9a/0xf0 [ 198.766841][ T9758] kvm_mmu_page_fault+0x1dd/0x1ab0 [ 198.766856][ T9758] ? __schedule+0x126e/0x6730 [ 198.766867][ T9758] ? __pfx_clockevents_program_event+0x10/0x10 [ 198.766884][ T9758] ? rcu_qs+0x2a/0xe0 [ 198.766896][ T9758] ? __pfx_kvm_mmu_page_fault+0x10/0x10 [ 198.766911][ T9758] ? __lock_acquire+0x49f/0x1a40 [ 198.766929][ T9758] ? __vmx_complete_interrupts+0x129/0x570 [ 198.766952][ T9758] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 198.766979][ T9758] handle_ept_violation+0x3a3/0x860 [ 198.766999][ T9758] ? __pfx_handle_ept_violation+0x10/0x10 [ 198.767019][ T9758] vmx_handle_exit+0x4d6/0x1ef0 [ 198.767038][ T9758] vcpu_run+0x35ab/0x5de0 [ 198.767053][ T9758] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 198.767076][ T9758] ? __pfx_vcpu_run+0x10/0x10 [ 198.767095][ T9758] ? rcu_is_watching+0x12/0xc0 [ 198.767110][ T9758] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 198.767125][ T9758] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 198.767145][ T9758] kvm_vcpu_ioctl+0x730/0x1700 [ 198.767157][ T9758] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 198.767169][ T9758] ? tomoyo_path_number_perm+0x188/0x580 [ 198.767185][ T9758] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 198.767200][ T9758] ? get_pid_task+0x106/0x250 [ 198.767218][ T9758] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 198.767235][ T9758] ? do_vfs_ioctl+0x226/0x13e0 [ 198.767252][ T9758] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 198.767274][ T9758] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 198.767286][ T9758] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 198.767298][ T9758] ? __fget_files+0x21f/0x3d0 [ 198.767311][ T9758] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 198.767323][ T9758] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 198.767341][ T9758] __do_fast_syscall_32+0xe7/0x970 [ 198.767356][ T9758] ? lockdep_hardirqs_on+0x78/0x100 [ 198.767371][ T9758] do_fast_syscall_32+0x32/0x70 [ 198.767386][ T9758] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 198.767401][ T9758] RIP: 0023:0xf7fb7fec [ 198.767418][ T9758] Code: Unable to access opcode bytes at 0xf7fb7fc2. [ 198.767423][ T9758] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 198.767434][ T9758] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 198.767441][ T9758] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 198.767448][ T9758] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 198.767454][ T9758] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 198.767460][ T9758] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 198.767475][ T9758] [ 198.995612][ T846] IPVS: starting estimator thread 0... [ 199.037410][ T9752] tcpci 0-0050: Can't find connector node. [ 199.040541][ T9752] tcpci 0-0050: probe with driver tcpci failed with error -22 [ 199.050341][ T9752] i2c i2c-0: new_device: Instantiated device tcpci at 0x50 [ 199.110942][ T9764] IPVS: using max 42 ests per chain, 100800 per kthread [ 199.654117][ T9767] bridge0: port 4(erspan0) entered blocking state [ 199.660151][ T9767] bridge0: port 4(erspan0) entered disabled state [ 199.664284][ T9767] erspan0: entered allmulticast mode [ 199.670613][ T9767] erspan0: entered promiscuous mode [ 199.677802][ T9767] bridge0: port 4(erspan0) entered blocking state [ 199.680637][ T9767] bridge0: port 4(erspan0) entered listening state [ 199.703187][ T9752] lo speed is unknown, defaulting to 1000 [ 199.746986][ T9771] syz.3.980 (9771): drop_caches: 2 [ 199.853935][ T9779] dummy_hcd dummy_hcd.0: remove, state 4 [ 199.856796][ T9779] usb usb5: USB disconnect, device number 1 [ 199.891550][ T846] usb 8-1: new low-speed USB device number 17 using dummy_hcd [ 199.901936][ T9779] dummy_hcd dummy_hcd.0: stopped [ 199.904500][ T9779] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 199.923512][ T9781] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 199.926542][ T9781] dummy_hcd dummy_hcd.0: Dummy host controller [ 199.941905][ T9781] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 5 [ 199.955815][ T9781] usb usb5: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 199.959703][ T9781] usb usb5: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 199.963701][ T9781] usb usb5: Product: Dummy host controller [ 199.966497][ T9781] usb usb5: Manufacturer: Linux syzkaller dummy_hcd [ 199.969332][ T9781] usb usb5: SerialNumber: dummy_hcd.0 [ 199.998147][ T9781] hub 5-0:1.0: USB hub found [ 200.007943][ T9781] hub 5-0:1.0: 1 port detected [ 200.062891][ T846] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 200.066051][ T846] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 200.069874][ T846] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 200.074647][ T846] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 200.079771][ T846] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 200.083958][ T846] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 200.087568][ T846] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 200.095432][ T846] usb 8-1: config 168 interface 0 has no altsetting 0 [ 200.099247][ T846] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 200.102553][ T846] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 200.106151][ T846] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 200.110007][ T846] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 200.113947][ T846] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 200.117586][ T846] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 200.121637][ T846] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 200.125749][ T846] usb 8-1: config 168 interface 0 has no altsetting 0 [ 200.128941][ T846] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 200.132065][ T846] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 200.135647][ T846] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 200.139211][ T846] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 200.143509][ T846] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 200.147078][ T846] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 200.150708][ T846] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 200.155396][ T846] usb 8-1: config 168 interface 0 has no altsetting 0 [ 200.159786][ T846] usb 8-1: string descriptor 0 read error: -22 [ 200.162291][ T846] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 200.165204][ T846] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.187049][ T846] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 200.539186][ T846] usb 8-1: USB disconnect, device number 17 [ 200.636478][ T9787] syzkaller0: entered promiscuous mode [ 200.638982][ T9787] syzkaller0: entered allmulticast mode [ 200.854003][ T5758] Bluetooth: hci0: unexpected event for opcode 0x080d [ 200.873941][ T5758] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 201.262910][ T5831] libceph: connect (1)[c::]:6789 error -101 [ 201.267319][ T9812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.992'. [ 201.268617][ T9803] bridge_slave_0: left allmulticast mode [ 201.282171][ T5831] libceph: mon0 (1)[c::]:6789 connect error [ 201.323730][ T5831] libceph: connect (1)[c::]:6789 error -101 [ 201.350843][ T9803] bridge_slave_0: left promiscuous mode [ 201.352765][ T9803] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.364087][ T5831] libceph: mon0 (1)[c::]:6789 connect error [ 201.383148][ T5758] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 201.385694][ T9807] ceph: No mds server is up or the cluster is laggy [ 201.411433][ T5758] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 201.613502][ T9826] syzkaller0: entered promiscuous mode [ 201.618359][ T9826] syzkaller0: entered allmulticast mode [ 201.904454][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.997'. [ 202.071223][ T9834] xt_policy: output policy not valid in PREROUTING and INPUT [ 202.144242][ T9836] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1000'. [ 202.344720][ T9843] overlayfs: invalid redirect ((null)) [ 202.347057][ T9843] overlayfs: invalid redirect ((null)) [ 202.351630][ T9843] overlayfs: invalid redirect ((null)) [ 202.394920][ T9843] overlayfs: invalid redirect ((null)) [ 202.401248][ T9843] overlayfs: failed lookup in lower (newroot/271, name='bus', err=-40): overlapping layers [ 202.433958][ T9848] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1004'. [ 202.652297][ T9853] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 202.654411][ T9853] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 202.657175][ T9853] vhci_hcd vhci_hcd.0: Device attached [ 202.811237][ T846] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 202.940955][ T5853] usb 42-1: SetAddress Request (6) to port 0 [ 202.942951][ T5853] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 202.965997][ T846] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 202.972324][ T846] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.980869][ T846] usb 8-1: Product: syz [ 202.985078][ T846] usb 8-1: Manufacturer: syz [ 202.989410][ T846] usb 8-1: SerialNumber: syz [ 203.001903][ T846] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 203.011981][ T846] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 203.019944][ T846] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 203.223262][ T9883] tipc: Enabling of bearer rejected, already enabled [ 203.228974][ T9883] binder: 9882:9883 ioctl c0306201 80000000 returned -22 [ 203.231426][ T1042] usb 38-1: device descriptor read/8, error -110 [ 203.275009][ T9854] vhci_hcd: connection reset by peer [ 203.277121][ T5612] vhci_hcd vhci_hcd.2: stop threads [ 203.279040][ T5612] vhci_hcd vhci_hcd.2: release socket [ 203.280944][ T5612] vhci_hcd vhci_hcd.2: disconnect device [ 203.402955][ T9897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1014'. [ 203.410203][ T9895] overlayfs: failed lookup in lower (newroot/254, name='file1', err=-40): overlapping layers [ 203.418088][ T9897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1014'. [ 203.509583][ T9900] --map-set only usable from mangle table [ 203.590694][ T5831] libceph: connect (1)[c::]:6789 error -101 [ 203.592824][ T5831] libceph: mon0 (1)[c::]:6789 connect error [ 203.622774][ T1042] usb usb38-port1: attempt power cycle [ 203.636842][ T9901] ceph: No mds server is up or the cluster is laggy [ 203.834000][ T9908] e1000e 0000:00:02.0 eth1: removed PHC [ 203.963346][ T9908] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 204.183288][ T1042] usb usb38-port1: unable to enumerate USB device [ 204.196919][ T9910] net2280 0000:00:02.0: PLX NET228x/USB338x USB Peripheral Controller [ 204.199616][ T9910] net2280 0000:00:02.0: irq 30, pci mem ffffc90021880000, chip rev 0000 [ 204.202337][ T9910] net2280 0000:00:02.0: version: 2005 Sept 27/v3.0; legacy mode [ 204.305811][ T9932] Option '&7f%R(ﮘWO]mA(BeTv_bJqQ-I:' to dns_resolver key: bad/missing value [ 204.440677][ T9945] CUSE: info not properly terminated [ 204.659544][ T9957] openvswitch: netlink: Key type 269 is out of range max 32 [ 204.787951][ T9948] program syz.1.1023 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.417548][ T9972] BUG: unable to handle page fault for address: fffffffffffffc10 [ 205.420035][ T9972] #PF: supervisor read access in kernel mode [ 205.422157][ T9972] #PF: error_code(0x0000) - not-present page [ 205.424981][ T9972] PGD e997067 P4D e997067 PUD e999067 PMD 0 [ 205.427450][ T9972] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 205.429183][ T9972] CPU: 1 UID: 0 PID: 9972 Comm: syz.0.1025 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.432539][ T9972] Tainted: [L]=SOFTLOCKUP [ 205.433896][ T9972] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 205.437055][ T9972] RIP: 0010:strnlen+0x4b/0x80 [ 205.438554][ T9972] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c e9 40 87 07 00 48 [ 205.444535][ T9972] RSP: 0018:ffffc9000e8970c8 EFLAGS: 00010246 [ 205.446425][ T9972] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000 [ 205.448927][ T9972] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10 [ 205.451307][ T9972] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000 [ 205.453636][ T9972] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10 [ 205.456111][ T9972] R13: ffff88801c2f3e00 R14: 0000000000000006 R15: 0000000000000010 [ 205.458635][ T9972] FS: 0000000000000000(0000) GS:ffff888096ce1000(0063) knlGS:00000000f5426b40 [ 205.461489][ T9972] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 205.463553][ T9972] CR2: fffffffffffffc10 CR3: 000000004c5a0000 CR4: 0000000000352ef0 [ 205.466055][ T9972] Call Trace: [ 205.467145][ T9972] [ 205.468080][ T9972] ? look_up_lock_class+0x55/0x120 [ 205.469711][ T9972] trace_event_raw_event_drv_net_setup_tc+0x100/0x5d0 [ 205.471806][ T9972] ? __pfx_trace_event_raw_event_drv_net_setup_tc+0x10/0x10 [ 205.474069][ T9972] ? __pfx___might_resched+0x10/0x10 [ 205.475738][ T9972] ? __mutex_lock+0x26d/0x1bd0 [ 205.477217][ T9972] ieee80211_netdev_setup_tc+0x2c6/0x3e0 [ 205.478982][ T9972] ? __pfx_ieee80211_netdev_setup_tc+0x10/0x10 [ 205.480920][ T9972] tcf_block_offload_cmd.isra.0+0x1c4/0x310 [ 205.482758][ T9972] ? __pfx_tcf_block_offload_cmd.isra.0+0x10/0x10 [ 205.484761][ T9972] ? __pfx_down_write+0x10/0x10 [ 205.486303][ T9972] tcf_block_get_ext+0x7ed/0x1950 [ 205.487906][ T9972] tcf_block_get+0xa8/0x100 [ 205.489336][ T9972] ? __pfx_tcf_block_get+0x10/0x10 [ 205.490925][ T9972] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 205.492874][ T9972] ? __pfx_qdisc_watchdog+0x10/0x10 [ 205.494504][ T9972] ? __hrtimer_setup+0x208/0x330 [ 205.496065][ T9972] cake_init+0x306/0xac0 [ 205.497458][ T9972] ? qdisc_alloc+0x81b/0xb30 [ 205.498922][ T9972] ? __pfx_cake_init+0x10/0x10 [ 205.500426][ T9972] qdisc_create+0x47b/0x1060 [ 205.501882][ T9972] tc_modify_qdisc+0xdcf/0x2120 [ 205.503412][ T9972] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 205.505088][ T9972] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 205.506731][ T9972] rtnetlink_rcv_msg+0x3c9/0xe90 [ 205.508321][ T9972] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 205.510030][ T9972] ? ref_tracker_free+0x37e/0x6c0 [ 205.511610][ T9972] netlink_rcv_skb+0x159/0x420 [ 205.513116][ T9972] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 205.514841][ T9972] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 205.516516][ T9972] ? netlink_deliver_tap+0x1ae/0xcc0 [ 205.518212][ T9972] netlink_unicast+0x585/0x850 [ 205.519711][ T9972] ? __pfx_netlink_unicast+0x10/0x10 [ 205.521372][ T9972] netlink_sendmsg+0x8b0/0xda0 [ 205.522881][ T9972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.524551][ T9972] ? apparmor_socket_sendmsg+0x15b/0x270 [ 205.526312][ T9972] ____sys_sendmsg+0xa4d/0xbe0 [ 205.527859][ T9972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.529518][ T9972] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.531170][ T9972] ? plist_del+0x308/0x510 [ 205.532586][ T9972] ___sys_sendmsg+0x190/0x1e0 [ 205.534064][ T9972] ? __pfx____sys_sendmsg+0x10/0x10 [ 205.535701][ T9972] ? futex_wake+0x220/0x5e0 [ 205.537183][ T9972] ? find_held_lock+0x2b/0x80 [ 205.538685][ T9972] __sys_sendmsg+0x160/0x210 [ 205.540141][ T9972] ? __pfx___sys_sendmsg+0x10/0x10 [ 205.541803][ T9972] __do_fast_syscall_32+0xe7/0x970 [ 205.543408][ T9972] do_fast_syscall_32+0x32/0x70 [ 205.544963][ T9972] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 205.546938][ T9972] RIP: 0023:0xf7f68fec [ 205.548274][ T9972] Code: Unable to access opcode bytes at 0xf7f68fc2. [ 205.550331][ T9972] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 205.552901][ T9972] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800012c0 [ 205.555371][ T9972] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 205.557839][ T9972] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 205.560287][ T9972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.562717][ T9972] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 205.565168][ T9972] [ 205.566152][ T9972] Modules linked in: [ 205.567396][ T9972] CR2: fffffffffffffc10 [ 205.568702][ T9972] ---[ end trace 0000000000000000 ]--- [ 205.570392][ T9972] RIP: 0010:strnlen+0x4b/0x80 [ 205.571873][ T9972] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c e9 40 87 07 00 48 [ 205.577833][ T9972] RSP: 0018:ffffc9000e8970c8 EFLAGS: 00010246 [ 205.579728][ T9972] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000 [ 205.582169][ T9972] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10 [ 205.584632][ T9972] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000 [ 205.587114][ T9972] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10 [ 205.589563][ T9972] R13: ffff88801c2f3e00 R14: 0000000000000006 R15: 0000000000000010 [ 205.592010][ T9972] FS: 0000000000000000(0000) GS:ffff888096ce1000(0063) knlGS:00000000f5426b40 [ 205.594782][ T9972] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 205.596851][ T9972] CR2: 00000000f7f69000 CR3: 000000004c5a0000 CR4: 0000000000352ef0 [ 205.599368][ T9972] Kernel panic - not syncing: Fatal exception [ 205.601862][ T9972] Kernel Offset: disabled [ 205.603216][ T9972] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:01:16 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=ffffffff8c400a00 RDI=ffffffff8c400a40 RBP=ffffffff8ebe8000 RSP=ffffc900000078f8 R8 =0000000000000000 R9 =0000000000000000 R10=ffffc90000007a10 R11=000000000000c88e R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8bb91a73 RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096be1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000564ff3b7b950 CR3=00000000663ab000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a13375 RDI=ffffffff9b9f51a0 RBP=ffffffff9b9f5160 RSP=ffffc9000e896920 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=0000000000000065 R14=ffffffff9b6f5220 R15=ffffffff85a13310 RIP=ffffffff85a1339f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096ce1000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=fffffffffffffc10 CR3=000000004c5a0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000001edb24 RBX=ffff88801c7f4a80 RCX=ffffffff8bb912d5 RDX=0000000000000001 RSI=ffffffff8c400a00 RDI=ffffffff81de9497 RBP=ffffed10038fe950 RSP=ffffc9000047fe00 R8 =0000000000000000 R9 =ffffed100568678d R10=ffff88802b433c6b R11=ffffffff81d5692c R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=dffffc0000000000 RIP=ffffffff8bb8f89f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096de1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f76977225d0 CR3=000000004d2aa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 2e7a797300000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff8bb18173 RDX=0000000000000001 RSI=0000000000000002 RDI=ffff8880245e4a80 RBP=ffffffff8d4f0600 RSP=ffffc9002267efa8 R8 =0000000000000005 R9 =0000000000000002 R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=0000000000000005 R14=0000000000000005 R15=0000000000000000 RIP=ffffffff8209a6db RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ee1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f46d0705000 CR3=000000004e52e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 63696d6f74616269 6c2f343662696c2f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000248 0000000000007db8 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000