last executing test programs: 10m54.544511565s ago: executing program 3 (id=510): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) capset(0x0, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, 0x0) 10m54.397397516s ago: executing program 3 (id=512): socket$kcm(0x10, 0x2, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) poll(0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) r1 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x400, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 10m54.186273993s ago: executing program 3 (id=514): read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/123, 0x7b}], 0x1) 10m52.346125931s ago: executing program 3 (id=521): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) capset(0x0, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, 0x0) 10m52.286254307s ago: executing program 3 (id=522): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 10m52.278638382s ago: executing program 3 (id=525): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10m36.896069217s ago: executing program 32 (id=525): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m34.830471075s ago: executing program 4 (id=2664): syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000002000040028bd70000000200800010066010100080001007f0000011000"/44], 0x2c}, 0x1, 0x0, 0x0, 0x600}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x3, {0x7, 0x28, 0x101, 0x2098004, 0x0, 0x0, 0x0, 0xffffffbf, 0x0, 0x0, 0x100, 0x103}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) splice(r4, 0x0, r5, 0x0, 0x402000784853bb, 0x0) r6 = eventfd(0x5) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000040)=r6, 0x1) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') syz_fuse_handle_req(r3, &(0x7f0000019300)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffffda, 0x8000000000000000, {0x7, 0x2b, 0x0, 0x54036100, 0x0, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) removexattr(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)=@known='system.posix_acl_default\x00') syz_emit_ethernet(0x42, &(0x7f0000000580)=ANY=[@ANYBLOB="bbbbbbbcbbbbaaaaaaaaaa008100000008004500fddc0000fffc03019078ac1e0301ac1c14aa0306907800000000450003d7fffe000400290000ac141440ac1414bb"], 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @private=0xa010101}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 1m32.892370898s ago: executing program 4 (id=2673): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, 0x0, 0x0) 1m32.670062244s ago: executing program 4 (id=2674): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000000)) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x38) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101402, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480240001800b000100736f636b6574000014000280080002400000000308000140000000023000018008000100"], 0xac}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed50004"], 0x11) ioctl$COMEDI_INSNLIST(r1, 0x8008640b, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0xe000003, 0x0, 0x0, 0x5, 0xc}]}) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 1m32.669872432s ago: executing program 4 (id=2675): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x20a7699, 0x0) mount$overlay(0xf000, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0) 1m32.591795702s ago: executing program 4 (id=2676): socket$kcm(0x10, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x2, 0x3, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16, @ANYRESHEX], 0x15) 1m32.199747453s ago: executing program 4 (id=2680): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x497, &(0x7f00000004c0)={0x0, 0x465e, 0x400, 0x7, 0x31d}, 0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(0x0, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001980)={'wlan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000004240)={{}, {0x1, 0x5}, [], {0x4, 0x2}, [], {0x10, 0x6}, {0x20, 0x2}}, 0x24, 0x3) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f00000019c0)={0x28, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) 1m32.058410767s ago: executing program 33 (id=2680): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x497, &(0x7f00000004c0)={0x0, 0x465e, 0x400, 0x7, 0x31d}, 0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(0x0, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001980)={'wlan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000004240)={{}, {0x1, 0x5}, [], {0x4, 0x2}, [], {0x10, 0x6}, {0x20, 0x2}}, 0x24, 0x3) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f00000019c0)={0x28, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) 5.649205038s ago: executing program 0 (id=3072): r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000180)={0x7, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x8, "b546ba05000000000000009c00010000000045323a97a49fc8772500", 0xffffffffffffffff}) close(0x3) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0x40103e05, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000002240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x7, 0x4, 0x3, 0x1b, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x8, 0x20, 0x0, 0x6, [0x6]}]}}, {0x4e1e, 0x4e21, 0xfa4, 0x0, @wg=@data={0x4, 0x2, 0x8, "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"}}}}, 0xfce) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x3) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000440)=@v2={0x2000000, [{0x7, 0x3}, {0x3, 0x8}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) readv(r0, &(0x7f0000000980)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1) r7 = openat$userio(0xffffff9c, &(0x7f0000000040), 0xc0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r7, 0x0, 0xffffffffffffff98) 5.439103632s ago: executing program 0 (id=3074): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) pipe(&(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f0000000080)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f00000002c0)={0x3ff, 0xb, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) exit(0x0) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f0000004980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4.499259278s ago: executing program 0 (id=3077): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x0, 0xe, 0x0, 0x20000000000003, 0x1004}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x1000, 0x1000, &(0x7f0000a4e000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f00000001c0)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b805000000f3a5a90a000f01c40f019c09000f01c2", 0x65}], 0x1, 0x7d, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.119499398s ago: executing program 0 (id=3080): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x2) unlink(&(0x7f00000002c0)='./file0\x00') timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x101080, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) ftruncate(r1, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x2) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)=[0x6], 0x0, 0x0, 0x1}}, 0x40) open$dir(&(0x7f00000001c0)='./file1\x00', 0x23942, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r3, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f00000010c0)=0x6) accept4$rose(r3, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f00008c9000/0x1000)=nil, 0x1000, 0x1000000, 0x810, r0, 0x180000000) 3.048460657s ago: executing program 2 (id=3092): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r0, 0x1, &(0x7f0000000b40)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x1}]) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 2.880178387s ago: executing program 5 (id=3093): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_delroute={0x34, 0x19, 0x601, 0x70bd28, 0x25dfdbfe, {0xa, 0x20, 0x20, 0x48, 0xfd, 0x7, 0x0, 0x8, 0x300}, [@RTA_PRIORITY={0x8, 0x6, 0x6}, @RTA_EXPIRES={0x8, 0x17, 0x7}, @RTA_PREF={0x5, 0x14, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c051}, 0x8004) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='cpu'}, {@subsystem='memory'}, {@xattr}]}) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000900)={0x2020}, 0x2020) 2.879854807s ago: executing program 2 (id=3094): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) unshare(0x2a020400) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000100), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xe42, 0x9, 0x0, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8000, 0x4], 0xeeee8000, 0x240046}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, &(0x7f00000003c0)={'\x00', 0x7, 0xff7f, 0x7, 0x0, 0x7, 0x8076000, 0x1, '\x00', 0x4}) ioctl$KVM_RUN(r5, 0xae80, 0x0) recvmmsg(r1, &(0x7f0000001e80), 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, 0x0, &(0x7f0000000940)=0x3f38e84145cf7c9e) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000400)=[0xe758, 0xf8de], 0x2) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, 0x0) 2.17019842s ago: executing program 5 (id=3095): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x109000, 0x0) (async) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) (async) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000240)={0x40, 0x0, '\x00', {0x0, @bt={0x6, 0x5, 0x1, 0x0, 0x2, 0x10000, 0xa, 0x8, 0x100007, 0x4, 0x2, 0x1, 0x6ac, 0x43cb, 0x4, 0x6, {0x85a6}, 0xb2, 0x81}}}) (async) r2 = syz_io_uring_setup(0x7f4d, &(0x7f00000001c0)={0x0, 0x4684, 0x20, 0x1, 0x275}, &(0x7f0000000040), &(0x7f0000000100)) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x2, 0x2, 0x3b9, 0x0, r2}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) r6 = openat$zero(0xffffff9c, &(0x7f0000000300), 0x2000, 0x0) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x30, 0x67, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da"}}}}}, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_UNLINKAT={0x24, 0x2, 0x0, r6, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0, {0x0, r7}}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) 2.169825012s ago: executing program 0 (id=3096): r0 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c200000388aa0e008100450008060104600006050004aaaaaaaaaa17eb782f7cc2000000000000155b31d889b2dc7d4c71471da2b0320e"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000006c00), 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x3, 0x2) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', 0x0, 0x0, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)) r4 = socket$inet_sctp(0x2, 0x5, 0x84) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e22, 0x4, 'lblcr\x00', 0x0, 0x80005, 0x4b}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x20, 0xa7e, 0x400070}, 0x2c) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140), &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f0000000300)) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140100002f00011b00000000ecdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20000000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(r6, 0x0, 0x0, 0x42, 0x0, 0x0) accept4(r0, 0x0, &(0x7f0000000040), 0xc0000) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) 2.018695197s ago: executing program 5 (id=3097): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r2 = fsopen(&(0x7f0000000000)='cifs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000200), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}, 0x1c9}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000100)=0x1) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$DVB_DEMUX_DMX_DQBUF(r1, 0xc0186f40, &(0x7f0000000100)={0x1, 0x4, 0x7, 0x9b, 0xc, 0xa09}) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000002c0)={0x6, 0x5, 0x8, 0x401}, 0x10) write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r4, 0x0, r0, 0x0, 0xffff, 0x2) 1.897387889s ago: executing program 2 (id=3098): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], 0x0}, 0x94) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc4a, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x9, 0x100, 0xfffffffffffffffb, 0x8, 0x71dd, 0x0, 0x8, 0x8d], 0x100000, 0x2008c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8953, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) r4 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) r6 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) 1.261679569s ago: executing program 0 (id=3099): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3ff, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x38, 0x2, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) openat$rdma_cm(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) r5 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file1/file2\x00', 0x82) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file2\x00', 0x8, 0xdfcd) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) 959.210817ms ago: executing program 5 (id=3100): setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='highspeed', 0x9) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000940)=0xb, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x1}, 0xb00}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8024) mmap(&(0x7f000069b000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x20010, 0xffffffffffffffff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 903.213225ms ago: executing program 1 (id=3102): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r0, 0x1, &(0x7f0000000b40)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x1}]) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 886.554097ms ago: executing program 5 (id=3103): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x3a, 0x0, 0x100000001}]}) r4 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x2e, &(0x7f0000000040)=[{&(0x7f00000005c0)="3504000040000511d25a35400c00020003ffe42037153e370c04018006041000450000002a560000e7ff00000000", 0x2e}, {&(0x7f0000000e80)="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", 0x407}], 0x2}, 0x10009004) r6 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 729.959327ms ago: executing program 2 (id=3104): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r2, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1ea}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x801) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r3) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) poll(&(0x7f0000000140), 0x0, 0xaa) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) 678.387879ms ago: executing program 1 (id=3105): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000080)='sysfs\x00', 0xc44, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') chdir(&(0x7f0000000040)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x3f) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000040)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="180000100300000020565200fe020010850000000708000095", @ANYRESDEC=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x71, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES32], 0x13) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x16, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x85, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @val=@tracing={r6, 0x8}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5800, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="100000002900000043001000010001003400000029000000360000003c03000000000000c910fc0000000000000000000000000000010102000007000105000000000000540000002900000039000000330802020000000000000000000000000000000000000001fe80000000000000000000000000001bfc01000000000000000000000000000000000000000000000000ffffac1414aa10000000290000003400000007000000100000002900000043000000ba00000010"], 0xc8}}], 0x2, 0x4000000) 678.062975ms ago: executing program 1 (id=3106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x30, 0x26, 0x8, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xfff2}, {0x10, 0xfff2}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0xc081}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x880) 648.655668ms ago: executing program 5 (id=3107): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000ffffffff0000000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcffffff850000007100000095"], &(0x7f0000000240)='GPL\x00', 0x1000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/81) r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$vbi(0x0, 0x1, 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x9, 0x50424752, 0x3, 0x3, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x2}}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x10) syz_open_dev$sg(&(0x7f0000000000), 0xe6, 0x2602) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) io_setup(0x1, &(0x7f0000000380)) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2778) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)=0x2e) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000340)={0x1, 0x0, 0xffffffff, 0x5, 0x99, &(0x7f0000000880)}) 518.874712ms ago: executing program 1 (id=3108): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0xfffffffffffffffe}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000004000a5012bbd700000000000047c00000400c2800c0001800600060008"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1000000, &(0x7f0000000580)="b318"}) (async) syz_open_procfs(0x0, &(0x7f00000004c0)='map_files\x00') r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) lseek(r5, 0x851, 0x1) (async, rerun: 64) getdents64(r5, &(0x7f00000001c0)=""/130, 0xfffffffffffffe48) (rerun: 64) 518.617599ms ago: executing program 1 (id=3109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x104}}, 0x0) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000040)=0x1ff) 325.2735ms ago: executing program 1 (id=3110): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f00000001c0)="240000005800410f9c00f4f90085b3025cb1fddf08000100050100000800028001000000", 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r5, &(0x7f00000001c0)={0x18, 0x2, {0x3, @remote}}, 0x1e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = fcntl$dupfd(r7, 0x0, r7) write$sndseq(r8, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @tick=0xffffffff, {0x40, 0x9}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}, {0x2, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) fcntl$lock(r6, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}) r9 = io_uring_setup(0x3450, &(0x7f0000000080)) r10 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x9c000000, @dev={0xfe, 0x80, '\x00', 0x30}, 0x1df}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x0) r11 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r11, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x9c000000, @ipv4={'\x00', '\xff\xff', @remote}, 0x1df}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) 284.214252ms ago: executing program 2 (id=3111): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x23, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 0s ago: executing program 2 (id=3112): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000ffffffff0000000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcffffff8500000071000000"], &(0x7f0000000240)='GPL\x00', 0x1000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/81) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$vbi(0x0, 0x1, 0x2) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x9, 0x50424752, 0x3, 0x3, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000180)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x2}}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r6, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x10) ioctl$VIDIOC_ENUMAUDOUT(r2, 0xc0345642, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0xe6, 0x2602) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) io_setup(0x1, &(0x7f0000000380)=0x0) io_submit(r8, 0x0, 0x0) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2778) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)=0x2e) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000340)={0x1, 0x0, 0xffffffff, 0x5, 0x99, &(0x7f0000000880)}) kernel console output (not intermixed with test programs): 24752, 8, 0, 0, 0) [ 738.963066][T15142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2561'. [ 739.663550][T15152] fuse: Bad value for 'fd' [ 739.785392][T15159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2564'. [ 739.838996][T15159] bridge_slave_1: left allmulticast mode [ 739.842127][T15160] netlink: 33 bytes leftover after parsing attributes in process `syz.2.2566'. [ 739.853162][T15159] bridge_slave_1: left promiscuous mode [ 739.856640][T15159] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.903101][T15162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2566'. [ 739.923604][T15159] bridge_slave_0: left allmulticast mode [ 739.926403][T15159] bridge_slave_0: left promiscuous mode [ 739.929554][T15159] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.489226][T15158] vlan2: entered promiscuous mode [ 740.491290][T15158] hsr0: entered promiscuous mode [ 740.616325][T15152] libceph: secret too big 289 [ 741.968465][T15187] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 742.447981][T15203] overlayfs: failed to resolve './file1': -2 [ 744.479826][T15219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2581'. [ 744.483930][T15219] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2581'. [ 744.488610][T15220] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 744.509998][T15216] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 744.515577][T15216] Error validating options; rc = [-22] [ 744.761736][ T5303] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 744.921693][ T5303] usb 6-1: Using ep0 maxpacket: 16 [ 744.925750][ T5303] usb 6-1: config 20 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 744.936920][ T5303] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 744.940818][ T5303] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.944847][ T5303] usb 6-1: Product: syz [ 744.946730][ T5303] usb 6-1: Manufacturer: syz [ 744.948821][ T5303] usb 6-1: SerialNumber: syz [ 747.011720][ T10] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 747.161634][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 747.168140][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 747.176120][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 747.187861][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 747.200829][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 747.214045][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 747.222554][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.434364][ T5303] usb 6-1: USB disconnect, device number 30 [ 747.442399][ T10] usb 7-1: GET_CAPABILITIES returned 0 [ 747.461728][ T10] usbtmc 7-1:16.0: can't read capabilities [ 747.556154][T15250] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 747.740843][ T10] usb 7-1: USB disconnect, device number 34 [ 748.386981][T15270] netlink: 832 bytes leftover after parsing attributes in process `syz.4.2597'. [ 748.392025][T15271] netlink: 832 bytes leftover after parsing attributes in process `syz.4.2597'. [ 748.439017][T15274] tipc: Enabled bearer , priority 0 [ 749.038856][T15284] overlay: Unknown parameter '/' [ 749.560943][ T40] audit: type=1326 audit(1772526270.862:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15296 comm="syz.1.2606" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe6f6c code=0x0 [ 750.351306][T15274] loop5: detected capacity change from 0 to 7 [ 750.360833][T15274] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 750.362799][T15274] loop5: partition table partially beyond EOD, truncated [ 750.365398][T15274] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 750.406247][T15298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 750.845634][ T40] audit: type=1326 audit(1772526272.152:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15311 comm="syz.2.2612" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bef6c code=0x0 [ 751.001963][T15317] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2613'. [ 751.041994][T15318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2612'. [ 751.070281][T15318] vxlan0: entered promiscuous mode [ 751.079208][ T688] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 751.083409][ T688] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 751.086529][ T688] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 751.090154][ T688] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 751.895882][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 751.898569][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.683504][T15358] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 755.652824][T15376] 9p: Bad value for 'wfdno' [ 756.904968][T15398] tipc: Enabling of bearer rejected, failed to enable media [ 757.020010][T15403] 9p: Bad value for 'wfdno' [ 757.623314][T15420] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 757.637250][T15423] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 758.044755][T15426] netlink: 'syz.1.2647': attribute type 21 has an invalid length. [ 758.133886][T15428] netlink: 'syz.1.2648': attribute type 1 has an invalid length. [ 760.855856][T15459] fuse: Bad value for 'user_id' [ 760.858563][T15459] fuse: Bad value for 'user_id' [ 761.174529][T15466] netlink: 'syz.4.2662': attribute type 1 has an invalid length. [ 761.196274][T15466] bond2: entered promiscuous mode [ 761.199227][T15466] 8021q: adding VLAN 0 to HW filter on device bond2 [ 761.207697][T15466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2662'. [ 761.212491][T15466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2662'. [ 761.231839][ T6029] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 761.256050][T15466] bond2: (slave bridge2): making interface the new active one [ 761.259334][T15466] bridge2: entered promiscuous mode [ 761.263563][T15466] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 761.403380][ T6029] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 761.406601][ T6029] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 761.410620][ T6029] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 761.414092][ T6029] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 761.417862][ T6029] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 761.421808][ T6029] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 761.426895][ T6029] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 761.430007][ T6029] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 761.433195][ T6029] usb 5-1: Product: syz [ 761.435113][ T6029] usb 5-1: Manufacturer: syz [ 761.442095][T15461] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 761.451536][ T6029] cdc_wdm 5-1:1.0: skipping garbage [ 761.454991][ T6029] cdc_wdm 5-1:1.0: skipping garbage [ 761.458755][ T6029] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 761.458767][ T6029] cdc_wdm 5-1:1.0: Unknown control protocol [ 761.716264][ C1] wdm_int_callback: 9734 callbacks suppressed [ 761.716283][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 761.720918][ C1] wdm_int_callback: 9734 callbacks suppressed [ 761.720933][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 761.725206][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 761.727355][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 761.729581][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 761.731771][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 761.734027][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 761.736269][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 761.738704][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 761.741128][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 761.743535][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 761.745771][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 761.748186][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 761.750319][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 761.752510][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 761.754754][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 761.757142][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 761.759526][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 761.761965][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 761.764128][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 761.769520][T15483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 761.774385][ T6029] usb 5-1: USB disconnect, device number 30 [ 761.774476][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 763.570132][T14934] tipc: Resetting bearer [ 763.589181][T14934] tipc: Disabling bearer [ 763.974802][T12591] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 763.992239][ T688] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.031691][ T6029] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 764.072260][ T688] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.119794][T15516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2682'. [ 764.131793][T12591] usb 6-1: Using ep0 maxpacket: 32 [ 764.143270][T12591] usb 6-1: config 0 has no interfaces? [ 764.147981][T12591] usb 6-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=b8.a2 [ 764.154393][T12591] usb 6-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 764.164490][T12591] usb 6-1: Product: syz [ 764.165302][ T688] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.167268][T12591] usb 6-1: Manufacturer: syz [ 764.174371][T12591] usb 6-1: SerialNumber: syz [ 764.182564][ T6029] usb 5-1: Invalid ep0 maxpacket: 32 [ 764.192575][T12591] usb 6-1: config 0 descriptor?? [ 764.262720][ T5932] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 764.270172][ T5932] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 764.276214][ T5932] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 764.286141][ T688] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.294105][ T5932] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 764.303131][ T5932] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 764.338259][ T6029] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 764.448607][ T688] bridge_slave_1: left allmulticast mode [ 764.451009][ T688] bridge_slave_1: left promiscuous mode [ 764.454710][ T688] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.460314][ T688] bridge_slave_0: left allmulticast mode [ 764.463742][ T688] bridge_slave_0: left promiscuous mode [ 764.466406][ T688] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.511650][ T6029] usb 5-1: Invalid ep0 maxpacket: 32 [ 764.513701][ T6029] usb usb5-port1: attempt power cycle [ 764.680292][ T688] dvmrp0 (unregistering): left allmulticast mode [ 764.747858][ T688] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 764.824170][ T688] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 764.827068][ T688] bridge2 (unregistering): left promiscuous mode [ 764.886515][ T688] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 764.891368][ T688] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 764.895824][ T688] bond0 (unregistering): Released all slaves [ 764.902128][ T688] bond1 (unregistering): Released all slaves [ 764.917291][ T688] bond2 (unregistering): Released all slaves [ 764.941711][ T6029] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 764.972139][ T6029] usb 5-1: Invalid ep0 maxpacket: 32 [ 765.001465][ T688] tipc: Disabling bearer [ 765.011778][ T688] tipc: Left network mode [ 765.086980][T15524] chnl_net:caif_netlink_parms(): no params data found [ 765.111724][ T6029] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 765.142514][ T6029] usb 5-1: Invalid ep0 maxpacket: 32 [ 765.144878][ T6029] usb usb5-port1: unable to enumerate USB device [ 765.236026][T15524] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.239082][T15524] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.242060][T15524] bridge_slave_0: entered allmulticast mode [ 765.254335][T15524] bridge_slave_0: entered promiscuous mode [ 765.258690][T15524] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.261952][T15524] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.264867][T15524] bridge_slave_1: entered allmulticast mode [ 765.267918][T15524] bridge_slave_1: entered promiscuous mode [ 765.294574][T15524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.305162][T15524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 765.363505][T15524] team0: Port device team_slave_0 added [ 765.368631][T15524] team0: Port device team_slave_1 added [ 765.392000][T15524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 765.394923][T15524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.404250][T15524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 765.409288][T15524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 765.411963][T15524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.420634][T15524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 765.456110][T15524] hsr_slave_0: entered promiscuous mode [ 765.458528][T15524] hsr_slave_1: entered promiscuous mode [ 765.460667][T15524] debugfs: 'hsr0' already exists in 'hsr' [ 765.463971][T15524] Cannot create hsr debugfs directory [ 765.628171][T15524] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 765.635411][T15524] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 765.642792][T15524] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 765.648649][T15524] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 765.672446][T15524] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.675033][T15524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 765.677969][T15524] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.680687][T15524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.730093][T15524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.741368][ T86] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.746540][ T86] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.758955][T15524] 8021q: adding VLAN 0 to HW filter on device team0 [ 765.781147][ T108] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.783959][ T108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.799554][ T86] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.802950][ T86] bridge0: port 2(bridge_slave_1) entered forwarding state [ 765.987510][T15524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 766.189780][T15587] FAULT_INJECTION: forcing a failure. [ 766.189780][T15587] name failslab, interval 1, probability 0, space 0, times 0 [ 766.201831][T15587] CPU: 2 UID: 0 PID: 15587 Comm: syz.2.2687 Tainted: G L syzkaller #0 PREEMPT(full) [ 766.201852][T15587] Tainted: [L]=SOFTLOCKUP [ 766.201856][T15587] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 766.201864][T15587] Call Trace: [ 766.201868][T15587] [ 766.201873][T15587] dump_stack_lvl+0x100/0x190 [ 766.201896][T15587] should_fail_ex.cold+0x5/0xa [ 766.201910][T15587] should_failslab+0xc2/0x120 [ 766.201924][T15587] __kmalloc_cache_noprof+0x7a/0x6f0 [ 766.201938][T15587] ? sctp_auth_shkey_create+0x9e/0x210 [ 766.201951][T15587] ? __genradix_ptr_alloc+0x347/0x610 [ 766.201965][T15587] sctp_auth_shkey_create+0x9e/0x210 [ 766.201979][T15587] sctp_auth_asoc_copy_shkeys+0x1f2/0x360 [ 766.201995][T15587] sctp_association_new+0x19ab/0x2990 [ 766.202015][T15587] sctp_connect_new_asoc+0x1a8/0x770 [ 766.202032][T15587] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 766.202050][T15587] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 766.202070][T15587] sctp_sendmsg+0x171a/0x22b0 [ 766.202089][T15587] ? __pfx_sctp_sendmsg+0x10/0x10 [ 766.202110][T15587] ? __lock_acquire+0x4a5/0x2630 [ 766.202127][T15587] ? aa_sk_perm+0x309/0xaa0 [ 766.202146][T15587] ? __pfx_aa_sk_perm+0x10/0x10 [ 766.202167][T15587] ? __pfx_sctp_sendmsg+0x10/0x10 [ 766.202183][T15587] inet_sendmsg+0x11c/0x140 [ 766.202199][T15587] ____sys_sendmsg+0x9ad/0xc30 [ 766.202216][T15587] ? __pfx_____sys_sendmsg+0x10/0x10 [ 766.202231][T15587] ? _parse_integer_limit+0x17f/0x1d0 [ 766.202246][T15587] ? _kstrtoull+0x13c/0x1f0 [ 766.202259][T15587] ? __pfx__kstrtoull+0x10/0x10 [ 766.202273][T15587] ___sys_sendmsg+0x190/0x1e0 [ 766.202291][T15587] ? __pfx____sys_sendmsg+0x10/0x10 [ 766.202307][T15587] ? __lock_acquire+0x4a5/0x2630 [ 766.202326][T15587] ? find_held_lock+0x2b/0x80 [ 766.202345][T15587] __sys_sendmmsg+0x2ff/0x430 [ 766.202359][T15587] ? __pfx___sys_sendmmsg+0x10/0x10 [ 766.202377][T15587] ? __fget_files+0x215/0x3d0 [ 766.202400][T15587] ? fput+0x79/0x100 [ 766.202412][T15587] ? ksys_write+0x1ac/0x250 [ 766.202428][T15587] ? __pfx_ksys_write+0x10/0x10 [ 766.202446][T15587] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 766.202461][T15587] ? lockdep_hardirqs_on+0x78/0x100 [ 766.202474][T15587] __do_fast_syscall_32+0xe3/0x8c0 [ 766.202489][T15587] do_fast_syscall_32+0x32/0x70 [ 766.202503][T15587] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 766.202517][T15587] RIP: 0023:0xf70bef6c [ 766.202526][T15587] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 766.202537][T15587] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 766.202547][T15587] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000e80 [ 766.202555][T15587] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 766.202561][T15587] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 766.202567][T15587] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 766.202573][T15587] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 766.202587][T15587] [ 766.210080][T15524] veth0_vlan: entered promiscuous mode [ 766.291302][T15590] 9p: Bad value for 'rfdno' [ 766.301148][T15524] veth1_vlan: entered promiscuous mode [ 766.351166][T15524] veth0_macvtap: entered promiscuous mode [ 766.372965][ T5932] Bluetooth: hci3: command tx timeout [ 766.394696][T15524] veth1_macvtap: entered promiscuous mode [ 766.413810][T15524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 766.423402][T15524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 766.447379][T15593] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.450757][T15593] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.467051][T15593] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.470093][T15593] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.595579][T15593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.611978][T15593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.700556][ T843] usb 6-1: USB disconnect, device number 31 [ 766.742141][ T233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.746076][ T233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.860117][T15597] 9pnet: p9_errstr2errno: server reported unknown error [ 766.878342][T15599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2691'. [ 767.545522][T15627] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 767.548536][T15627] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 767.553250][T15627] vhci_hcd vhci_hcd.0: Device attached [ 767.565724][T15627] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 767.579461][T15628] vhci_hcd: connection closed [ 767.580197][T15593] vhci_hcd vhci_hcd.5: stop threads [ 767.585386][T15593] vhci_hcd vhci_hcd.5: release socket [ 767.587569][T15593] vhci_hcd vhci_hcd.5: disconnect device [ 767.991951][T15634] 9pnet: p9_errstr2errno: server reported unknown error [ 768.059026][T15637] overlayfs: missing 'lowerdir' [ 768.452092][ T5932] Bluetooth: hci3: command tx timeout [ 769.246262][T15662] FAULT_INJECTION: forcing a failure. [ 769.246262][T15662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 769.250693][T15662] CPU: 2 UID: 0 PID: 15662 Comm: syz.5.2707 Tainted: G L syzkaller #0 PREEMPT(full) [ 769.250712][T15662] Tainted: [L]=SOFTLOCKUP [ 769.250716][T15662] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 769.250723][T15662] Call Trace: [ 769.250728][T15662] [ 769.250733][T15662] dump_stack_lvl+0x100/0x190 [ 769.250754][T15662] should_fail_ex.cold+0x5/0xa [ 769.250768][T15662] _copy_from_iter+0x1f4/0x1690 [ 769.250789][T15662] ? __pfx__copy_from_iter+0x10/0x10 [ 769.250807][T15662] ? rcu_is_watching+0x12/0xc0 [ 769.250824][T15662] ? trace_kmem_cache_alloc+0xf3/0x120 [ 769.250836][T15662] ? __kasan_slab_alloc+0x89/0x90 [ 769.250856][T15662] copy_page_from_iter+0xde/0x180 [ 769.250875][T15662] skb_copy_datagram_from_iter+0x399/0x720 [ 769.250898][T15662] skb_copy_datagram_from_iter_full+0xf6/0x190 [ 769.250916][T15662] ? __pfx_skb_copy_datagram_from_iter_full+0x10/0x10 [ 769.250940][T15662] virtio_transport_alloc_skb+0x7b3/0x1160 [ 769.250961][T15662] ? __pfx_virtio_transport_alloc_skb+0x10/0x10 [ 769.250982][T15662] virtio_transport_send_pkt_info+0x827/0x10a0 [ 769.250999][T15662] ? __lock_acquire+0x4a5/0x2630 [ 769.251022][T15662] virtio_transport_stream_enqueue+0xd7/0x130 [ 769.251041][T15662] ? __pfx_virtio_transport_stream_enqueue+0x10/0x10 [ 769.251062][T15662] ? mark_held_locks+0x40/0x70 [ 769.251074][T15662] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 769.251089][T15662] vsock_connectible_sendmsg+0xebf/0x12b0 [ 769.251110][T15662] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 769.251128][T15662] ? __pfx_aa_sk_perm+0x10/0x10 [ 769.251147][T15662] ? __pfx_woken_wake_function+0x10/0x10 [ 769.251167][T15662] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 769.251185][T15662] sock_write_iter+0x566/0x610 [ 769.251202][T15662] ? __pfx_sock_write_iter+0x10/0x10 [ 769.251228][T15662] do_iter_readv_writev+0x6ee/0x920 [ 769.251246][T15662] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 769.251265][T15662] ? bpf_lsm_file_permission+0x9/0x10 [ 769.251283][T15662] ? security_file_permission+0x76/0x210 [ 769.251295][T15662] ? rw_verify_area+0xce/0x6d0 [ 769.251312][T15662] vfs_writev+0x360/0xe10 [ 769.251333][T15662] ? __pfx_vfs_writev+0x10/0x10 [ 769.251359][T15662] ? __fget_files+0x21f/0x3d0 [ 769.251380][T15662] ? do_writev+0x28a/0x340 [ 769.251396][T15662] do_writev+0x28a/0x340 [ 769.251413][T15662] ? __pfx_do_writev+0x10/0x10 [ 769.251429][T15662] ? __pfx_ksys_write+0x10/0x10 [ 769.251450][T15662] __do_fast_syscall_32+0xe3/0x8c0 [ 769.251466][T15662] do_fast_syscall_32+0x32/0x70 [ 769.251481][T15662] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 769.251496][T15662] RIP: 0023:0xf703ef6c [ 769.251507][T15662] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 769.251518][T15662] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000092 [ 769.251530][T15662] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0 [ 769.251537][T15662] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 769.251556][T15662] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 769.251564][T15662] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 769.251571][T15662] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 769.251587][T15662] [ 769.644325][ T688] hsr_slave_0: left promiscuous mode [ 769.647854][ T688] hsr_slave_1: left promiscuous mode [ 769.650202][ T688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 769.671097][ T688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 769.681720][ T688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 769.685414][ T688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 769.701445][ T688] veth1_macvtap: left promiscuous mode [ 769.704008][ T688] veth0_macvtap: left promiscuous mode [ 769.706336][ T688] veth1_vlan: left promiscuous mode [ 769.708656][ T688] veth0_vlan: left promiscuous mode [ 770.014831][T15670] overlayfs: missing 'lowerdir' [ 770.057101][ T688] team0 (unregistering): Port device team_slave_1 removed [ 770.088774][ T688] team0 (unregistering): Port device team_slave_0 removed [ 770.367968][T15675] FAULT_INJECTION: forcing a failure. [ 770.367968][T15675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 770.372650][T15675] CPU: 3 UID: 0 PID: 15675 Comm: syz.2.2711 Tainted: G L syzkaller #0 PREEMPT(full) [ 770.372669][T15675] Tainted: [L]=SOFTLOCKUP [ 770.372674][T15675] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 770.372681][T15675] Call Trace: [ 770.372685][T15675] [ 770.372691][T15675] dump_stack_lvl+0x100/0x190 [ 770.372711][T15675] should_fail_ex.cold+0x5/0xa [ 770.372725][T15675] _copy_from_iter+0x1f4/0x1690 [ 770.372746][T15675] ? __asan_memset+0x23/0x50 [ 770.372762][T15675] ? __pfx__copy_from_iter+0x10/0x10 [ 770.372780][T15675] ? __pfx___alloc_skb+0x10/0x10 [ 770.372799][T15675] netlink_sendmsg+0x808/0xda0 [ 770.372817][T15675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 770.372834][T15675] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 770.372852][T15675] ____sys_sendmsg+0xa54/0xc30 [ 770.372870][T15675] ? __pfx_____sys_sendmsg+0x10/0x10 [ 770.372892][T15675] ___sys_sendmsg+0x190/0x1e0 [ 770.372910][T15675] ? __pfx____sys_sendmsg+0x10/0x10 [ 770.372944][T15675] __sys_sendmsg+0x170/0x220 [ 770.372958][T15675] ? __pfx___sys_sendmsg+0x10/0x10 [ 770.372976][T15675] ? __pfx_ksys_write+0x10/0x10 [ 770.372997][T15675] __do_fast_syscall_32+0xe3/0x8c0 [ 770.373013][T15675] do_fast_syscall_32+0x32/0x70 [ 770.373028][T15675] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 770.373043][T15675] RIP: 0023:0xf70bef6c [ 770.373053][T15675] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 770.373064][T15675] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 770.373076][T15675] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000c40 [ 770.373083][T15675] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 770.373090][T15675] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 770.373096][T15675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 770.373103][T15675] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 770.373117][T15675] [ 770.541731][ T5932] Bluetooth: hci3: command tx timeout [ 771.089406][T15690] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 771.091576][T15690] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 771.101784][T15690] vhci_hcd vhci_hcd.0: Device attached [ 771.244760][T15700] overlayfs: missing 'lowerdir' [ 771.372079][ T6029] usb 42-1: SetAddress Request (18) to port 0 [ 771.375668][ T6029] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd [ 771.555657][T15691] vhci_hcd: connection reset by peer [ 771.557985][T10365] vhci_hcd vhci_hcd.2: stop threads [ 771.559924][T10365] vhci_hcd vhci_hcd.2: release socket [ 771.563161][T10365] vhci_hcd vhci_hcd.2: disconnect device [ 771.831755][ T6037] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 771.991733][ T6037] usb 10-1: Using ep0 maxpacket: 8 [ 771.995633][ T6037] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 771.999258][ T6037] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 772.005102][ T6037] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 772.009238][ T6037] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 772.013742][ T6037] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 772.019439][ T6037] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 772.024370][ T6037] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.229575][T15724] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 772.282261][ T6037] usb 10-1: usb_control_msg returned -32 [ 772.285382][ T6037] usbtmc 10-1:16.0: can't read capabilities [ 772.611834][ T5932] Bluetooth: hci3: command tx timeout [ 773.667188][T15741] overlayfs: missing 'lowerdir' [ 774.397989][ T6015] usb 10-1: USB disconnect, device number 2 [ 774.473374][T15753] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2732'. [ 774.480320][T15753] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2732'. [ 774.628121][ T40] audit: type=1326 audit(1772526295.932:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15755 comm="syz.5.2733" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 774.630674][T15759] Bluetooth: MGMT ver 1.23 [ 774.639219][ T40] audit: type=1326 audit(1772526295.932:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15755 comm="syz.5.2733" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 774.647638][ T40] audit: type=1326 audit(1772526295.932:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15755 comm="syz.5.2733" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 774.655052][ T40] audit: type=1326 audit(1772526295.932:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15755 comm="syz.5.2733" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 774.662372][ T40] audit: type=1326 audit(1772526295.932:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15755 comm="syz.5.2733" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 774.669456][ T40] audit: type=1326 audit(1772526295.932:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15755 comm="syz.5.2733" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 774.677716][ T40] audit: type=1326 audit(1772526295.932:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15755 comm="syz.5.2733" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 774.685179][ T40] audit: type=1326 audit(1772526295.932:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15755 comm="syz.5.2733" exe="/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 774.693216][ T40] audit: type=1326 audit(1772526295.932:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15755 comm="syz.5.2733" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 774.700097][ T40] audit: type=1326 audit(1772526295.932:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15755 comm="syz.5.2733" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 774.714588][T15762] FAULT_INJECTION: forcing a failure. [ 774.714588][T15762] name failslab, interval 1, probability 0, space 0, times 0 [ 774.719103][T15762] CPU: 2 UID: 0 PID: 15762 Comm: syz.0.2735 Tainted: G L syzkaller #0 PREEMPT(full) [ 774.719123][T15762] Tainted: [L]=SOFTLOCKUP [ 774.719127][T15762] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 774.719135][T15762] Call Trace: [ 774.719141][T15762] [ 774.719147][T15762] dump_stack_lvl+0x100/0x190 [ 774.719169][T15762] should_fail_ex.cold+0x5/0xa [ 774.719183][T15762] should_failslab+0xc2/0x120 [ 774.719196][T15762] __kmalloc_cache_noprof+0x7a/0x6f0 [ 774.719211][T15762] ? binder_alloc_new_buf+0x1bb/0x3100 [ 774.719231][T15762] binder_alloc_new_buf+0x1bb/0x3100 [ 774.719248][T15762] ? binder_debug+0xe0/0x190 [ 774.719262][T15762] ? __pfx_binder_debug+0x10/0x10 [ 774.719280][T15762] ? __pfx_binder_alloc_new_buf+0x10/0x10 [ 774.719300][T15762] binder_transaction+0x1f70/0x9ee0 [ 774.719328][T15762] ? __lock_acquire+0x4a5/0x2630 [ 774.719344][T15762] ? __pfx_binder_transaction+0x10/0x10 [ 774.719360][T15762] ? __lock_acquire+0x4a5/0x2630 [ 774.719376][T15762] ? __lock_acquire+0x4a5/0x2630 [ 774.719393][T15762] ? __lock_acquire+0x4a5/0x2630 [ 774.719416][T15762] ? __lock_acquire+0x4a5/0x2630 [ 774.719431][T15762] ? __lock_acquire+0x4a5/0x2630 [ 774.719445][T15762] ? kernel_text_address+0x8d/0x100 [ 774.719466][T15762] ? __pfx_widen_string+0x10/0x10 [ 774.719488][T15762] ? find_held_lock+0x2b/0x80 [ 774.719498][T15762] ? __might_fault+0xc5/0x140 [ 774.719513][T15762] ? __might_fault+0xc5/0x140 [ 774.719534][T15762] binder_thread_write+0x131f/0x4dd0 [ 774.719551][T15762] ? kasan_save_free_info+0x3b/0x70 [ 774.719569][T15762] ? __lock_acquire+0x4a5/0x2630 [ 774.719583][T15762] ? __pfx_binder_thread_write+0x10/0x10 [ 774.719602][T15762] ? binder_debug+0xe0/0x190 [ 774.719615][T15762] ? __pfx_binder_debug+0x10/0x10 [ 774.719628][T15762] ? binder_debug+0xe0/0x190 [ 774.719641][T15762] ? __pfx_binder_debug+0x10/0x10 [ 774.719662][T15762] ? __pfx_binder_ioctl+0x10/0x10 [ 774.719677][T15762] binder_ioctl+0x2941/0x7610 [ 774.719694][T15762] ? tomoyo_path_number_perm+0x28f/0x580 [ 774.719712][T15762] ? tomoyo_path_number_perm+0x28f/0x580 [ 774.719732][T15762] ? tomoyo_path_number_perm+0x188/0x580 [ 774.719750][T15762] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 774.719769][T15762] ? __pfx_binder_ioctl+0x10/0x10 [ 774.719787][T15762] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 774.719808][T15762] ? do_vfs_ioctl+0x226/0x13e0 [ 774.719824][T15762] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 774.719843][T15762] ? find_held_lock+0x2b/0x80 [ 774.719854][T15762] ? hook_file_ioctl_common+0x146/0x410 [ 774.719875][T15762] ? __fget_files+0x21f/0x3d0 [ 774.719894][T15762] ? __pfx_binder_ioctl+0x10/0x10 [ 774.719909][T15762] compat_ptr_ioctl+0x6e/0xa0 [ 774.719924][T15762] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 774.719939][T15762] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 774.719958][T15762] __do_fast_syscall_32+0xe3/0x8c0 [ 774.719976][T15762] do_fast_syscall_32+0x32/0x70 [ 774.719991][T15762] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 774.720006][T15762] RIP: 0023:0xf706ef6c [ 774.720016][T15762] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 774.720028][T15762] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 774.720039][T15762] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c0306201 [ 774.720046][T15762] RDX: 0000000080004a40 RSI: 0000000000000000 RDI: 0000000000000000 [ 774.720053][T15762] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 774.720060][T15762] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 774.720066][T15762] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 774.720080][T15762] [ 775.239609][T15771] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 775.243042][T15771] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 775.511735][T15775] binder: 15774:15775 unknown command 0 [ 775.514210][T15775] binder: 15774:15775 ioctl c0306201 80004a40 returned -22 [ 776.461923][ T6029] usb 42-1: device descriptor read/8, error -110 [ 776.852457][ T6029] usb usb42-port1: attempt power cycle [ 777.271741][T15823] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 777.274991][T15823] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 777.414122][ T6029] usb usb42-port1: unable to enumerate USB device [ 777.631745][ T10] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 777.791685][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 777.795340][ T10] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 777.798465][ T10] usb 7-1: config 179 has no interface number 0 [ 777.800704][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 777.804838][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 777.808768][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 777.812576][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 777.816546][ T10] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 777.821854][ T10] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 777.825149][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.833984][T15832] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 778.051254][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input89 [ 778.257386][ T10] usb 7-1: USB disconnect, device number 35 [ 778.260107][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 778.260144][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 778.576695][T15855] binder: BC_ATTEMPT_ACQUIRE not supported [ 778.578842][T15856] rose0: entered promiscuous mode [ 778.578852][T15855] binder: 15853:15855 ioctl c0306201 80000540 returned -22 [ 778.636222][T15858] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 778.640231][T15858] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 779.032871][T15869] ÿÿÿÿÿÿ: renamed from vlan0 (while UP) [ 779.061851][ T6029] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 779.221710][ T6029] usb 6-1: Using ep0 maxpacket: 16 [ 779.233614][ T6029] usb 6-1: config 0 has no interfaces? [ 779.237885][ T6029] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 779.243172][ T6029] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 779.246723][ T6029] usb 6-1: Manufacturer: syz [ 779.266354][ T6029] usb 6-1: config 0 descriptor?? [ 779.275298][T15870] 9p: Bad value for 'rfdno' [ 781.056711][T15896] overlayfs: missing 'lowerdir' [ 781.678511][ T50] usb 6-1: USB disconnect, device number 32 [ 782.298864][T15936] overlayfs: missing 'lowerdir' [ 784.340773][T15965] overlayfs: missing 'lowerdir' [ 784.815750][T15969] FAULT_INJECTION: forcing a failure. [ 784.815750][T15969] name failslab, interval 1, probability 0, space 0, times 0 [ 784.825299][T15969] CPU: 3 UID: 0 PID: 15969 Comm: syz.2.2786 Tainted: G L syzkaller #0 PREEMPT(full) [ 784.825321][T15969] Tainted: [L]=SOFTLOCKUP [ 784.825326][T15969] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 784.825334][T15969] Call Trace: [ 784.825339][T15969] [ 784.825345][T15969] dump_stack_lvl+0x100/0x190 [ 784.825369][T15969] should_fail_ex.cold+0x5/0xa [ 784.825385][T15969] ? tomoyo_encode2+0xfb/0x3c0 [ 784.825399][T15969] should_failslab+0xc2/0x120 [ 784.825412][T15969] __kmalloc_noprof+0xe0/0x850 [ 784.825435][T15969] tomoyo_encode2+0xfb/0x3c0 [ 784.825451][T15969] tomoyo_encode+0x29/0x50 [ 784.825465][T15969] tomoyo_realpath_from_path+0x18c/0x690 [ 784.825515][T15969] tomoyo_path_number_perm+0x23c/0x580 [ 784.825535][T15969] ? tomoyo_path_number_perm+0x22e/0x580 [ 784.825556][T15969] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 784.825593][T15969] ? find_held_lock+0x2b/0x80 [ 784.825606][T15969] ? hook_file_ioctl_common+0x146/0x410 [ 784.825626][T15969] ? __fget_files+0x215/0x3d0 [ 784.825649][T15969] ? __fget_files+0x21f/0x3d0 [ 784.825672][T15969] security_file_ioctl_compat+0xd3/0x230 [ 784.825694][T15969] __ia32_compat_sys_ioctl+0xc2/0x360 [ 784.825716][T15969] __do_fast_syscall_32+0xe3/0x8c0 [ 784.825734][T15969] do_fast_syscall_32+0x32/0x70 [ 784.825751][T15969] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 784.825768][T15969] RIP: 0023:0xf70bef6c [ 784.825779][T15969] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 784.825792][T15969] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 784.825805][T15969] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008946 [ 784.825814][T15969] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 784.825821][T15969] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 784.825829][T15969] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 784.825836][T15969] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 784.825853][T15969] [ 784.825865][T15969] ERROR: Out of memory at tomoyo_realpath_from_path. [ 785.383531][T15984] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2791'. [ 785.387827][T15984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 785.393324][T15984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.397553][T15984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 785.401039][T15984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 786.231814][T15999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2796'. [ 786.238626][T15999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2796'. [ 788.945727][T16033] overlayfs: missing 'workdir' [ 789.054425][T16035] sctp: [Deprecated]: syz.0.2807 (pid 16035) Use of struct sctp_assoc_value in delayed_ack socket option. [ 789.054425][T16035] Use struct sctp_sack_info instead [ 789.072388][T16035] sctp: [Deprecated]: syz.0.2807 (pid 16035) Use of struct sctp_assoc_value in delayed_ack socket option. [ 789.072388][T16035] Use struct sctp_sack_info instead [ 790.026860][T16057] FAULT_INJECTION: forcing a failure. [ 790.026860][T16057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 790.031297][T16057] CPU: 1 UID: 0 PID: 16057 Comm: syz.1.2809 Tainted: G L syzkaller #0 PREEMPT(full) [ 790.031331][T16057] Tainted: [L]=SOFTLOCKUP [ 790.031336][T16057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 790.031344][T16057] Call Trace: [ 790.031350][T16057] [ 790.031356][T16057] dump_stack_lvl+0x100/0x190 [ 790.031378][T16057] should_fail_ex.cold+0x5/0xa [ 790.031393][T16057] strncpy_from_user+0x3b/0x2d0 [ 790.031413][T16057] do_getname+0x78/0x390 [ 790.031430][T16057] user_path_at+0x26/0x60 [ 790.031449][T16057] __ia32_sys_mount+0x1fb/0x310 [ 790.031463][T16057] ? __pfx___ia32_sys_mount+0x10/0x10 [ 790.031482][T16057] __do_fast_syscall_32+0xe3/0x8c0 [ 790.031499][T16057] do_fast_syscall_32+0x32/0x70 [ 790.031514][T16057] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 790.031530][T16057] RIP: 0023:0xf7fe6f6c [ 790.031540][T16057] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 790.031565][T16057] RSP: 002b:00000000f546450c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 790.031578][T16057] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000240 [ 790.031585][T16057] RDX: 000000008015bffc RSI: 0000000000000000 RDI: 0000000080000000 [ 790.031592][T16057] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 790.031599][T16057] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 790.031607][T16057] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 790.031622][T16057] [ 790.534663][ T34] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 790.693386][ T34] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 790.697402][ T34] usb 10-1: config 0 has no interfaces? [ 790.700121][ T34] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 790.703644][ T34] usb 10-1: config 0 has no interfaces? [ 790.706409][ T34] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 790.709968][ T34] usb 10-1: config 0 has no interfaces? [ 790.711859][ T34] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 790.715032][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 790.718067][ T34] usb 10-1: Product: syz [ 790.719712][ T34] usb 10-1: Manufacturer: syz [ 790.724661][ T34] usb 10-1: SerialNumber: syz [ 790.892675][ T34] usb 10-1: config 0 descriptor?? [ 791.026027][T16065] syz.2.2816: vmalloc error: size 3712782336, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 791.037102][T16065] CPU: 1 UID: 0 PID: 16065 Comm: syz.2.2816 Tainted: G L syzkaller #0 PREEMPT(full) [ 791.037150][T16065] Tainted: [L]=SOFTLOCKUP [ 791.037157][T16065] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 791.037169][T16065] Call Trace: [ 791.037178][T16065] [ 791.037185][T16065] dump_stack_lvl+0x100/0x190 [ 791.037219][T16065] warn_alloc.cold+0x95/0x1c1 [ 791.037252][T16065] ? __pfx_warn_alloc+0x10/0x10 [ 791.037281][T16065] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 791.037304][T16065] ? lockdep_hardirqs_on+0x78/0x100 [ 791.037327][T16065] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 791.037354][T16065] ? kasan_save_stack+0x3f/0x50 [ 791.037380][T16065] ? kasan_save_stack+0x30/0x50 [ 791.037407][T16065] ? kasan_save_track+0x14/0x30 [ 791.037464][T16065] ? vb2_vmalloc_alloc+0x135/0x410 [ 791.037496][T16065] __vmalloc_node_range_noprof+0x1252/0x1530 [ 791.037520][T16065] ? __do_fast_syscall_32+0xe3/0x8c0 [ 791.037543][T16065] ? do_fast_syscall_32+0x32/0x70 [ 791.037566][T16065] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 791.037596][T16065] ? vb2_vmalloc_alloc+0x135/0x410 [ 791.037633][T16065] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 791.037668][T16065] ? vb2_vmalloc_alloc+0x135/0x410 [ 791.037698][T16065] vmalloc_user_noprof+0x9e/0xe0 [ 791.037721][T16065] ? vb2_vmalloc_alloc+0x135/0x410 [ 791.037752][T16065] vb2_vmalloc_alloc+0x135/0x410 [ 791.037783][T16065] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 791.037816][T16065] __vb2_queue_alloc+0x8d5/0x1160 [ 791.037925][T16065] vb2_core_create_bufs+0x5fa/0xa30 [ 791.037972][T16065] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 791.038014][T16065] ? __mutex_lock+0x26a/0x1b90 [ 791.038046][T16065] vb2_create_bufs+0x40c/0x830 [ 791.038080][T16065] ? __pfx_vb2_create_bufs+0x10/0x10 [ 791.038108][T16065] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 791.038143][T16065] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 791.038181][T16065] v4l_create_bufs+0x17d/0x270 [ 791.038206][T16065] __video_do_ioctl+0xaf8/0xdc0 [ 791.038244][T16065] ? __pfx___video_do_ioctl+0x10/0x10 [ 791.038269][T16065] ? trace_kmalloc+0x101/0x130 [ 791.038294][T16065] ? __kmalloc_noprof+0x320/0x850 [ 791.038325][T16065] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 791.038360][T16065] video_usercopy+0x3d3/0x14d0 [ 791.038384][T16065] ? __pfx___video_do_ioctl+0x10/0x10 [ 791.038419][T16065] ? __pfx_video_usercopy+0x10/0x10 [ 791.038457][T16065] ? hook_file_ioctl_common+0x146/0x410 [ 791.038499][T16065] v4l2_ioctl+0x1bd/0x250 [ 791.038530][T16065] v4l2_compat_ioctl32+0x20f/0x2d0 [ 791.038553][T16065] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 791.038575][T16065] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 791.038609][T16065] __do_fast_syscall_32+0xe3/0x8c0 [ 791.038638][T16065] do_fast_syscall_32+0x32/0x70 [ 791.038664][T16065] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 791.038689][T16065] RIP: 0023:0xf70bef6c [ 791.038707][T16065] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 791.038727][T16065] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 791.038747][T16065] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000c0f8565c [ 791.038760][T16065] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 791.038772][T16065] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 791.038784][T16065] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 791.038797][T16065] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 791.038822][T16065] [ 791.039739][T16065] Mem-Info: [ 791.078446][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 791.078458][ T40] audit: type=1326 audit(1772526312.382:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16064 comm="syz.2.2816" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 791.079348][T16065] active_anon:3232 inactive_anon:3825 isolated_anon:0 [ 791.079348][T16065] active_file:1416 inactive_file:958 isolated_file:0 [ 791.079348][T16065] unevictable:1750 dirty:24 writeback:0 [ 791.079348][T16065] slab_reclaimable:11109 slab_unreclaimable:88921 [ 791.079348][T16065] mapped:24725 shmem:4640 pagetables:1446 [ 791.079348][T16065] sec_pagetables:344 bounce:0 [ 791.079348][T16065] kernel_misc_reclaimable:0 [ 791.079348][T16065] free:44554 free_pcp:3646 free_cma:0 [ 791.081351][ T40] audit: type=1326 audit(1772526312.382:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16064 comm="syz.2.2816" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 791.084146][T16065] Node 0 active_anon:4kB inactive_anon:4kB active_file:1080kB inactive_file:28kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:132kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7348kB pagetables:1204kB sec_pagetables:1120kB all_unreclaimable? yes Balloon:0kB [ 791.089805][ T40] audit: type=1326 audit(1772526312.382:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16064 comm="syz.2.2816" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 791.091091][T16065] Node 1 active_anon:13124kB inactive_anon:15296kB active_file:4584kB inactive_file:3804kB unevictable:3464kB isolated(anon):0kB isolated(file):0kB mapped:98768kB dirty:92kB writeback:0kB shmem:15024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7420kB pagetables:4580kB sec_pagetables:256kB all_unreclaimable? no Balloon:0kB [ 791.093202][ T40] audit: type=1326 audit(1772526312.382:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16064 comm="syz.2.2816" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 791.106906][ T34] usb 10-1: USB disconnect, device number 3 [ 791.109486][T16065] Node 0 [ 791.109744][ T40] audit: type=1326 audit(1772526312.392:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16064 comm="syz.2.2816" exe="/syz-executor" sig=0 arch=40000003 syscall=444 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 791.109772][ T40] audit: type=1326 audit(1772526312.392:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16064 comm="syz.2.2816" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 791.109793][ T40] audit: type=1326 audit(1772526312.392:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16064 comm="syz.2.2816" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 791.109815][ T40] audit: type=1326 audit(1772526312.392:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16064 comm="syz.2.2816" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 791.109840][ T40] audit: type=1326 audit(1772526312.392:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16064 comm="syz.2.2816" exe="/syz-executor" sig=0 arch=40000003 syscall=446 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 791.109862][ T40] audit: type=1326 audit(1772526312.392:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16064 comm="syz.2.2816" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 791.327943][T16065] DMA free:3424kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:128kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 791.342252][T16065] lowmem_reserve[]: 0 285 285 285 285 [ 791.345129][T16065] Node 0 DMA32 free:38716kB boost:29412kB min:42484kB low:45752kB high:49020kB reserved_highatomic:2048KB free_highatomic:1072KB active_anon:4kB inactive_anon:4kB active_file:952kB inactive_file:28kB unevictable:3536kB writepending:4kB zspages:24kB present:1032196kB managed:292620kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 791.360055][T16065] lowmem_reserve[]: 0 0 0 0 0 [ 791.363170][T16065] Node 1 DMA32 free:129288kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12636kB inactive_anon:3692kB active_file:4688kB inactive_file:3784kB unevictable:3536kB writepending:116kB zspages:7812kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:31064kB local_pcp:1144kB free_cma:0kB [ 791.379458][T16065] lowmem_reserve[]: 0 0 0 0 0 [ 791.382498][T16065] Node 0 DMA: 142*4kB (U) 31*8kB (U) 15*16kB (U) 18*32kB (U) 10*64kB (U) 1*128kB (U) 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 3424kB [ 791.390116][T16065] Node 0 DMA32: 1299*4kB (UME) 400*8kB (UMEH) 155*16kB (UMH) 274*32kB (UMEH) 94*64kB (UMEH) 36*128kB (UMEH) 13*256kB (UM) 6*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 38716kB [ 791.399805][T16065] Node 1 DMA32: 1204*4kB (UE) 3086*8kB (UE) 2581*16kB (UE) 11*32kB (E) 41*64kB (UME) 29*128kB (UME) 50*256kB (UM) 48*512kB (U) 13*1024kB (UM) 0*2048kB 0*4096kB = 128176kB [ 791.408698][T16065] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 791.413046][T16065] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 791.417210][T16065] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 791.420826][T16065] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 791.425567][T16065] 5238 total pagecache pages [ 791.427701][T16065] 1047 pages in swap cache [ 791.429863][T16065] Free swap = 93376kB [ 791.432326][T16065] Total swap = 124996kB [ 791.434295][T16065] 524155 pages RAM [ 791.436234][T16065] 0 pages HighMem/MovableOnly [ 791.438863][T16065] 210107 pages reserved [ 791.442471][T16065] 0 pages cma reserved [ 791.973622][ T5932] Bluetooth: hci3: command tx timeout [ 792.493967][T16083] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 793.034301][T16086] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2821'. [ 793.038171][T16086] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2821'. [ 795.146862][T16116] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2830'. [ 795.150733][T16116] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2830'. [ 795.155951][T16116] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2830'. [ 796.244964][T16133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 796.269633][T16133] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2834'. [ 796.841704][T15513] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 796.896081][T16139] nvme_fabrics: unknown parameter or missing value 'P' in ctrl creation request [ 797.021656][T15513] usb 10-1: Using ep0 maxpacket: 32 [ 797.027173][T15513] usb 10-1: config 9 has an invalid interface number: 61 but max is 0 [ 797.030759][T15513] usb 10-1: config 9 has no interface number 0 [ 797.036794][T15513] usb 10-1: config 9 interface 61 has no altsetting 0 [ 797.043903][T15513] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0000, bcdDevice=ba.e3 [ 797.048288][T15513] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.051122][T16144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.052619][T15513] usb 10-1: Product: syz [ 797.057718][T15513] usb 10-1: Manufacturer: syz [ 797.059835][T15513] usb 10-1: SerialNumber: syz [ 797.188237][T16144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.286364][T16144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.398047][T16144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.502952][T15926] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.516424][T15926] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.531640][T15926] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.534639][T15926] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.606983][T16153] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 798.959008][T16173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2845'. [ 799.080482][T16175] loop3: detected capacity change from 0 to 7 [ 799.087005][T16175] Dev loop3: unable to read RDB block 7 [ 799.088902][T16175] loop3: AHDI p1 [ 799.094307][T16175] loop3: partition table partially beyond EOD, truncated [ 799.405632][ T6029] IPVS: starting estimator thread 0... [ 799.501660][T16183] IPVS: using max 43 ests per chain, 103200 per kthread [ 799.778702][T15513] usb 10-1: USB disconnect, device number 4 [ 800.115942][T16195] misc userio: Invalid payload size [ 800.475710][T16202] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2851'. [ 800.932252][ T6015] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 801.084879][ T6015] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 801.088040][ T6015] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 801.091150][ T6015] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 801.115916][ T6015] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 801.120060][ T6015] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.123597][ T6015] usb 5-1: Product: syz [ 801.125038][ T6015] usb 5-1: Manufacturer: syz [ 801.126620][ T6015] usb 5-1: SerialNumber: syz [ 801.137828][ T6015] hub 5-1:1.0: bad descriptor, ignoring hub [ 801.139920][ T6015] hub 5-1:1.0: probe with driver hub failed with error -5 [ 801.363275][T16222] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2858'. [ 801.366649][ T6015] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 801.443005][ T6015] usb 5-1: USB disconnect, device number 35 [ 801.502000][ T6015] usblp0: removed [ 801.791734][ T6015] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 801.942876][ T6015] usb 5-1: Using ep0 maxpacket: 16 [ 802.315521][T16243] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2865'. [ 802.319601][T16243] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2865'. [ 802.324097][T16243] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2865'. [ 802.487177][ T6015] usb 5-1: unable to get BOS descriptor or descriptor too short [ 802.489829][ T6015] usb 5-1: no configurations [ 802.499125][ T6015] usb 5-1: can't read configurations, error -22 [ 803.121867][ T6015] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 803.285531][ T6015] usb 5-1: Using ep0 maxpacket: 8 [ 803.289627][ T6015] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 803.300055][ T6015] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 803.306699][ T6015] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 803.311108][ T6015] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 803.320575][ T6015] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 803.325850][ T6015] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.795983][T16260] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2870'. [ 805.553159][ T6015] usb 5-1: usb_control_msg returned -71 [ 805.555228][ T6015] usbtmc 5-1:16.0: can't read capabilities [ 805.580396][ T6015] usb 5-1: USB disconnect, device number 37 [ 805.611463][T16266] netlink: 'syz.0.2872': attribute type 21 has an invalid length. [ 805.622745][T16266] netlink: 'syz.0.2872': attribute type 39 has an invalid length. [ 806.553642][T12591] libceph: connect (1)[c::]:6789 error -101 [ 806.555925][T12591] libceph: mon0 (1)[c::]:6789 connect error [ 806.812127][T12591] libceph: connect (1)[c::]:6789 error -101 [ 806.814653][T12591] libceph: mon0 (1)[c::]:6789 connect error [ 807.322304][T12591] libceph: connect (1)[c::]:6789 error -101 [ 807.884255][T12591] libceph: mon0 (1)[c::]:6789 connect error [ 808.142769][T16288] ceph: No mds server is up or the cluster is laggy [ 809.591877][ T6759] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 809.763927][ T6759] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 809.771267][ T6759] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 809.781055][ T6759] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 809.790390][ T6759] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 809.797698][ T6759] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 809.806717][ T6759] usb 7-1: Product: syz [ 809.808709][ T6759] usb 7-1: Manufacturer: syz [ 809.814140][ T6759] usb 7-1: SerialNumber: syz [ 809.831844][ T6759] usb 7-1: config 0 descriptor?? [ 809.892476][T16316] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.897008][T16316] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.903631][T16316] bridge0: entered allmulticast mode [ 810.191802][ T29] usb 7-1: USB disconnect, device number 36 [ 810.426539][T16316] bridge_slave_1: left allmulticast mode [ 810.436051][T16316] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.482666][T16316] bridge_slave_0: left allmulticast mode [ 810.485554][T16316] bridge_slave_0: left promiscuous mode [ 810.493285][T16316] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.751687][T12591] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 810.929150][T16330] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2891'. [ 810.945961][T12591] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 810.950910][T12591] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 810.957177][T12591] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 810.961861][T12591] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 810.966995][T12591] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 810.971288][T12591] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 810.978812][T12591] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 810.983100][T12591] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 810.986890][T12591] usb 6-1: Product: syz [ 810.988723][T12591] usb 6-1: Manufacturer: syz [ 810.990818][T12591] usb 6-1: SerialNumber: syz [ 811.002153][T12591] usb 6-1: config 0 descriptor?? [ 811.078083][T16330] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 811.233032][T12730] usb 6-1: USB disconnect, device number 33 [ 811.731798][ T5932] Bluetooth: hci3: command tx timeout [ 812.009999][T16348] netlink: 'syz.0.2897': attribute type 2 has an invalid length. [ 813.345886][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.348976][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.402750][ T40] kauditd_printk_skb: 126 callbacks suppressed [ 813.402766][ T40] audit: type=1326 audit(1772526334.712:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16359 comm="syz.1.2902" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f6c code=0x7ffc0000 [ 813.432042][ T40] audit: type=1326 audit(1772526334.712:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16359 comm="syz.1.2902" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f6c code=0x7ffc0000 [ 813.442347][ T40] audit: type=1326 audit(1772526334.722:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16359 comm="syz.1.2902" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe6f6c code=0x7ffc0000 [ 813.452891][ T40] audit: type=1326 audit(1772526334.722:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16359 comm="syz.1.2902" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f6c code=0x7ffc0000 [ 813.468413][ T40] audit: type=1326 audit(1772526334.722:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16359 comm="syz.1.2902" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f6c code=0x7ffc0000 [ 813.478684][ T40] audit: type=1326 audit(1772526334.722:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16359 comm="syz.1.2902" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fe6f6c code=0x7ffc0000 [ 813.491235][ T40] audit: type=1326 audit(1772526334.722:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16359 comm="syz.1.2902" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f6c code=0x7ffc0000 [ 813.526532][ T40] audit: type=1326 audit(1772526334.722:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16359 comm="syz.1.2902" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f6c code=0x7ffc0000 [ 813.559472][ T40] audit: type=1326 audit(1772526334.722:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16359 comm="syz.1.2902" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7fe6f6c code=0x7ffc0000 [ 813.572984][ T40] audit: type=1326 audit(1772526334.772:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16359 comm="syz.1.2902" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f6c code=0x7ffc0000 [ 813.791194][T16360] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2902'. [ 814.274652][T16385] netlink: 'syz.5.2908': attribute type 2 has an invalid length. [ 817.366375][T16429] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2921'. [ 818.062189][T16431] netlink: 'syz.0.2922': attribute type 2 has an invalid length. [ 819.041831][ T2286] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 819.203502][ T2286] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 819.218649][ T2286] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 819.222887][ T2286] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 819.226760][ T2286] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.244047][T16437] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 819.264706][ T2286] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 819.635084][T12591] usb 10-1: USB disconnect, device number 5 [ 820.531714][ T5932] Bluetooth: hci1: command 0x0406 tx timeout [ 821.394971][T16467] netlink: 'syz.0.2932': attribute type 2 has an invalid length. [ 821.981698][ T10] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 822.131664][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 822.136732][ T10] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 822.140565][ T10] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 822.145710][ T10] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 822.150330][ T10] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 822.155116][ T10] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 822.161055][ T10] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 822.165740][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.378089][ T10] usb 10-1: GET_CAPABILITIES returned 0 [ 822.380121][ T10] usbtmc 10-1:16.0: can't read capabilities [ 822.581071][T12591] usb 10-1: USB disconnect, device number 6 [ 822.932161][ T6015] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 822.983376][T16498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2942'. [ 823.109831][ T6015] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 823.121170][ T6015] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 823.126027][ T6015] usb 5-1: Product: syz [ 823.128013][ T6015] usb 5-1: Manufacturer: syz [ 823.130447][ T6015] usb 5-1: SerialNumber: syz [ 823.137623][ T6015] usb 5-1: config 0 descriptor?? [ 823.144377][ T6015] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 823.148041][ T6015] dvb-usb: bulk message failed: -22 (2/0) [ 823.158428][ T6015] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 823.164352][ T6015] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 823.168404][ T6015] usb 5-1: media controller created [ 823.180988][ T6015] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 823.444159][ T6015] cxusb: set interface failed [ 823.450712][ T6015] dvb-usb: bulk message failed: -22 (1/0) [ 823.599908][ T6015] DVB: Unable to find symbol mt352_attach() [ 823.602842][ T6015] dvb-usb: bulk message failed: -22 (5/0) [ 823.605641][ T6015] zl10353_read_register: readreg error (reg=127, ret==-121) [ 823.622455][ T6015] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 823.721786][ T6015] rc_core: IR keymap rc-dvico-mce not found [ 823.725435][ T6015] Registered IR keymap rc-empty [ 823.729036][ T6015] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 823.735560][ T6015] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input90 [ 823.754196][ T6015] dvb-usb: schedule remote query interval to 100 msecs. [ 823.756748][ T6015] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 823.779346][ T6015] usb 5-1: USB disconnect, device number 38 [ 823.854620][T16514] netlink: 'syz.2.2945': attribute type 2 has an invalid length. [ 823.860414][ T6015] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 824.513338][T16521] serio: Serial port ptm0 [ 824.613991][ T40] kauditd_printk_skb: 183 callbacks suppressed [ 824.614011][ T40] audit: type=1326 audit(1772526345.922:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16527 comm="syz.1.2950" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe6f6c code=0x0 [ 824.701713][ T6015] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 824.857594][ T6015] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 824.860612][ T6015] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 824.863693][ T6015] usb 10-1: Product: syz [ 824.865280][ T6015] usb 10-1: Manufacturer: syz [ 824.867223][ T6015] usb 10-1: SerialNumber: syz [ 824.871179][ T6015] usb 10-1: config 0 descriptor?? [ 824.875864][ T6015] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 824.879555][ T6015] dvb-usb: bulk message failed: -22 (2/0) [ 824.883142][ T6015] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 824.887316][ T6015] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 824.891203][ T6015] usb 10-1: media controller created [ 824.903044][ T6015] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 824.933556][T16533] loop2: detected capacity change from 0 to 7 [ 824.937485][T16533] Dev loop2: unable to read RDB block 7 [ 824.940111][T16533] loop2: AHDI p2 p3 [ 824.941894][T16533] loop2: partition table partially beyond EOD, truncated [ 824.945648][T16533] loop2: p2 start 1702059890 is beyond EOD, truncated [ 825.109530][T16523] dvb-usb: bulk message failed: -22 (4/0) [ 825.111739][T16523] cxusb: i2c read failed [ 825.113744][ T6015] cxusb: set interface failed [ 825.116099][ T6015] dvb-usb: bulk message failed: -22 (1/0) [ 825.176918][ T6015] DVB: Unable to find symbol mt352_attach() [ 825.179907][ T6015] dvb-usb: bulk message failed: -22 (5/0) [ 825.182705][ T6015] zl10353_read_register: readreg error (reg=127, ret==-121) [ 825.185663][ T6015] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 825.231744][ T6015] rc_core: IR keymap rc-dvico-mce not found [ 825.234231][ T6015] Registered IR keymap rc-empty [ 825.237287][ T6015] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 825.242468][ T6015] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input91 [ 825.248585][ T6015] dvb-usb: schedule remote query interval to 100 msecs. [ 825.251159][ T6015] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 825.255908][ T6015] usb 10-1: USB disconnect, device number 7 [ 825.274685][ T6015] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 826.699131][ T40] audit: type=1326 audit(1772526348.002:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16552 comm="syz.2.2957" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70bef78 code=0x7ffc0000 [ 826.717655][ T40] audit: type=1326 audit(1772526348.002:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16552 comm="syz.2.2957" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70bef78 code=0x7ffc0000 [ 826.729503][ T40] audit: type=1326 audit(1772526348.002:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16552 comm="syz.2.2957" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 826.739239][ T40] audit: type=1326 audit(1772526348.002:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16552 comm="syz.2.2957" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 826.750913][ T40] audit: type=1326 audit(1772526348.012:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16552 comm="syz.2.2957" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 826.758823][ T40] audit: type=1326 audit(1772526348.012:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16552 comm="syz.2.2957" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 826.767367][ T40] audit: type=1326 audit(1772526348.012:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16552 comm="syz.2.2957" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 826.779220][ T40] audit: type=1326 audit(1772526348.012:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16552 comm="syz.2.2957" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70bef78 code=0x7ffc0000 [ 826.787143][ T40] audit: type=1326 audit(1772526348.012:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16552 comm="syz.2.2957" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 827.285533][T16577] syzkaller0: entered promiscuous mode [ 827.287681][T16577] syzkaller0: entered allmulticast mode [ 827.298524][T16577] tipc: Started in network mode [ 827.300745][T16577] tipc: Node identity 029fb18651aa, cluster identity 4711 [ 827.306823][T16577] tipc: Enabled bearer , priority 0 [ 827.322720][T16577] tipc: Resetting bearer [ 827.374293][T16576] tipc: Resetting bearer [ 827.393921][T16576] tipc: Disabling bearer [ 827.671710][ T10] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 827.744545][T16587] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 827.746970][T16587] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 827.750137][T16587] vhci_hcd vhci_hcd.0: Device attached [ 827.899264][T16587] rdma_rxe: rxe_newlink: failed to add wg2 [ 828.031811][ T6015] usb 40-1: SetAddress Request (14) to port 0 [ 828.034239][ T6015] usb 40-1: new SuperSpeed USB device number 14 using vhci_hcd [ 828.146956][T16597] tipc: Can't bind to reserved service type 2 [ 828.480859][T16588] vhci_hcd: connection reset by peer [ 828.485574][T15921] vhci_hcd vhci_hcd.1: stop threads [ 828.489011][T15921] vhci_hcd vhci_hcd.1: release socket [ 828.492821][T15921] vhci_hcd vhci_hcd.1: disconnect device [ 828.688673][ T10] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 828.702801][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 828.710253][ T10] usb 10-1: Product: syz [ 828.712811][ T10] usb 10-1: Manufacturer: syz [ 828.715072][ T10] usb 10-1: SerialNumber: syz [ 828.725249][ T10] usb 10-1: config 0 descriptor?? [ 828.742732][ T10] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 828.746362][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 828.757620][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 828.762359][ T10] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 828.764995][ T10] usb 10-1: media controller created [ 828.787118][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 828.945022][T16568] dvb-usb: bulk message failed: -22 (4/0) [ 828.947335][T16568] cxusb: i2c read failed [ 828.952493][ T10] cxusb: set interface failed [ 828.961904][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 828.985401][ T10] DVB: Unable to find symbol mt352_attach() [ 828.987422][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 828.989341][ T10] zl10353_read_register: readreg error (reg=127, ret==-121) [ 829.001755][ T10] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 829.091758][ T10] rc_core: IR keymap rc-dvico-mce not found [ 829.094588][ T10] Registered IR keymap rc-empty [ 829.097356][ T10] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 829.102036][ T10] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input92 [ 829.144309][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 829.146816][ T10] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 829.163197][ T10] usb 10-1: USB disconnect, device number 8 [ 829.242722][ T10] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 830.226477][T16632] support for the xor transformation has been removed. [ 830.426826][ T40] kauditd_printk_skb: 93 callbacks suppressed [ 830.426887][ T40] audit: type=1326 audit(1772526351.732:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16638 comm="syz.0.2986" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 830.442024][ T40] audit: type=1326 audit(1772526351.732:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16638 comm="syz.0.2986" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 830.454081][ T40] audit: type=1326 audit(1772526351.732:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16638 comm="syz.0.2986" exe="/syz-executor" sig=0 arch=40000003 syscall=110 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 830.465194][ T40] audit: type=1326 audit(1772526351.732:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16638 comm="syz.0.2986" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 830.473897][ T40] audit: type=1326 audit(1772526351.732:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16638 comm="syz.0.2986" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 830.481124][ T40] audit: type=1326 audit(1772526351.732:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16638 comm="syz.0.2986" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71a5cab code=0x7ffc0000 [ 830.489302][ T40] audit: type=1326 audit(1772526351.732:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16638 comm="syz.0.2986" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 830.496713][ T40] audit: type=1326 audit(1772526351.732:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16638 comm="syz.0.2986" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 830.504807][ T40] audit: type=1326 audit(1772526351.732:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16638 comm="syz.0.2986" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 830.512457][ T40] audit: type=1326 audit(1772526351.732:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16638 comm="syz.0.2986" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 830.711681][ T29] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 830.912099][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 830.915831][ T29] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 831.743107][ T29] usb 5-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice=f7.32 [ 831.747880][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.751727][ T29] usb 5-1: Product: syz [ 831.753745][ T29] usb 5-1: Manufacturer: syz [ 831.755950][ T29] usb 5-1: SerialNumber: syz [ 831.827900][T16660] netlink: 'syz.1.2992': attribute type 3 has an invalid length. [ 831.892417][ T29] usb 5-1: config 0 descriptor?? [ 832.065901][T16664] netlink: 'syz.5.2993': attribute type 2 has an invalid length. [ 833.091838][ T6015] usb 40-1: device descriptor read/8, error -110 [ 833.492794][ T6015] usb usb40-port1: attempt power cycle [ 833.611824][T12801] usb 5-1: USB disconnect, device number 39 [ 834.052703][ T6015] usb usb40-port1: unable to enumerate USB device [ 834.363698][T16680] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 834.366838][T16680] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 834.380704][T16680] vhci_hcd vhci_hcd.0: Device attached [ 834.484490][T16680] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2996'. [ 834.504940][T16680] 8021q: VLANs not supported on lo [ 834.661763][ T10] usb 40-1: SetAddress Request (18) to port 0 [ 834.664403][ T10] usb 40-1: new SuperSpeed USB device number 18 using vhci_hcd [ 834.874766][T16690] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2999'. [ 834.877878][T16690] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2999'. [ 834.908505][T16683] vhci_hcd: connection reset by peer [ 834.910782][T15921] vhci_hcd vhci_hcd.1: stop threads [ 834.912838][T15921] vhci_hcd vhci_hcd.1: release socket [ 834.915466][T15921] vhci_hcd vhci_hcd.1: disconnect device [ 835.740258][T16701] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 836.612124][T16714] serio: Serial port ptm0 [ 836.913586][T16722] nbd: must specify at least one socket [ 837.056067][ T40] kauditd_printk_skb: 49 callbacks suppressed [ 837.056079][ T40] audit: type=1326 audit(1772526358.362:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16727 comm="syz.2.3008" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x0 [ 838.107867][T16742] serio: Serial port ptm0 [ 838.571352][T16754] kernel profiling enabled (shift: 63) [ 838.574486][T16754] profiling shift: 63 too large [ 838.888816][T16766] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3023'. [ 839.493253][T16776] befs: (nullb0): No write support. Marking filesystem read-only [ 839.528701][T16776] befs: (nullb0): invalid magic header [ 839.742342][ T10] usb 40-1: device descriptor read/8, error -110 [ 839.945904][T16783] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 840.166194][ T10] usb usb40-port1: attempt power cycle [ 840.715851][T16789] netlink: 'syz.5.3032': attribute type 1 has an invalid length. [ 840.718576][T16789] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3032'. [ 840.732207][ T10] usb usb40-port1: unable to enumerate USB device [ 840.912283][ T50] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 841.061684][ T50] usb 5-1: Using ep0 maxpacket: 8 [ 841.065903][ T50] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 841.069903][ T50] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 841.074715][ T50] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 841.079015][ T50] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 841.084934][ T50] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 841.091755][ T50] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 841.095677][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.121665][ T10] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 841.318380][ T50] usb 5-1: usb_control_msg returned -32 [ 841.320869][ T50] usbtmc 5-1:16.0: can't read capabilities [ 841.380124][T16799] macvtap1: entered promiscuous mode [ 841.382362][T16799] macvtap1: entered allmulticast mode [ 841.386104][T16799] dummy0: entered promiscuous mode [ 841.388231][T16799] dummy0: entered allmulticast mode [ 841.393838][T16799] team0: Device macvtap1 failed to register rx_handler [ 841.492927][T16799] dummy0: left allmulticast mode [ 841.497938][T16799] dummy0: left promiscuous mode [ 841.653843][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.658731][ T10] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 841.662730][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.670460][ T10] usb 7-1: config 0 descriptor?? [ 841.889457][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 841.897856][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 841.906226][ T10] usb 7-1: USB disconnect, device number 37 [ 841.907767][T16810] netlink: 'syz.1.3038': attribute type 2 has an invalid length. [ 842.441835][ T10] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 842.621797][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 842.625288][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.628741][ T10] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 842.631937][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.640115][ T10] usb 7-1: config 0 descriptor?? [ 842.645971][ T10] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 842.658472][ T10] ldusb 7-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 842.856691][ T10] usb 7-1: USB disconnect, device number 38 [ 842.866278][ T10] ldusb 7-1:0.0: LD USB Device #1 now disconnected [ 843.370643][T16825] loop6: detected capacity change from 0 to 524287999 [ 843.375844][T16825] buffer_io_error: 80 callbacks suppressed [ 843.375966][T16825] Buffer I/O error on dev loop6, logical block 0, async page read [ 843.380812][T16825] Buffer I/O error on dev loop6, logical block 0, async page read [ 843.384431][T16825] Buffer I/O error on dev loop6, logical block 0, async page read [ 843.387668][T16825] Buffer I/O error on dev loop6, logical block 0, async page read [ 843.401946][T16825] Buffer I/O error on dev loop6, logical block 0, async page read [ 843.405001][T16825] Buffer I/O error on dev loop6, logical block 0, async page read [ 843.407720][T16825] Buffer I/O error on dev loop6, logical block 0, async page read [ 843.410680][T16825] Buffer I/O error on dev loop6, logical block 0, async page read [ 843.413914][T16825] ldm_validate_partition_table(): Disk read failed. [ 843.416527][T16825] Buffer I/O error on dev loop6, logical block 0, async page read [ 843.419275][T16825] Buffer I/O error on dev loop6, logical block 0, async page read [ 843.423251][T16825] Dev loop6: unable to read RDB block 0 [ 843.425514][T16825] loop6: unable to read partition table [ 843.426515][ T40] audit: type=1326 audit(1772526364.732:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16824 comm="syz.5.3042" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x0 [ 843.427675][T16825] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 843.590256][ T5341] ldm_validate_partition_table(): Disk read failed. [ 843.592885][ T5341] Dev loop6: unable to read RDB block 0 [ 843.595019][ T5341] loop6: unable to read partition table [ 843.694904][T16833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3043'. [ 844.585630][ T6029] usb 5-1: USB disconnect, device number 40 [ 844.659084][T16837] loop6: detected capacity change from 0 to 524287999 [ 844.665231][T16837] ldm_validate_partition_table(): Disk read failed. [ 844.667673][T16837] Dev loop6: unable to read RDB block 0 [ 844.669803][T16837] loop6: unable to read partition table [ 844.675711][T16837] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 844.685026][ T40] audit: type=1326 audit(1772526365.982:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16836 comm="syz.0.3045" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x0 [ 845.708126][T16845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 846.564247][ T10] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 846.717161][ T10] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 846.720857][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 846.724275][ T10] usb 10-1: Product: syz [ 846.726176][ T10] usb 10-1: Manufacturer: syz [ 846.727807][ T10] usb 10-1: SerialNumber: syz [ 846.732262][ T10] usb 10-1: config 0 descriptor?? [ 846.740088][ T10] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 846.743270][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 846.747486][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 846.751186][ T10] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 846.755551][ T10] usb 10-1: media controller created [ 846.767788][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 846.954763][T16858] dvb-usb: bulk message failed: -22 (4/0) [ 846.957207][T16858] cxusb: i2c read failed [ 846.959663][ T10] cxusb: set interface failed [ 846.961723][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 847.048515][ T10] DVB: Unable to find symbol mt352_attach() [ 847.051189][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 847.054053][ T10] zl10353_read_register: readreg error (reg=127, ret==-121) [ 847.057058][ T10] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 847.086856][T16867] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3052'. [ 847.192657][ T10] rc_core: IR keymap rc-dvico-mce not found [ 847.196002][ T10] Registered IR keymap rc-empty [ 847.248221][ T10] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 847.274378][ T10] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input93 [ 847.289276][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 847.292441][ T10] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 847.306669][ T10] usb 10-1: USB disconnect, device number 9 [ 847.585633][ T10] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 847.745203][T16877] tmpfs: Bad value for 'nr_blocks' [ 848.784319][T16891] QAT: Invalid ioctl 17920 [ 848.995832][ T6029] IPVS: starting estimator thread 0... [ 849.081833][T16897] IPVS: using max 26 ests per chain, 62400 per kthread [ 850.040819][T16916] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3067'. [ 850.561243][T16929] syzkaller1: entered promiscuous mode [ 850.563777][T16929] syzkaller1: entered allmulticast mode [ 850.650675][T16931] sp0: Synchronizing with TNC [ 851.782502][T16951] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3079'. [ 851.790072][T16951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3079'. [ 851.965075][T16954] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 851.968493][T16954] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 851.998237][T16954] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 852.000970][T16954] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 852.023742][T16954] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 852.086300][T16961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3083'. [ 852.093428][T16961] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3083'. [ 852.097654][T16961] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3083'. [ 852.158982][T16963] 8021q: adding VLAN 0 to HW filter on device bond1 [ 852.194030][T16963] bond_slave_0: entered promiscuous mode [ 852.196899][T16963] bond_slave_1: entered promiscuous mode [ 852.211024][T16963] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 852.218979][T16963] bond1: (slave macvlan2): making interface the new active one [ 852.229676][T16963] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 852.432210][T16954] syz.0.3080: page allocation failure: order:0, mode:0x144cca(GFP_HIGHUSER_MOVABLE|__GFP_RETRY_MAYFAIL|__GFP_COMP), nodemask=0,cpuset=/,mems_allowed=0-1 [ 852.438060][T16954] CPU: 3 UID: 0 PID: 16954 Comm: syz.0.3080 Tainted: G L syzkaller #0 PREEMPT(full) [ 852.438081][T16954] Tainted: [L]=SOFTLOCKUP [ 852.438085][T16954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 852.438093][T16954] Call Trace: [ 852.438098][T16954] [ 852.438103][T16954] dump_stack_lvl+0x100/0x190 [ 852.438127][T16954] warn_alloc.cold+0x95/0x1c1 [ 852.438147][T16954] ? __pfx_warn_alloc+0x10/0x10 [ 852.438164][T16954] ? __mutex_unlock_slowpath+0x15c/0x790 [ 852.438183][T16954] ? __alloc_frozen_pages_noprof+0xd68/0x2ba0 [ 852.438205][T16954] __alloc_frozen_pages_noprof+0xf36/0x2ba0 [ 852.438227][T16954] ? __pfx_stack_trace_save+0x10/0x10 [ 852.438241][T16954] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 852.438266][T16954] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 852.438285][T16954] ? cpuset_nodemask_valid_mems_allowed+0x5f/0x80 [ 852.438303][T16954] ? policy_nodemask+0xed/0x4f0 [ 852.438317][T16954] alloc_pages_mpol+0x1fb/0x550 [ 852.438329][T16954] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 852.438344][T16954] folio_alloc_mpol_noprof+0x36/0x340 [ 852.438358][T16954] alloc_migration_target_by_mpol+0x2c1/0x650 [ 852.438374][T16954] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 852.438388][T16954] ? __pfx___might_resched+0x10/0x10 [ 852.438404][T16954] ? arch_stack_walk+0xa6/0xf0 [ 852.438421][T16954] migrate_pages_batch+0x4f2/0x4530 [ 852.438435][T16954] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 852.438455][T16954] ? __pfx_migrate_pages_batch+0x10/0x10 [ 852.438466][T16954] ? kasan_save_stack+0x3f/0x50 [ 852.438483][T16954] ? kasan_save_stack+0x30/0x50 [ 852.438497][T16954] ? kasan_save_track+0x14/0x30 [ 852.438513][T16954] ? __mpol_dup+0x74/0x370 [ 852.438524][T16954] ? sp_alloc+0x4d/0x160 [ 852.438536][T16954] ? do_mbind+0x7de/0xfd0 [ 852.438548][T16954] ? kernel_mbind+0x1b7/0x200 [ 852.438560][T16954] ? __do_fast_syscall_32+0xe3/0x8c0 [ 852.438574][T16954] ? do_fast_syscall_32+0x32/0x70 [ 852.438587][T16954] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 852.438607][T16954] migrate_pages_sync+0x12c/0x880 [ 852.438620][T16954] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 852.438638][T16954] ? __pfx_migrate_pages_sync+0x10/0x10 [ 852.438654][T16954] ? __lock_acquire+0x4a5/0x2630 [ 852.438671][T16954] migrate_pages+0x1aae/0x28a0 [ 852.438685][T16954] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 852.438701][T16954] ? mpol_set_shared_policy+0x291/0x8a0 [ 852.438714][T16954] ? mpol_set_shared_policy+0x291/0x8a0 [ 852.438727][T16954] ? __pfx_migrate_pages+0x10/0x10 [ 852.438742][T16954] ? find_held_lock+0x2b/0x80 [ 852.438752][T16954] ? do_mbind+0x557/0xfd0 [ 852.438767][T16954] ? up_write+0x290/0x4f0 [ 852.438783][T16954] do_mbind+0x5a6/0xfd0 [ 852.438800][T16954] ? __pfx_do_mbind+0x10/0x10 [ 852.438820][T16954] ? __pfx_get_nodes+0x10/0x10 [ 852.438839][T16954] ? __pfx___seccomp_filter+0x10/0x10 [ 852.438854][T16954] kernel_mbind+0x1b7/0x200 [ 852.438868][T16954] ? __pfx_kernel_mbind+0x10/0x10 [ 852.438885][T16954] __do_fast_syscall_32+0xe3/0x8c0 [ 852.438900][T16954] do_fast_syscall_32+0x32/0x70 [ 852.438918][T16954] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 852.438932][T16954] RIP: 0023:0xf706ef6c [ 852.438942][T16954] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 852.438953][T16954] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000112 [ 852.438964][T16954] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600000 [ 852.438971][T16954] RDX: 0000000000000002 RSI: 0000000080000080 RDI: 0000000000000008 [ 852.438977][T16954] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 852.438984][T16954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 852.438990][T16954] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 852.439004][T16954] [ 852.439008][T16954] Mem-Info: [ 852.460941][T16969] netlink: 'syz.2.3086': attribute type 29 has an invalid length. [ 852.494288][T16954] active_anon:417 inactive_anon:1024 isolated_anon:0 [ 852.494288][T16954] active_file:955 inactive_file:827 isolated_file:0 [ 852.494288][T16954] unevictable:1768 dirty:27 writeback:0 [ 852.494288][T16954] slab_reclaimable:11211 slab_unreclaimable:89225 [ 852.494288][T16954] mapped:21881 shmem:1771 pagetables:1465 [ 852.494288][T16954] sec_pagetables:346 bounce:0 [ 852.494288][T16954] kernel_misc_reclaimable:0 [ 852.494288][T16954] free:53045 free_pcp:0 free_cma:0 [ 852.499558][T16969] netlink: 'syz.2.3086': attribute type 29 has an invalid length. [ 852.501087][T16954] Node 0 active_anon:12kB inactive_anon:8kB active_file:380kB inactive_file:468kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:572kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7264kB pagetables:1204kB sec_pagetables:1120kB all_unreclaimable? yes Balloon:0kB [ 852.635286][T16954] Node 0 DMA free:3392kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:128kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 852.648870][T16954] lowmem_reserve[]: 0 285 285 285 285 [ 852.651171][T16954] Node 0 DMA32 free:37484kB boost:29412kB min:42484kB low:45752kB high:49020kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:8kB active_file:380kB inactive_file:340kB unevictable:3536kB writepending:4kB zspages:24kB present:1032196kB managed:292620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 852.664652][T16954] lowmem_reserve[]: 0 0 0 0 0 [ 852.666646][T16954] Node 0 DMA: 142*4kB (U) 31*8kB (U) 13*16kB (U) 18*32kB (U) 10*64kB (U) 1*128kB (U) 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 3392kB [ 852.674922][T16954] Node 0 DMA32: 1326*4kB (UME) 395*8kB (UME) 152*16kB (UM) 240*32kB (UME) 94*64kB (UME) 35*128kB (UME) 13*256kB (UM) 6*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 37520kB [ 852.684003][T16954] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 852.688067][T16954] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 852.691372][T16954] 4816 total pagecache pages [ 852.693371][T16954] 1242 pages in swap cache [ 852.694942][T16954] Free swap = 93032kB [ 852.696340][T16954] Total swap = 124996kB [ 852.697792][T16954] 524155 pages RAM [ 852.699115][T16954] 0 pages HighMem/MovableOnly [ 852.701010][T16954] 210107 pages reserved [ 852.708393][T16954] 0 pages cma reserved [ 852.825790][T16952] syz.0.3080 invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=1000 [ 852.833896][T16952] CPU: 1 UID: 0 PID: 16952 Comm: syz.0.3080 Tainted: G L syzkaller #0 PREEMPT(full) [ 852.833945][T16952] Tainted: [L]=SOFTLOCKUP [ 852.833953][T16952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 852.833964][T16952] Call Trace: [ 852.833972][T16952] [ 852.833981][T16952] dump_stack_lvl+0x100/0x190 [ 852.834017][T16952] dump_header+0xfb/0x606 [ 852.834042][T16952] oom_kill_process.cold+0xd/0x330 [ 852.834066][T16952] out_of_memory+0x1256/0x14f0 [ 852.834102][T16952] ? __pfx_out_of_memory+0x10/0x10 [ 852.834138][T16952] __alloc_frozen_pages_noprof+0x233d/0x2ba0 [ 852.834188][T16952] ? rcu_is_watching+0x12/0xc0 [ 852.834219][T16952] ? trace_sched_exit_tp+0x13a/0x180 [ 852.834244][T16952] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 852.834271][T16952] ? __schedule+0x1000/0x6120 [ 852.834312][T16952] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 852.834345][T16952] ? cpuset_nodemask_valid_mems_allowed+0x5f/0x80 [ 852.834374][T16952] ? policy_nodemask+0xed/0x4f0 [ 852.834398][T16952] alloc_pages_mpol+0x1fb/0x550 [ 852.834420][T16952] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 852.834444][T16952] ? _raw_read_unlock+0x3e/0x50 [ 852.834471][T16952] folio_alloc_mpol_noprof+0x36/0x340 [ 852.834498][T16952] vma_alloc_folio_noprof+0xed/0x1d0 [ 852.834521][T16952] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 852.834554][T16952] ? __pfx_filemap_map_pages+0x10/0x10 [ 852.834581][T16952] do_fault+0x1e6/0x1950 [ 852.834609][T16952] __handle_mm_fault+0x180f/0x2b60 [ 852.834640][T16952] ? lockdep_hardirqs_on+0x78/0x100 [ 852.834663][T16952] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 852.834685][T16952] ? __pfx___handle_mm_fault+0x10/0x10 [ 852.834713][T16952] ? __rcu_read_unlock+0x26a/0x5e0 [ 852.834748][T16952] ? arch_do_signal_or_restart+0x1f9/0x770 [ 852.834780][T16952] handle_mm_fault+0x36d/0xa20 [ 852.834813][T16952] do_user_addr_fault+0x5a3/0x12f0 [ 852.834852][T16952] exc_page_fault+0x6f/0xd0 [ 852.834876][T16952] asm_exc_page_fault+0x26/0x30 [ 852.834896][T16952] RIP: 0023:0xf709f965 [ 852.834912][T16952] Code: 85 77 fd ff ff 85 c0 74 19 83 e8 01 0f 85 6a fd ff ff 8b 44 24 20 31 f6 89 74 24 24 0f c8 89 44 24 20 8b 44 24 1c 8b 4c 24 20 <89> 08 e9 e4 fb ff ff 85 c0 0f 84 b2 01 00 00 83 e8 01 0f 85 3a fd [ 852.834930][T16952] RSP: 002b:00000000fffcaf00 EFLAGS: 00010246 [ 852.834948][T16952] RAX: 00000000800012c0 RBX: 00000000f7431ff4 RCX: 00000000ffffffff [ 852.834960][T16952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 852.834971][T16952] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 852.834983][T16952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 852.834995][T16952] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 852.835023][T16952] [ 852.835093][T16952] Mem-Info: [ 852.843199][T16980] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 852.851244][T16952] active_anon:3267 inactive_anon:1024 isolated_anon:25 [ 852.851244][T16952] active_file:1025 inactive_file:867 isolated_file:0 [ 852.851244][T16952] unevictable:1768 dirty:27 writeback:0 [ 852.851244][T16952] slab_reclaimable:11211 slab_unreclaimable:88886 [ 852.851244][T16952] mapped:21931 shmem:1771 pagetables:1490 [ 852.851244][T16952] sec_pagetables:346 bounce:0 [ 852.851244][T16952] kernel_misc_reclaimable:0 [ 852.851244][T16952] free:50454 free_pcp:0 free_cma:0 [ 853.020710][T16952] Node 0 active_anon:12kB inactive_anon:8kB active_file:160kB inactive_file:628kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:572kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7324kB pagetables:1204kB sec_pagetables:1120kB all_unreclaimable? yes Balloon:0kB [ 853.037617][T16952] Node 0 DMA free:3392kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:112kB inactive_file:16kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 853.051311][T16952] lowmem_reserve[]: 0 285 285 285 285 [ 853.054373][T16952] Node 0 DMA32 free:37596kB boost:29412kB min:42484kB low:45752kB high:49020kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:20kB active_file:84kB inactive_file:528kB unevictable:3536kB writepending:4kB zspages:24kB present:1032196kB managed:292620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 853.068223][T16952] lowmem_reserve[]: 0 0 0 0 0 [ 853.070629][T16952] Node 0 DMA: 142*4kB (U) 31*8kB (U) 13*16kB (U) 18*32kB (U) 10*64kB (U) 1*128kB (U) 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 3392kB [ 853.078568][T16952] Node 0 DMA32: 1327*4kB (UME) 396*8kB (UME) 150*16kB (UM) 239*32kB (UME) 96*64kB (UME) 35*128kB (UME) 13*256kB (UM) 6*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 37596kB [ 853.086922][T16952] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 853.091309][T16952] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 853.095799][T16952] 4953 total pagecache pages [ 853.097999][T16952] 1247 pages in swap cache [ 853.100028][T16952] Free swap = 93032kB [ 853.101987][T16952] Total swap = 124996kB [ 853.103827][T16952] 524155 pages RAM [ 853.105612][T16952] 0 pages HighMem/MovableOnly [ 853.108010][T16952] 210107 pages reserved [ 853.110231][T16952] 0 pages cma reserved [ 853.112674][T16952] Unreclaimable slab info: [ 853.116773][T16952] Name Used Total [ 853.119921][T16952] pid_3 25KB 63KB [ 853.123118][T16952] pid_2 53KB 63KB [ 853.126292][T16952] bio-464 17KB 31KB [ 853.129189][T16952] bio-528 19KB 31KB [ 853.132021][T16952] bio-544 19KB 31KB [ 853.134867][T16952] bio-560 19KB 31KB [ 853.137821][T16952] afs_inode_cache 28KB 30KB [ 853.141193][T16952] zswap_entry 566KB 711KB [ 853.146646][T16952] AF_VSOCK 54KB 122KB [ 853.149582][T16952] sw_flow_stats 22KB 32KB [ 853.152621][T16952] sw_flow 60KB 91KB [ 853.170773][T16952] batadv_tt_change_cache 0KB 20KB [ 853.174195][T16952] batadv_tl_cache 5KB 32KB [ 853.176994][T16952] ceph_osd_request 11KB 127KB [ 853.179780][T16952] ceph_msg 5KB 30KB [ 853.182932][T16952] IEEE-802.15.4-MAC 32KB 62KB [ 853.186031][T16952] IEEE-802.15.4-RAW 40KB 126KB [ 853.189337][T16952] p9_req_t 21KB 31KB [ 853.192269][T16952] INET_SMC 34KB 62KB [ 853.195237][T16952] SMC6 96KB 156KB [ 853.198291][T16952] SMC 56KB 125KB [ 853.201509][T16952] TIPC 39KB 184KB [ 853.204780][T16952] rds_tcp_connection 18KB 111KB [ 853.207518][T16952] RDS 39KB 154KB [ 853.209583][T16952] rds_connection 33KB 62KB [ 853.213606][T16952] SCTPv6 76KB 210KB [ 853.215885][T16952] SCTP 70KB 153KB [ 853.218100][T16952] sctp_chunk 18KB 39KB [ 853.220430][T16952] sctp_bind_bucket 0KB 20KB [ 853.222566][T16952] PNPIPE 43KB 92KB [ 853.224816][T16952] L2TP/IPv6 39KB 63KB [ 853.227769][T16952] L2TP/IP 29KB 63KB [ 853.230408][T16952] KCM 62KB 155KB [ 853.232751][T16952] kcm_mux 38KB 94KB [ 853.234898][T16952] RXRPC 46KB 128KB [ 853.237420][T16952] rxrpc_call_jar 181KB 286KB [ 853.240331][T16952] can_receiver 12KB 15KB [ 853.243774][T16952] net_bridge_fdb_entry 4KB 31KB [ 853.246338][T16952] xfrm6_tunnel_spi 0KB 12KB [ 853.249115][T16952] MPTCPv6 63KB 223KB [ 853.251982][T16952] ip6-frags 0KB 39KB [ 853.254802][T16952] fib6_node 189KB 228KB [ 853.257157][T16952] ip6_dst_cache 244KB 773KB [ 853.259878][T16952] PINGv6 45KB 216KB [ 853.262125][T16952] RAWv6 165KB 247KB [ 853.264174][T16952] UDPLITEv6 69KB 94KB [ 853.266753][T16952] UDPv6 144KB 252KB [ 853.269537][T16952] tw_sock_TCPv6 0KB 23KB [ 853.272450][T16952] request_sock_TCPv6 0KB 15KB [ 853.275172][T16952] TCPv6 212KB 327KB [ 853.278089][T16952] nf_conntrack 0KB 31KB [ 853.281223][T16952] wg_peer 158KB 208KB [ 853.284622][T16952] allowedips_node 24KB 31KB [ 853.287382][T16952] ubi_wl_entry_slab 2KB 3KB [ 853.290548][T16952] t10_alua_lu_gp_cache 8KB 15KB [ 853.293647][T16952] scsi_sense_cache 60KB 60KB [ 853.296549][T16952] virtio_scsi_cmd 21KB 24KB [ 853.299603][T16952] bio-136 36KB 68KB [ 853.302659][T16952] io_kiocb 2KB 62KB [ 853.305307][T16952] bio-264 11KB 47KB [ 853.307702][T16952] mqueue_inode_cache 45KB 151KB [ 853.317530][T16952] f2fs_bio_post_read_ctx 30KB 31KB [ 853.320984][T16952] jfs_mp 14KB 15KB [ 853.327519][T16952] fuse_request 23KB 35KB [ 853.331434][T16952] cifs_small_rq 28KB 32KB [ 853.341067][T16952] cifs_request 67KB 67KB [ 853.344623][T16952] cifs_mpx_ids 8KB 15KB [ 853.346942][T16952] cifs_io_subrequest 42KB 47KB [ 853.349575][T16952] cifs_io_request 105KB 111KB [ 853.353057][T16952] nfs_commit_data 24KB 31KB [ 853.355565][T16952] nfs_write_data 38KB 63KB [ 853.358745][T16952] ecryptfs_sb_cache 20KB 31KB [ 853.361477][T16952] jbd2_inode 16KB 19KB [ 853.365655][T16952] ext4_system_zone 1KB 3KB [ 853.368044][T16952] ext4_io_end_vec 8KB 19KB [ 853.370595][T16952] kioctx 13KB 191KB [ 853.374137][T16952] aio_kiocb 21KB 54KB [ 853.376419][T16952] userfaultfd_ctx_cache 23KB 94KB [ 853.378888][T16952] fanotify_mark 11KB 11KB [ 853.381273][T16952] dnotify_mark 34KB 35KB [ 853.386342][T16952] dnotify_struct 8KB 11KB [ 853.388663][T16952] fasync_cache 35KB 55KB [ 853.390871][T16952] zspage 149KB 212KB [ 853.394428][T16952] zs_handle 197KB 872KB [ 853.396973][T16952] pid_namespace 30KB 77KB [ 853.399231][T16952] kvm_gmem_inode_cache 34KB 63KB [ 853.402236][T16952] kvm_vcpu 104KB 281KB [ 853.405061][T16952] kvm_mmu_page_header 53KB 73KB [ 853.407370][T16952] pte_list_desc 30KB 47KB [ 853.409503][T16952] x86_emulator 120KB 221KB [ 853.411884][T16952] rpc_buffers 25KB 31KB [ 853.417348][T16952] rpc_tasks 8KB 15KB [ 853.419858][T16952] UNIX-STREAM 91KB 245KB [ 853.431974][T16952] UNIX 185KB 367KB [ 853.436282][T16952] mfc_cache 6KB 8KB [ 853.439518][T16952] UDP-Lite 36KB 159KB [ 853.443038][T16952] MPTCP 64KB 214KB [ 853.445885][T16952] request_sock_subflow_v6 0KB 7KB [ 853.451114][T16952] request_sock_subflow_v4 0KB 7KB [ 853.454923][T16952] tcp_bind2_bucket 3KB 24KB [ 853.457985][T16952] tcp_bind_bucket 3KB 40KB [ 853.460876][T16952] inet_peer 0KB 12KB [ 853.464588][T16952] xfrm_dst 0KB 31KB [ 853.467428][T16952] xfrm_state 3KB 159KB [ 853.470218][T16952] ip_fib_trie 31KB 40KB [ 853.473569][T16952] ip_fib_alias 110KB 130KB [ 853.476632][T16952] rtable 61KB 108KB [ 853.479941][T16952] PING 19KB 31KB [ 853.486205][T16952] RAW 84KB 223KB [ 853.488985][T16952] UDP 146KB 223KB [ 853.493287][T16952] tw_sock_TCP 0KB 31KB [ 853.496594][T16952] request_sock_TCP 0KB 7KB [ 853.499414][T16952] TCP 309KB 510KB [ 853.505843][T16952] hugetlbfs_inode_cache 23KB 62KB [ 853.509348][T16952] fscache_cookie_jar 22KB 46KB [ 853.513991][T16952] netfs_subrequest 34KB 39KB [ 853.516789][T16952] netfs_request 104KB 111KB [ 853.519510][T16952] bio-280 21KB 23KB [ 853.525755][T16952] ep_head 4KB 24KB [ 853.528868][T16952] eventpoll_pwq 17KB 35KB [ 853.534597][T16952] eventpoll_epi 48KB 70KB [ 853.537287][T16952] inotify_inode_mark 32KB 42KB [ 853.539924][T16952] sgpool-128 17KB 29KB [ 853.543201][T16952] sgpool-64 25KB 31KB [ 853.546215][T16952] sgpool-32 9KB 189KB [ 853.549195][T16952] sgpool-16 3KB 93KB [ 853.552545][T16952] sgpool-8 5KB 62KB [ 853.555216][T16952] bio_crypt_ctx 9KB 11KB [ 853.557873][T16952] bio_integrity_data 7KB 8KB [ 853.560583][T16952] request_queue 200KB 216KB [ 853.567601][T16952] blkdev_ioc 16KB 47KB [ 853.570443][T16952] bio-200 22KB 93KB [ 853.574192][T16952] biovec-max 340KB 505KB [ 853.577144][T16952] biovec-64 10KB 189KB [ 853.580471][T16952] biovec-16 2KB 46KB [ 853.585202][T16952] mm_slot 8KB 11KB [ 853.588163][T16952] ksm_mm_slot 3KB 4KB [ 853.590888][T16952] uid_cache 33KB 54KB [ 853.596556][T16952] iommu_iova_magazine 978KB 1134KB [ 853.599528][T16952] iommu_iova 258KB 356KB [ 853.603359][T16952] dmaengine-unmap-256 26KB 30KB [ 853.606609][T16952] dmaengine-unmap-128 14KB 30KB [ 853.609894][T16952] dmaengine-unmap-16 7KB 8KB [ 853.613391][T16952] dmaengine-unmap-2 3KB 4KB [ 853.616164][T16952] QIPCRTR 60KB 125KB [ 853.618972][T16952] audit_buffer 26KB 46KB [ 853.624067][T16952] skbuff_ext_cache 0KB 24KB [ 853.629341][T16952] skbuff_small_head 1512KB 2331KB [ 853.632794][T16952] skbuff_fclone_cache 125KB 203KB [ 853.635928][T16952] skbuff_head_cache 2241KB 2359KB [ 853.638619][T16952] configfs_dir_cache 30KB 32KB [ 853.642419][T16952] file_lease_cache 19KB 47KB [ 853.645527][T16952] file_lock_cache 23KB 71KB [ 853.648395][T16952] file_lock_ctx 39KB 47KB [ 853.651184][T16952] fsnotify_inode_mark_connector 25KB 47KB [ 853.657450][T16952] posix_timers_cache 39KB 64KB [ 853.660319][T16952] taskstats 47KB 127KB [ 853.664306][T16952] mem_cgroup_per_node 127KB 216KB [ 853.667801][T16952] mem_cgroup 159KB 208KB [ 853.670604][T16952] proc_dir_entry 774KB 875KB [ 853.675174][T16952] pde_opener 2KB 15KB [ 853.678216][T16952] seq_file 32KB 70KB [ 853.681279][T16952] sigqueue 12KB 43KB [ 853.685256][T16952] shmem_inode_cache 8009KB 8142KB [ 853.688014][T16952] kernfs_iattrs_cache 46KB 46KB [ 853.691029][T16952] kernfs_node_cache 36894KB 37604KB [ 853.694867][T16952] mnt_cache 108KB 133KB [ 853.698185][T16952] bfilp 27KB 55KB [ 853.700993][T16952] filp 468KB 606KB [ 853.705191][T16952] names_cache 441KB 484KB [ 853.708066][T16952] net_namespace 133KB 229KB [ 853.710191][T16952] ima_iint_cache 31KB 63KB [ 853.716042][T16952] lsm_inode_cache 2186KB 2661KB [ 853.719015][T16952] lsm_file_cache 134KB 212KB [ 853.722110][T16952] key_jar 34KB 63KB [ 853.727097][T16952] uts_namespace 44KB 92KB [ 853.729915][T16952] nsproxy 12KB 31KB [ 853.733516][T16952] vm_area_struct 953KB 1296KB [ 853.736528][T16952] fs_cache 42KB 64KB [ 853.739593][T16952] files_cache 159KB 239KB [ 853.744006][T16952] signal_cache 908KB 1972KB [ 853.746874][T16952] sighand_cache 1153KB 2374KB [ 853.749695][T16952] task_struct 4786KB 4906KB [ 853.753265][T16952] cred 151KB 348KB [ 853.756588][T16952] anon_vma_chain 379KB 421KB [ 853.759363][T16952] anon_vma 351KB 549KB [ 853.763780][T16952] pid 160KB 375KB [ 853.766525][T16952] Acpi-Operand 195KB 308KB [ 853.769316][T16952] Acpi-ParseExt 21KB 39KB [ 853.773475][T16952] Acpi-Parse 12KB 23KB [ 853.776557][T16952] Acpi-State 9KB 27KB [ 853.779494][T16952] Acpi-Namespace 35KB 44KB [ 853.782951][T16952] shared_policy_node 11KB 12KB [ 853.785740][T16952] numa_policy 9KB 15KB [ 853.788576][T16952] perf_event 15KB 31KB [ 853.792492][T16952] trace_event_file 540KB 540KB [ 853.795128][T16952] ftrace_event_field 1020KB 1023KB [ 853.797954][T16952] pool_workqueue 2219KB 2304KB [ 853.800672][T16952] task_group 86KB 123KB [ 853.804213][T16952] maple_node 683KB 1464KB [ 853.807060][T16952] mm_struct 327KB 581KB [ 853.809867][T16952] vmap_area 475KB 740KB [ 853.813780][T16992] binder: 16989:16992 ioctl 4018620d 0 returned -22 [ 853.816738][T16952] debug_objects_cache 3361KB 14331KB [ 853.820063][T16952] page->ptl 135KB 165KB [ 853.824643][T16952] kmalloc-cg-8k 1776KB 1968KB [ 853.827719][T16952] kmalloc-cg-4k 19896KB 20896KB [ 853.830749][T16952] kmalloc-cg-2k 12880KB 14240KB [ 853.833855][T16952] kmalloc-cg-1k 3612KB 3968KB [ 853.836519][T16952] kmalloc-cg-512 2000KB 2256KB [ 853.839243][T16952] kmalloc-cg-256 549KB 648KB [ 853.842844][T16952] kmalloc-cg-128 334KB 368KB [ 853.848486][T16952] kmalloc-cg-64 76KB 108KB [ 853.851254][T16952] kmalloc-cg-32 58KB 180KB [ 853.854557][T16952] kmalloc-cg-16 7KB 28KB [ 853.857521][T16952] kmalloc-cg-8 28KB 40KB [ 853.860372][T16952] kmalloc-cg-192 85KB 96KB [ 853.863871][T16952] kmalloc-cg-96 76KB 88KB [ 853.867235][T16952] kmalloc-8k 6816KB 7136KB [ 853.869801][T16952] kmalloc-4k 29056KB 29696KB [ 853.872637][T16952] kmalloc-2k 13872KB 15520KB [ 853.875642][T16952] kmalloc-1k 8120KB 10304KB [ 853.878466][T16952] kmalloc-512 13334KB 14272KB [ 853.881310][T16952] kmalloc-256 5531KB 5792KB [ 853.886106][T16952] kmalloc-128 2774KB 3736KB [ 853.888964][T16952] kmalloc-64 3305KB 3396KB [ 853.892411][T16952] kmalloc-32 2208KB 5580KB [ 853.895252][T16952] kmalloc-16 512KB 1632KB [ 853.898620][T16952] kmalloc-8 1170KB 1272KB [ 853.901681][T16952] kmalloc-192 2726KB 3068KB [ 853.904599][T16952] kmalloc-96 1621KB 1876KB [ 853.907617][T16952] kmem_cache_node 213KB 220KB [ 853.910732][T16952] kmem_cache 176KB 218KB [ 853.916144][T16952] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz0,task=syz.0.3080,pid=16952,uid=0 [ 853.941214][T16952] Out of memory (oom_kill_allocating_task): Killed process 16952 (syz.0.3080) total-vm:102144kB, anon-rss:264kB, file-rss:23692kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 853.971856][ T63] Bluetooth: hci1: command 0x0406 tx timeout [ 854.037530][T17002] random: crng reseeded on system resumption [ 854.051870][ T63] Bluetooth: hci3: command 0x0c1a tx timeout [ 854.555154][T17010] 9p: Bad value for 'rfdno' [ 855.347161][T17023] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 855.350171][T17023] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 855.361980][T17023] vhci_hcd vhci_hcd.0: Device attached [ 855.373909][T17020] netlink: 17 bytes leftover after parsing attributes in process `syz.5.3103'. [ 855.392602][T17020] openvswitch: netlink: Tunnel attr 0 has unexpected len 65 expected 8 [ 855.651756][ T29] usb 38-1: SetAddress Request (23) to port 0 [ 855.654962][ T29] usb 38-1: new SuperSpeed USB device number 23 using vhci_hcd [ 855.881893][T17024] vhci_hcd: connection closed [ 855.882382][ T60] vhci_hcd vhci_hcd.0: stop threads [ 855.887078][ T60] vhci_hcd vhci_hcd.0: release socket [ 855.901965][ T60] vhci_hcd vhci_hcd.0: disconnect device [ 856.033207][ T29] usb 38-1: enqueue for inactive port 0 [ 856.051881][ T63] Bluetooth: hci1: command 0x0406 tx timeout [ 856.142378][ T63] Bluetooth: hci3: command 0x0c1a tx timeout [ 857.281427][ T29] usb usb38-port1: attempt power cycle [ 857.316380][T17052] ------------[ cut here ]------------ [ 857.318395][T17052] inode->i_blocks [ 857.318402][T17052] WARNING: mm/shmem.c:1430 at shmem_evict_inode+0x8e6/0xbd0, CPU#1: syz.1.3110/17052 [ 857.323260][T17052] Modules linked in: [ 857.325292][T17052] CPU: 1 UID: 0 PID: 17052 Comm: syz.1.3110 Tainted: G L syzkaller #0 PREEMPT(full) [ 857.330180][T17052] Tainted: [L]=SOFTLOCKUP [ 857.333007][T17052] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 857.338357][T17052] RIP: 0010:shmem_evict_inode+0x8e6/0xbd0 [ 857.340941][T17052] Code: fe e8 ee da b9 ff 45 85 ff 75 ac e8 34 e0 b9 ff 48 8b 74 24 28 48 8b 7c 24 30 e8 95 a5 92 ff e9 e5 fd ff ff e8 1b e0 b9 ff 90 <0f> 0b 90 e9 59 f9 ff ff e8 0d e0 b9 ff 4c 89 e2 48 b8 00 00 00 00 [ 857.349398][T17052] RSP: 0018:ffffc900043afa38 EFLAGS: 00010246 [ 857.352341][T17052] RAX: 0000000000080000 RBX: ffff8880532d6f78 RCX: ffffc9000c471000 [ 857.356090][T17052] RDX: 0000000000080000 RSI: ffffffff824e2ec5 RDI: ffff888024dd8000 [ 857.360035][T17052] RBP: ffffc900043afb60 R08: 0000000000000007 R09: 0000000000000000 [ 857.363958][T17052] R10: 0000000000000008 R11: 0000000000000000 R12: 0000000000000008 SYZFAIL: failed to recv rpc [ 857.367536][T17052] R13: 0000000000000000 R14: ffffed100a65adeb R15: 0000000000000000 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 857.372964][T17052] FS: 0000000000000000(0000) GS:ffff88809724c000(0063) knlGS:00000000f5464b40 [ 857.377520][T17052] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 857.380844][T17052] CR2: 000000002dd24220 CR3: 0000000058ac7000 CR4: 0000000000352ef0 [ 857.384826][T17052] Call Trace: [ 857.386585][T17052] [ 857.388141][T17052] ? __pfx_shmem_evict_inode+0x10/0x10 [ 857.390573][T17052] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 857.393380][T17052] ? find_held_lock+0x2b/0x80 [ 857.395447][T17052] ? evict+0x37e/0xad0 [ 857.397571][T17052] ? evict+0x37e/0xad0 [ 857.400036][T17052] ? __pfx_shmem_evict_inode+0x10/0x10 [ 857.403183][T17052] evict+0x3c2/0xad0 [ 857.405058][T17052] ? find_held_lock+0x2b/0x80 [ 857.407157][T17052] ? __pfx_evict+0x10/0x10 [ 857.409223][T17052] ? iput.part.0+0x5fd/0xf50 [ 857.411357][T17052] iput.part.0+0x605/0xf50 [ 857.413469][T17052] ? __pfx_inode_just_drop+0x10/0x10 [ 857.415874][T17052] iput+0x35/0x40 [ 857.417601][T17052] dentry_unlink_inode+0x2a1/0x490 [ 857.420156][T17052] __dentry_kill+0x1d0/0x600 [ 857.422913][T17052] finish_dput+0x76/0x480 [ 857.425205][T17052] dput.part.0+0x456/0x570 [ 857.427499][T17052] dput+0x1f/0x30 [ 857.429344][T17052] __fput+0x519/0xb40 [ 857.431154][T17052] ? _raw_spin_unlock_irq+0x23/0x50 [ 857.434875][T17052] task_work_run+0x150/0x240 [ 857.437122][T17052] ? __pfx_task_work_run+0x10/0x10 [ 857.439579][T17052] exit_to_user_mode_loop+0x100/0x4a0 [ 857.442461][T17052] __do_fast_syscall_32+0x578/0x8c0 [ 857.444530][T17052] do_fast_syscall_32+0x32/0x70 [ 857.446273][T17052] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 857.448340][T17052] RIP: 0023:0xf7fe6f6c [ 857.449604][T17052] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 857.458192][T17052] RSP: 002b:00000000f546450c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 857.462110][T17052] RAX: 0000000080000000 RBX: 0000000080000000 RCX: 0000000000ff5000 [ 857.466155][T17052] RDX: 0000000000000003 RSI: 00000000000ec071 RDI: 00000000ffffffff [ 857.470008][T17052] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 857.473658][T17052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 857.476759][T17052] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 857.480189][T17052] [ 857.481484][T17052] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 857.484926][T17052] CPU: 1 UID: 0 PID: 17052 Comm: syz.1.3110 Tainted: G L syzkaller #0 PREEMPT(full) [ 857.490182][T17052] Tainted: [L]=SOFTLOCKUP [ 857.492240][T17052] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 857.496955][T17052] Call Trace: [ 857.498729][T17052] [ 857.500137][T17052] dump_stack_lvl+0x100/0x190 [ 857.502611][T17052] vpanic+0x552/0x970 [ 857.504421][T17052] ? __pfx_vpanic+0x10/0x10 [ 857.506232][T17052] panic+0xd1/0xe0 [ 857.507700][T17052] ? __pfx_panic+0x10/0x10 [ 857.509440][T17052] check_panic_on_warn.cold+0x19/0x34 [ 857.511499][T17052] ? shmem_evict_inode+0x8e6/0xbd0 [ 857.513503][T17052] __warn.cold+0x191/0x348 [ 857.515339][T17052] __report_bug+0x296/0x3d0 [ 857.517289][T17052] ? shmem_evict_inode+0x8e6/0xbd0 [ 857.519518][T17052] ? __pfx___report_bug+0x10/0x10 [ 857.521752][T17052] ? find_held_lock+0x2b/0x80 [ 857.523681][T17052] ? __lock_acquire+0x4a5/0x2630 [ 857.525678][T17052] ? shmem_evict_inode+0x8e6/0xbd0 [ 857.527674][T17052] report_bug+0xb2/0x220 [ 857.529330][T17052] ? shmem_evict_inode+0x8e6/0xbd0 [ 857.531380][T17052] handle_bug+0x16a/0x2a0 [ 857.533151][T17052] exc_invalid_op+0x17/0x50 [ 857.535044][T17052] asm_exc_invalid_op+0x1a/0x20 [ 857.537112][T17052] RIP: 0010:shmem_evict_inode+0x8e6/0xbd0 [ 857.539381][T17052] Code: fe e8 ee da b9 ff 45 85 ff 75 ac e8 34 e0 b9 ff 48 8b 74 24 28 48 8b 7c 24 30 e8 95 a5 92 ff e9 e5 fd ff ff e8 1b e0 b9 ff 90 <0f> 0b 90 e9 59 f9 ff ff e8 0d e0 b9 ff 4c 89 e2 48 b8 00 00 00 00 [ 857.546998][T17052] RSP: 0018:ffffc900043afa38 EFLAGS: 00010246 [ 857.549411][T17052] RAX: 0000000000080000 RBX: ffff8880532d6f78 RCX: ffffc9000c471000 [ 857.552649][T17052] RDX: 0000000000080000 RSI: ffffffff824e2ec5 RDI: ffff888024dd8000 [ 857.556305][T17052] RBP: ffffc900043afb60 R08: 0000000000000007 R09: 0000000000000000 [ 857.559492][T17052] R10: 0000000000000008 R11: 0000000000000000 R12: 0000000000000008 [ 857.562664][T17052] R13: 0000000000000000 R14: ffffed100a65adeb R15: 0000000000000000 [ 857.565829][T17052] ? shmem_evict_inode+0x8e5/0xbd0 [ 857.567817][T17052] ? shmem_evict_inode+0x8e5/0xbd0 [ 857.570102][T17052] ? __pfx_shmem_evict_inode+0x10/0x10 [ 857.572653][T17052] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 857.575227][T17052] ? find_held_lock+0x2b/0x80 [ 857.577090][T17052] ? evict+0x37e/0xad0 [ 857.578673][T17052] ? evict+0x37e/0xad0 [ 857.580256][T17052] ? __pfx_shmem_evict_inode+0x10/0x10 [ 857.582401][T17052] evict+0x3c2/0xad0 [ 857.583944][T17052] ? find_held_lock+0x2b/0x80 [ 857.585800][T17052] ? __pfx_evict+0x10/0x10 [ 857.587541][T17052] ? iput.part.0+0x5fd/0xf50 [ 857.589500][T17052] iput.part.0+0x605/0xf50 [ 857.591460][T17052] ? __pfx_inode_just_drop+0x10/0x10 [ 857.593798][T17052] iput+0x35/0x40 [ 857.595477][T17052] dentry_unlink_inode+0x2a1/0x490 [ 857.597530][T17052] __dentry_kill+0x1d0/0x600 [ 857.599396][T17052] finish_dput+0x76/0x480 [ 857.601172][T17052] dput.part.0+0x456/0x570 [ 857.602928][T17052] dput+0x1f/0x30 [ 857.604381][T17052] __fput+0x519/0xb40 [ 857.606009][T17052] ? _raw_spin_unlock_irq+0x23/0x50 [ 857.608286][T17052] task_work_run+0x150/0x240 [ 857.610348][T17052] ? __pfx_task_work_run+0x10/0x10 [ 857.612547][T17052] exit_to_user_mode_loop+0x100/0x4a0 [ 857.614700][T17052] __do_fast_syscall_32+0x578/0x8c0 [ 857.616643][T17052] do_fast_syscall_32+0x32/0x70 [ 857.618592][T17052] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 857.620943][T17052] RIP: 0023:0xf7fe6f6c [ 857.622548][T17052] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 857.630443][T17052] RSP: 002b:00000000f546450c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 857.633633][T17052] RAX: 0000000080000000 RBX: 0000000080000000 RCX: 0000000000ff5000 [ 857.636665][T17052] RDX: 0000000000000003 RSI: 00000000000ec071 RDI: 00000000ffffffff [ 857.639704][T17052] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 857.643100][T17052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 857.646569][T17052] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 857.649650][T17052] [ 857.651651][T17052] Kernel Offset: disabled [ 857.653104][T17052] Rebooting in 86400 seconds..