last executing test programs: 3m16.275472496s ago: executing program 2 (id=654): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0xd8, &(0x7f0000000580)=ANY=[@ANYBLOB="ffffffffffff0180c200000e86dd60922d9600a23aff00000000000000000000ff0aac1414aaff020000000000000000000000000022030190780800000069e183fd00042b01fc010000000000000005000000000001fe8800000000000000000000000002013a06040100082004fe8800000000000000000000000000010aa18c6ef405c29ba2b3d19392e2c18c2cfd1d781fb030091ff40c5c5801c42680e25465316c11af2003253c2379b0679008dc0a1f7a102aefd8dd1577bde0613899921d30c103e5fece0ee61e3838e4f9be03b2e66cfb33458a"], 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x87, @remote, 0x7}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x21, 0x0, &(0x7f0000000080)) sendto$inet6(r1, 0x0, 0x7a, 0x880, &(0x7f0000000000)={0xa, 0xcaa1, 0xffffff7c, @mcast2, 0xd}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000011c0)='/sys/power/pm_test', 0x82, 0x10a) io_setup(0x4fe, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000180)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0xf, r3, &(0x7f0000000000)="46cac791", 0x4, 0x9, 0x0, 0x0, r3}]) r5 = fsopen(&(0x7f0000000040)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x8, 0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 3m16.10512024s ago: executing program 2 (id=657): ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000380)={"1b8004f9", 0x0, 0x5, 0x2, 0x0, 0x0, "f759e10000001000000000fc6300", "01be9100", "0600", "17ff00", ["8bada940edff000a00", '\x00', "000000ff0000000000000020", "0000000000000000000100"]}) membarrier(0x10, 0x0) r0 = io_uring_setup(0x7a58, &(0x7f0000000080)={0x0, 0x743e, 0x0, 0x2, 0x68}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a) (fail_nth: 2) 3m15.99340694s ago: executing program 2 (id=658): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x50, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x16, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x8, 0x98ca}, @sack_perm={0x4, 0x2}, @eol, @fastopen={0x22, 0x10, "8f02ae5e182f886a0f7a726fe76f"}, @sack={0x5, 0xa, [0x220, 0x130c]}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec81432bcfdfea9"}]}}}}}}}}, 0x0) 3m15.843560899s ago: executing program 2 (id=659): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500000001000010400000010ab000000000000006c79", @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r1, @ANYBLOB="080004007f00"], 0x50}}, 0x0) r2 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0xffffffffffffffff}) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5421, &(0x7f0000000440)=0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003101a08, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee01) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x103900, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) connect$bt_rfcomm(r1, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) close(r1) r4 = socket$alg(0x26, 0x5, 0x0) inotify_init() inotify_add_watch(0xffffffffffffffff, &(0x7f0000000380)='.\x00', 0x8200004d) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40100, 0x8) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x641, 0x800002e, r5, 0x0) fcntl$notify(r5, 0x402, 0x1a) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x16a1c7, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x100, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x5}, {0x6, 0x3}, {0x1, 0x7}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0xc804}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfff3, 0x7}, {0x0, 0xfff1}, {0xa, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4006}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40010) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) 17.779901409s ago: executing program 0 (id=1583): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000006a00010000000000000000000000000000000000080001000200000008"], 0x28}}, 0x0) 17.691210148s ago: executing program 0 (id=1584): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6f726f75ff0f69643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000004, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x5cd63000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)={0x270, 0x0, 0xfffffffffffffff9, [{{0x0, 0x0, 0x1, 0x1, 0x4, 0x2d9c, {0x6, 0x4, 0x3, 0x7fffffff, 0xfffffffffffffffa, 0x9, 0x4, 0x2fd4, 0x5, 0xc000, 0x14a, r2, 0x0, 0xffffff80, 0x5}}, {0x3, 0xecc, 0x1, 0x0, ')'}}, {{0x6, 0x1, 0x0, 0x8, 0x8, 0xa1, {0x0, 0x9, 0x2, 0x2, 0x2, 0x3, 0x2000093, 0x6, 0x80d7, 0x6000, 0x7, r2, 0x0, 0xe7b1, 0x4}}, {0x2, 0x3, 0x85, 0x5, '\x02\xa3HK\x19yd\x1d\xe0\xe3\xf8\xed\xe6\xa9\x01\x127\xf1\x812\x116nK|\xa7\xcc$\xab\xb2\xf3 \x01\n<4K\xdb1\xad\xae\xdbm\xf2\xb8)\x89\x80\xa9\xdb\xbfhN]\xc1:1\xdc=n^2\xcf\x8a\xa8\xcfgt\xf7\vv4\x18\xcd69\xb2\xd2\xceYE\xde\xfe\x85\xd9R$\x18\xc7^$\x14\xe6\xec\xa1\x98G\xec\a\x10s\xf5z\xbdl\xfftY\xd9\xa6\xc1\xa6\x1c\x93\x06zS\x98\xff\xa7\xa5U\xd5\x0fM\x95\xd53=\x81\fhJ'}}, {{0x6, 0x1, 0x16, 0x5, 0x8, 0x6, {0x4, 0x5, 0x5, 0x9, 0x10, 0xfffffffffffffc01, 0x9, 0x0, 0xffffffff, 0xa000, 0x2ec5, 0x0, 0x0, 0x5, 0x3206}}, {0x3, 0x3, 0x1, 0x9, '\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r3, &(0x7f0000000100)=""/134, 0x86) getdents64(r3, 0x0, 0x0) 16.683278004s ago: executing program 0 (id=1591): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) 16.610853464s ago: executing program 0 (id=1593): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysv\x00', 0x4011, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys_mount\x00', 0x80002, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000380)={0x8, 0x80000001}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2b, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000300)='./sys_mount/block/nullb0/queue/rotational\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/block/nullb0/queue/rotational\x00', 0x2, 0x0) write$UHID_INPUT(r1, &(0x7f00000004c0)={0x8, {"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", 0x1000}}, 0x1006) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000afafffd04000400000000000900020073037a31000000000d000300686173683a6e657421aa0590d953d4176e2014010caef6dbffb64e5612e9ed3e740f39559cb5d2545d28e73778b84a745332cc4e091faa2d72bd6cdbbe7f55329f0f57cc96f24ecf68867e5994c28f167eadf65699c5cf35f76289201f955cb68eb958ecf1ea8fa15d3f6c49b8f00c576506eaad735483969928e114f9a91f5c61770ed9131ece9ce206d5669d26b34ccc35e9466c92a25135fad25fd5d9fb"], 0x54}, 0x1, 0x0, 0x0, 0x48080}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000000000010008b105868e0d403b3c529216c28c6b718ed643c0d73922068f3bd1511cbe865e538f35887900defb0de156d6351a9eb6852a64092c6da993a6164bd89dbad8eed1e358264457eeb07fb1c59e", @ANYRESHEX=r0, @ANYRESDEC, @ANYBLOB="028500b2f6a8bdd800c5a977bc3ebf8fd3a38335f1af3eb45bc4ba67264f61e6557ad1c7520672b2a0bd84450b730995c056e922c9e8c9946e40d0764e84c956b8009f6bdc341793e59f2e0f68d1f3f99ef94cb61c56ef168b4c638f8eb7cfff8d826d8fd22f411765d3b76f15f27699b135cccc83db4d6c09c0c54c0787db5cf8fc1a534d3387ce32c5a4231e2d33898c92070360d89e5a"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r3, @ANYBLOB="dd5e683600"/24, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4}, 0x38) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x4001, 0x3, 0x4e4, 0x0, 0x0, 0x148, 0x0, 0x148, 0x450, 0x240, 0x240, 0x450, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {}, [@common=@unspec=@mark={{0x2c}, {0x400, 0x4}}, @common=@inet=@recent0={{0xf4}, {0x20000000, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @multicast1, 0xff000000, 0xff000000, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0xa, 0x2, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xbb02, 0x2b, 0x10, 'syz1\x00', {0x6182}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x540) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="963b00000906010200000000000000000000000009000209000000000000000779bd0100070000001c000780180001801400bc40"], 0x44}, 0x1, 0x0, 0x0, 0x320088d6}, 0x4000080) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="020000050500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) 14.060123156s ago: executing program 0 (id=1600): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6f726f75ff0f69643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000004, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x5cd63000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') 13.750129589s ago: executing program 33 (id=1600): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6f726f75ff0f69643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000004, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x5cd63000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') 5.156825304s ago: executing program 1 (id=1623): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c383032313100fce377576dbc4414a90ab8eabccfbae90bbf164548343e4358489eb757c92073182da304b7a4854579f095813929dfab79b8db0131df9e0349e914a8a86a4e9dfa2a4c0d3da7722154be6477d61c8ec2882988fc44d7d21a6cbd4c0ea5de21e6e893c139434789e872e11a7ecc92e1426e277ff43c5c6c6eef75520000"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x19, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000006a000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="763894147583ddd056fea56a8800", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x15, &(0x7f0000000040), 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file3\x00', &(0x7f0000000000)='erofs\x00', 0x0, &(0x7f0000000380)='acl') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ec0)={r8, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000c00)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000c40), &(0x7f0000000c80)=[0x0, 0x0], 0x0, 0x78, &(0x7f0000000cc0)=[{}, {}], 0x10, 0x0, 0x0, &(0x7f0000000d40), 0x8, 0x13, 0x8, 0x8, &(0x7f0000000d80)}}, 0x10) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_WRITEV_FIXED={0x3d, 0x2, 0x4004, @fd, 0x8000, 0x0, 0x0, 0x18, 0x0, {0x2, 0x0, 0xfb, '\x00', 0x0, 0x401}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f00001c7000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r10 = userfaultfd(0x80001) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r10, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r12, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x24) getsockopt$bt_hci(r1, 0x84, 0x81, 0x0, &(0x7f00000010c0)) 3.980614614s ago: executing program 1 (id=1627): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000040)={0x640, 0x300, 0xa0, 0x40, 0x100, 0x1, 0xf, 0x2, {0x1ff, 0x5}, {0x5, 0x7}, {0x3ff, 0x4}, {0x4, 0x8, 0x1}, 0x3, 0x0, 0x7, 0xfe9b, 0x1, 0x0, 0x4, 0x10000, 0x4, 0x0, 0x10000, 0x3, 0x8, 0x4, 0x1, 0x5}) (async) ioctl$FBIOPUTCMAP(r0, 0x4605, 0x0) (async) unshare(0x400) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYBLOB="000100"/20, @ANYRESHEX=0x0, @ANYRES32, @ANYRESOCT=r0], 0x50) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newtaction={0xe60, 0x30, 0x1, 0x0, 0x0, {}, [{0xe4c, 0x1, [@m_ct={0x6c, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x2a, 0x6, "0e92d32102a727c64628a647a5372beda06c285589787e593fe4de1f4bef2623964b1537fe1e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_police={0xddc, 0xb, 0x0, 0x0, {{0xb}, {0xcc0, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x101, 0x10000000, 0x6, 0x10000, 0x101, {0x10, 0x2, 0xc, 0xffff, 0x2, 0xac0e}, {0x9, 0x0, 0x7f, 0x4, 0x1, 0x5}, 0x7ff, 0x7d5, 0x2}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x1400000, 0x4, 0x637, 0x3, 0x6, 0x0, 0xffffffff, 0x1, 0x7, 0x9, 0x26f, 0x1, 0xfffff7c5, 0xfffffffe, 0xfffffff8, 0x81, 0x0, 0x40, 0x2, 0x9, 0x8, 0x3, 0x6ac, 0x9, 0x8007, 0x4, 0x6, 0xd, 0x8, 0x7, 0x1, 0x9, 0x7, 0x7, 0x8c, 0xb1, 0x2e8a, 0x4, 0x5, 0x100, 0x93c, 0xfffffff8, 0x1, 0x80000001, 0x40, 0xfffffeff, 0x9, 0x6, 0x5, 0x6, 0xb483, 0x7, 0x6, 0x1, 0x43e3, 0x0, 0x3, 0x4, 0x4, 0xfffffff9, 0x3, 0xb, 0x9, 0xe, 0x800, 0xe7, 0x3, 0xb7ac, 0x100, 0x82, 0x9a38, 0xb982, 0xd1c, 0x9, 0xffff, 0x10000, 0x6, 0x7, 0xa, 0x4, 0x40, 0x401, 0x6, 0x40000000, 0x3df, 0x3, 0x0, 0x9, 0x4, 0x8, 0x0, 0x2, 0xfffffff0, 0xc, 0x10001, 0x6, 0x7, 0x10001, 0x2d5, 0x7ff, 0x4, 0x6, 0x3, 0x1, 0x101, 0x4, 0x3, 0x4, 0x8, 0x1, 0x417, 0x8, 0x4, 0xffffffff, 0x2b1, 0x0, 0xffffffda, 0x0, 0x3, 0x6, 0x8, 0x8000, 0x3, 0xf, 0x9, 0xfffffff7, 0x7, 0x1, 0x431, 0x8, 0xfffffff8, 0xb, 0x18000000, 0x2, 0x4, 0x8001, 0x0, 0xffffffff, 0x7, 0xfffffff7, 0x5, 0x5, 0x300, 0x40, 0x3, 0xa9, 0xe0000000, 0xc8f, 0x3, 0xd, 0x3, 0x2, 0x3, 0x4, 0x8000, 0x9, 0xffff5067, 0x7f, 0x9, 0x84, 0x3, 0x7, 0x1, 0x7, 0x8, 0x8, 0x1, 0x2408, 0xc, 0x5, 0x1e9, 0x7, 0x0, 0x8, 0x2, 0x8, 0xab82, 0x7ffffffc, 0xf15a, 0xb, 0x7, 0xa83, 0x401, 0x7f, 0x0, 0xfffffffc, 0xa865, 0x2, 0x8, 0x310d, 0x5, 0x0, 0x6, 0x40000000, 0x4, 0x8, 0x5, 0xfffffffa, 0x8, 0x3, 0x9, 0xfff, 0x4f6e, 0xec, 0x0, 0xfffffff7, 0x8461, 0x6, 0x5, 0x1, 0xe0, 0x8001, 0x2, 0x7, 0x8, 0x4, 0x6, 0x80000001, 0xffffffff, 0xe, 0x6efd, 0x8, 0x7fff, 0x1, 0x8, 0xd7, 0xb, 0x8001, 0x80, 0xa11, 0xfffffff7, 0x4, 0x4742, 0x5, 0xc419, 0x380, 0x5, 0x6, 0x10001, 0x9, 0xffffff74, 0x2, 0xf, 0xffffffff, 0xffffff7f, 0xffffff01, 0x5, 0x80000001, 0x80000001, 0x1, 0x7, 0x5, 0x10001, 0xf85e, 0x9e8c]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc2c8, 0xb, 0x5, 0x0, 0x1, 0x5, 0x1, 0x3, 0x8, 0xf7, 0x7, 0x7, 0x4583, 0x9, 0x1, 0x1, 0x8, 0xfffffffe, 0x6, 0x1, 0x101, 0x5, 0x9, 0x6, 0x140, 0x4, 0xc, 0x5, 0x8, 0x7ff, 0x6, 0x3, 0x7, 0x5, 0x3823, 0x8, 0x7, 0x7, 0x3, 0x3, 0x6, 0x3, 0x4, 0x401, 0x7, 0x80, 0x1000, 0x0, 0x0, 0x10000, 0x0, 0x5, 0x1, 0x4, 0x2, 0x9, 0x8, 0x0, 0x0, 0x8f6, 0x5, 0x937e, 0x8a37f189, 0x2, 0xe3, 0x3, 0x80000000, 0x9, 0x1, 0xff, 0x0, 0x7, 0x7, 0x3, 0x8fb, 0x1, 0x5, 0xfffffff4, 0x5, 0xfb, 0xd, 0x7, 0x1000, 0xf, 0xa, 0x5, 0x4, 0x2, 0x3, 0x2, 0x6, 0x8, 0x2, 0x0, 0x10000, 0x100, 0x8, 0x8, 0x5, 0x3, 0x8, 0x8, 0x1, 0x1, 0x10, 0x6, 0x5, 0x6, 0x10, 0x4, 0xd, 0x57d, 0x1, 0x0, 0x7ff, 0x3, 0xff, 0x400, 0xdf, 0x1, 0x4, 0x50d8fa3a, 0x9, 0x64c, 0x0, 0x8, 0x4, 0x4, 0x4, 0x7, 0xfffffffc, 0x1, 0x7, 0x2, 0x6, 0xffffff00, 0x7ff, 0x80000001, 0x7b0, 0x4, 0xd9, 0xc, 0x0, 0x4, 0x2, 0xa4, 0x0, 0xe, 0x5, 0x2, 0x4, 0xf, 0x9, 0x9a0, 0x9ad, 0xe, 0xe, 0x3, 0x400, 0xffff, 0xc, 0x0, 0x9, 0x9, 0x5, 0x1ac03c70, 0x3, 0x91, 0x6, 0x5, 0x100, 0xf, 0xb064, 0x800, 0x7, 0x8, 0xff, 0x4c6d9f0e, 0x0, 0x80, 0x3, 0xffffffff, 0x2, 0x7, 0x4, 0xe, 0x4a, 0x28000000, 0x0, 0x5, 0xfff, 0x3ff, 0x3, 0xbff, 0x0, 0x2, 0x6, 0x1, 0x36, 0xc81, 0xa, 0xd, 0xf37, 0x1, 0x3, 0x9, 0xfff, 0x40, 0x2, 0x5, 0x1, 0x4, 0x8, 0x80000001, 0x5ce6, 0x1, 0x18, 0x6, 0x0, 0x2, 0x81, 0x3, 0x75f, 0x6, 0xe, 0xd2, 0x9, 0x9, 0xfffffffe, 0x0, 0x4, 0x8, 0x0, 0x9, 0xb, 0x8, 0xa, 0x8, 0x5c, 0x1, 0xa76, 0x0, 0x1, 0x1, 0x1, 0xfff, 0x8, 0x5, 0x846d, 0x4, 0xb, 0x1, 0x1ff, 0x3, 0x9b77, 0x738]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x0, 0xfffffffb, 0x90fd, 0x4, 0x8, 0x200, 0x9, 0x200, 0x101, 0x7, 0xa2b5, 0x287a6538, 0x3f5, 0x3, 0x8, 0x1, 0xb, 0x8, 0x7ff, 0xf, 0x2, 0x1, 0xfffff077, 0x1, 0x7fffffff, 0x2, 0xb, 0x9, 0x80000001, 0x6, 0xfffffff7, 0x8, 0x10, 0x5, 0x1, 0x9, 0x9, 0x9, 0x81, 0x3, 0x4, 0x1, 0xa5, 0x43, 0x8, 0x8001, 0x0, 0x2, 0x7fffffff, 0x7, 0xa, 0x6, 0x7, 0x40, 0x8e2, 0x1000, 0x47, 0x5, 0x80000001, 0x1ff, 0x1, 0x240, 0x5, 0x0, 0x81, 0x8c9, 0x3, 0x7, 0xfffffffc, 0x9, 0x8, 0xef, 0x0, 0x5, 0x50b8, 0x2, 0x3, 0x9, 0x6, 0x2, 0xd, 0x1, 0x3ff, 0x800, 0xffffff7f, 0x47b, 0x0, 0x9, 0x5, 0x1200000, 0x5, 0x28e, 0x8001, 0x3ace, 0x7, 0x5, 0xa0af, 0x1, 0xf4, 0x9, 0x3, 0x80, 0x0, 0x1000, 0x9, 0x8, 0x7, 0x1, 0x4, 0x5, 0x5, 0x9, 0x80, 0x4, 0x8000, 0x80, 0x6, 0x400, 0x0, 0x5, 0x1f, 0x8, 0xfff, 0x7, 0x25, 0x8, 0x8001, 0xf, 0x6, 0x8, 0x4, 0x40, 0x4, 0xf8ac, 0x4, 0x80000001, 0x5, 0xa, 0x7, 0x4, 0x8, 0x0, 0x6, 0x0, 0x9, 0x1, 0x2a4, 0x400, 0x3a95, 0x6, 0x8, 0x1000, 0x408160fd, 0x6, 0x8, 0x7, 0x2, 0x4, 0x40400000, 0x4, 0x3b8a, 0x46c, 0x1, 0x10, 0x8, 0x401, 0x7, 0x80000000, 0x5, 0x0, 0xfff, 0x2, 0xfffffff7, 0x2, 0x0, 0x3, 0xfe9f, 0x2, 0xb286, 0x0, 0xffff, 0x9f, 0x86, 0x4, 0x7fffffff, 0x1, 0xe5e, 0x6, 0xeb32, 0x6, 0x7, 0x4, 0x98, 0x9, 0x7ff, 0xfffffffc, 0x7, 0xd, 0x8001, 0x1, 0xfffffffd, 0x2, 0x0, 0x3, 0x0, 0x4, 0x9, 0x3, 0xebb9, 0x5, 0xffffd2da, 0xfffffffe, 0x6, 0x6, 0x5, 0x5, 0x0, 0x6, 0x60000, 0x0, 0x1, 0x1, 0xfffffffb, 0x400, 0xffa8, 0x8, 0x1, 0x0, 0x29c7, 0x7fffffff, 0x2, 0x3, 0xfffffffa, 0xffffffac, 0x5, 0x3, 0x45, 0x7f, 0xfe0, 0x3, 0x3, 0x267dbb26, 0x1, 0x0, 0x2, 0x8, 0x0, 0x9, 0x252, 0x9, 0xd30, 0x5, 0xffffffff, 0x328, 0xe]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fff}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x20000000, 0x2, 0x9, 0x78, {0x0, 0x2, 0xffff, 0xf, 0x6, 0x100}, {0x7, 0x2, 0x3, 0x0, 0xc3}, 0x7, 0x40, 0x592}}]]}, {0xf1, 0x6, "ead4f84defab972349915bb42fec006efb6b061a9c5ca3d6f0e6ea84422b5aa96f94bef5e44aa6ace5ea43177dae36e5c9c2bb6e8df5837d840d9cd548b13fe5add35e94d498c195b4e92505207f61f59fec945042c5f9b87a63b31d844497336f1fdf995c9aeaef3674691f9be5d03ddd50bdccecebfdd7064a101f425944fbd08ddae8a7995e46ed9ab9424145d516af21f2d27e5b820cff3233b4b6dd76af16a7f97e92d6a3aa122371130c4ff8d9db49eb709e92f5eb40f6dc6f92caa74ce68aab8274651ba07eb8478f33b8699a43a5ef19210716c5e02352085577cdb1f35ed1f1d6aa4891d879b9270d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0xe60}, 0x1, 0x0, 0x0, 0x804}, 0xc0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@cgroup, 0x36, 0x0, 0x9, &(0x7f0000000200)=[0x0], 0x1, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0), 0x0}, 0x40) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) (async) setreuid(0xee00, 0x0) (async) write$sequencer(0xffffffffffffffff, 0x0, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="18020000038100000000000000000000850000002a0000001801000020786c2500000000000000000007010000f8ffff7fb702000008000000b703000001000000850000009b00008972382d1c49729a83ec80c79e9903ab009500000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) (async) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="6d616e676c650000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fa93000000ba15e074b02eb37f550116eba1ff00009c762c7b7d1e0fef106d3cacd9d26ba07fa9fe35bbfc225f3086f4dee2c7ca3611b88507a472e06cddf73c8d4f7c78a0c1c1deee12cbbfca8fe38962849e5fe55f422ff75e6e6e633ca3a2"], 0x54) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', &(0x7f00000004c0), 0x1200004, 0x0) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xf000, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x13) chdir(0x0) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) (async) syz_io_uring_setup(0x4b5, 0x0, 0x0, 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000180)={0x0, 0x1, r1, 0x5, 0x80000}) 3.275481651s ago: executing program 3 (id=1631): syz_io_uring_setup(0xf08, &(0x7f0000000540)={0x0, 0x3295, 0x400, 0x20002, 0x1000051}, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd, 0x0, 0x0, 0x0, {0x259a}, 0x1}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000200)=0x104) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/106, 0x6a}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="780000000206010100000000000000000a00000005000400020000000900020073797a32000000002c00078008000640000000da08001340000007ff0800134000001000050015000c0000000800124000000005050005000a000000050001000600000011000300686173683a6e65742c6e6574"], 0x78}, 0x1, 0x0, 0x0, 0x80820}, 0x80) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x24000000) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) setsockopt$packet_int(r3, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x402) 2.645090961s ago: executing program 3 (id=1632): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000380)={0x5, 0x100008b}, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000340)={0x200000, 0x1200000, 0x0, 0xb, 0x598a, 0x800a}) setpriority(0x1, 0x0, 0x3) r1 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x20, 0x1, 0x2ef}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x0, 0xdf9e32a0640bc3f8, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x7fff, 0x440, 0x3, 0xd, 0x36, {0x2, 0x80}, 0xcd, 0x3}}) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpriority(0x2, 0x0) r5 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="e0b9", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000100001000000000000000000b512000a20000000000a01040000000000000000020000000900010073797a300000000064000000120a01040000000000000000020000000900010073797a30000000000900020073797a30000000000800030000000004240004800c00010000000000000000010c0002"], 0xac}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) ioctl$UBLK_U_CMD_GET_DEV_INFO(r5, 0x80207502, &(0x7f00000003c0)={0x0, 0xffff, 0x40, &(0x7f00000000c0)=@ublk_ctrl_dev_info_existing}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @private=0xa010102}], 0x10) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc04c565d, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x3e, &(0x7f0000000880)="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"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) 2.401452924s ago: executing program 3 (id=1633): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1d, 0x2, 0x6) io_submit(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c0963fd5387259054870a3104532f35ddd94ceb7d373d0883a8af6cb12209d3df32fd07921152a083c1fa0a010e709fa3a41891fb2b29229885d97f2c04c215cc8d38315d189f1e3909a030f7c7309d803a8940e49210a3e0a5e799acb505098d71c06a36ec79fcc2e7c8ad0c459e84f3d06068af4ffdfa0b6eec4c87f255", @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf254a0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030020000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) r5 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'geneve0\x00', 0x5}, 0x18) write(r4, &(0x7f0000000300)='p:mygroup/myevent ./dumm', 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r6, 0x0, 0x0) write(r4, &(0x7f0000000400)='p:mygroup/myevent ./dummy:0x2', 0x1d) statx(r4, &(0x7f0000000540)='./trace/uprobe_events\x00', 0x4000, 0x7ff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r1, &(0x7f0000001d40)={&(0x7f0000000180)=@file={0x1, './dummy\x00'}, 0x6e, &(0x7f0000001840)=[{&(0x7f0000000240)="5e78b0902ce96cd570e2f7890157f9cc7607f6ece921ec5e13fc9a646c261bf6f02048bb5423bc3fdceccf98181bbdf7bbe2a44cea579eaa41613300d88057b378d82b3720d6e4f440a49e764f42e85fa156a52691ec6e99c2e23ac71e645dcc08b4c0a3c365523e91", 0x69}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="cd6f69b36921d751336a15329c3af122f538883b68887f3ea6ff657908db5097f43328fb361aec7ab5eea271975c26314daf3f11a80579929b9bac2c34a546028d266d898539f0d2707140324eb73c75b69c2ab6cd787cb0e3b059d12e6747045dadfc0a69538c88cd8b9925dbf7b9de34f07b5662333804e350e5417480ef56e099", 0x82}, {&(0x7f0000001780)="114c69f6152dc728f8154a405f987e791d3bdd495b7217a273273456f108e0243ab3547d5399b9a6fd4118996738fda075ab0c9edbd02ce560d8bdc8", 0x3c}, {&(0x7f00000017c0)="d52c55736856cac1f9ff8a5f179ea73e92197822ab9ca328eeb4931e596bcf3af839bae18eb6d11cf802a21bde4b1c85271521982addfddd05d99e1ae1f28d56f6a9fc88c37a82666f6456931abaa4570ffde5277d74a71924e77884ceee79351f83e28e11c607412676471361e58d944d5876b631df", 0x76}], 0x5, &(0x7f0000001980)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="c2e9000001b07f0000005d0000fa02000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="2c0000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r3], 0xa4, 0x4000801}, 0x40040) r8 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x2000, 0x2, 0xa7}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_setup_io_uring(0x6a36, &(0x7f0000000480)={0x0, 0xd8e, 0x1000, 0x0, 0x3cb, 0x0, r8}, &(0x7f0000000300)=0x0, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_submit(r12, r10, r11, 0x0) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) capset(0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r13 = syz_open_procfs$namespace(0x0, 0x0) setns(r13, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4009, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001880)=ANY=[@ANYBLOB="1400000010000100000000000000000005001a0a44000000060a010400000000000000000a0000010200010073797a30000000000900020073797a32000000000900010008d094af319f0a2d8dfabcce96d073797a31000000000c000580080001400000fbfb140000001100010000000000000000000100000a40a983a09db7fffc9e12dcea0e6c99b1b21c3c98e5ad8eadf9517cc11ac2593d7331a711392ab11aec25e0579b9e44a8d57c9d3ccacba09333da04cb7b3382b519a986edcf3f5650a2f45756a6435fed5cfdc1abf12bd8633d53cc5de22cb1cca673cac126e5cf"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 1.930577494s ago: executing program 3 (id=1635): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x0, 0x41) write(r0, &(0x7f0000000000)='3', 0x3e) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCSABS20(r1, 0x40044591, 0x0) mknod$loop(&(0x7f00000000c0)='./proc/thread-self/fail-nth/file0\x00', 0x4, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x0, './cgroup.cpu/cgroup.procs\x00'}, 0x6e) keyctl$clear(0x11, 0xfffffffffffffffd) listen(r2, 0xa) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) listen(r2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) 1.826214736s ago: executing program 1 (id=1636): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0xf0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) 1.172050762s ago: executing program 3 (id=1637): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b030000000000010902220001010080320904000001030000000921110100012217000705810340"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101302, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0xd0, 0x0, &(0x7f0000000300)=[@clear_death={0x400c630f, 0x1}, @increfs_done, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x50, 0x0, &(0x7f00000000c0)={@fda={0x66646185, 0x8, 0x0, 0xf}, @flat=@weak_binder={0x77622a85, 0x101}, @fd}, 0x0}, 0x1440}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@flat=@weak_handle={0x77682a85, 0x200a}, @fda={0x66646185, 0x6, 0x2, 0x40}, @fd}, &(0x7f00000002c0)={0x0, 0x18, 0x34}}, 0x1000}, @acquire_done={0x40106309, 0x2}], 0xa, 0x0, &(0x7f0000000400)="c2a16573245e21b95cfa"}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff0075089509"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x4, 0x0, 0x10000000, {0x40, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902, 0xfffffffc}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x0, 0x0, 0x82, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x2800, 0x3) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000004780)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007b00)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002e80)={0x28, 0x0, 0xfffffffffffffffa, {{0x1, 0xfffffffffffffffa}}}, &(0x7f0000002ec0)={0x60, 0xffffffffffffffda, 0x3a, {{0x0, 0x5, 0x0, 0xffffffffffffff5c, 0x40, 0x2, 0x3, 0x8}}}, &(0x7f0000002f40)={0x18, 0x0, 0x90000}, &(0x7f00000005c0)=ANY=[@ANYBLOB="160000000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r11, &(0x7f00000000c0), 0x8) setsockopt$bt_BT_DEFER_SETUP(r11, 0x112, 0x7, 0x0, 0x0) r12 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r13 = socket(0x10, 0x803, 0x0) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESDEC=r12, @ANYRESHEX=r6, @ANYRES16=r6, @ANYRES16=r13, @ANYRESDEC=r7], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x17, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRESDEC, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000", @ANYRES32=r14, @ANYBLOB="0000000000000000b70200000a000000850000008600000018110000", @ANYRES8=r10, @ANYRES16], 0x0, 0x10000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r13) 1.157506071s ago: executing program 4 (id=1644): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2fe4a74041c1ce1c}, 0x48) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) creat(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x145) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000bfd2b357620012", 0x32}], 0x1}, 0x0) (fail_nth: 1) 1.00951528s ago: executing program 4 (id=1638): r0 = socket$kcm(0x10, 0x5, 0x0) (async) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, 0x0, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000000c0)="83d2ff5f00000080d2b6db0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90c24d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000140)=@buf={0x3c, &(0x7f0000000000)="794af5bb731d158db41b2b2c4581e948c3c08772dfdccb5d13bd245a4be606b069d6286798601bfbfd09d0b35e492acd8f745b67d00103fc3f52674a"}) syz_init_net_socket$x25(0x9, 0x5, 0x0) 810.492487ms ago: executing program 4 (id=1639): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x800, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000003"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000b8a2010000000000a6020000f8ffffffb703000008000000b70400f3ffffffff84000000330000009500000009000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) r2 = syz_clone(0x200011, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r2) (async, rerun: 32) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) (rerun: 32) write$P9_RLERRORu(r3, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) (async) write$9p(r3, &(0x7f0000000040)="ea8a", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x5, 0x9, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @remote, 0x0, 0x7, 0x1, 0xfffffff9}}) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000400)={@private0={0xfc, 0x0, '\x00', 0x1}, r5}, 0x14) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000100)={0x6, 0x6, 0x2, 0x9, 0xffffffff, 0x44}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 720.609789ms ago: executing program 1 (id=1640): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) 640.525091ms ago: executing program 4 (id=1641): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./cfg\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./cfg/usb_gadget/g1/configs/c.1\x00', 0x17f) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/configs/c.1\x00', 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1000000001fe800001000000", @ANYRES32=r1], 0x10, 0x50}}], 0x1, 0x404c040) setrlimit(0x7, &(0x7f0000000000)) sendmmsg$inet(r2, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x43, 0x4000) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x13, 0x0, 0x0) clock_gettime(0x1, &(0x7f0000000040)) symlinkat(&(0x7f00000001c0)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./cfg/usb_gadget/g1/configs/c.1/eem.usb0\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@local, @in6=@ipv4={""/10, ""/2, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@private2}}, &(0x7f0000000400)=0xe4) r5 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, r6) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$nfs(&(0x7f0000000100)='configfs\x00', &(0x7f0000000280)='./cfg/usb_gadget/g1/configs/c.1/eem.usb0\x00', &(0x7f00000002c0), 0x60, &(0x7f0000000540)=ANY=[@ANYBLOB='4uid<', @ANYRESDEC=r4, @ANYBLOB=',euid>', @ANYRESDEC=r6, @ANYBLOB=',uid<', @ANYRESDEC=r7, @ANYBLOB=',permit_directio,dont_appraise,measure,fowner<', @ANYRESDEC, @ANYBLOB=',euid=', @ANYRESDEC, @ANYBLOB=',\x00']) add_key(&(0x7f0000000140)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018007b0000000500000000000000020000000000000000000209000010000000"], 0x0, 0x26}, 0x28) setsockopt$packet_int(r8, 0x107, 0xf, 0x0, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000100), 0x8000, 0x0) 535.285282ms ago: executing program 4 (id=1642): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r4}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400001f", @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r5, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 456.596232ms ago: executing program 1 (id=1643): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = openat$audio(0xffffff9c, &(0x7f0000000080), 0xfa33a8e30201ba74, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r5, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r5, &(0x7f0000000240)={0x78, 0x0, r6, {0x2000000007, 0x0, 0x0, {0x4, 0xffffffffffffffff, 0x55, 0x51d4, 0x0, 0x3, 0x2, 0x0, 0x1000000, 0x4000, 0xa0000000, r7, r8, 0x0, 0x0, 0x1000000}}}, 0x78) quotactl_fd$Q_GETINFO(r4, 0xffffffff80000500, r7, &(0x7f0000000100)) write$tun(r0, &(0x7f0000000480)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x31, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1d, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "b68ed34f131c03e57e518e4d20"}}}}, 0x3f) 292.93085ms ago: executing program 3 (id=1645): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2fe4a74041c1ce1c}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="84010000", @ANYRES16=r2, @ANYBLOB="010000000000ffdbdf250100000004000480080002000100000008000100000000000400088058010c8054000b8008000a008fee0000080009000000800008000a00afc3000008000a000000000008000a0000000000080009003b3ef5160800090090e5262608000a000000000008000a000000000008000a002b071b"], 0x184}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xf0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840, 0x42c04}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x24) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) creat(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x145) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000bfd2b357620012", 0x32}], 0x1}, 0x0) 200.321019ms ago: executing program 4 (id=1646): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[], 0xc8) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0xf0f03f, 0x6e}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x20004450) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$proc_mixer(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="50484f4e45494e0e0400000000000065272030303030303030301430303030303030303030300a4449474954414c310a"], 0x30) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b405f592196cd61a20fe534b0c02000034000000010000000000000600000000000000950000000000000000bf3fb6589c90737a597486369d72"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) openat$ptmx(0xffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r6, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x1, 0x0, 0x337740ff}, {0x6, 0x1, 0x12, 0xffffffff}]}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r6, r7], 0x2}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x4, &(0x7f0000000040)=0xb, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 79.994442ms ago: executing program 5 (id=1602): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000006a0001000000000000000000000000000000000008000100020000000800"], 0x28}}, 0x0) 0s ago: executing program 1 (id=1647): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000300), 0x3, r2}) r5 = syz_io_uring_setup(0x24, &(0x7f0000000040)={0x0, 0xff64, 0x400, 0x0, 0x3a8}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000480)) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r4, r3, r4], &(0x7f00000003c0), 0x0, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000180)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000300), 0x1, r8}) memfd_create(0x0, 0xb) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$inet6(0xa, 0x80001, 0x0) remap_file_pages(&(0x7f000053f000/0x1000)=nil, 0x3f, 0x0, 0x20, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, 0x0, 0x310) r10 = socket(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r12, {0x0, 0xc}, {0xffff, 0xffff}, {0x2, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x400}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xd}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x800}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x68}}, 0x40440c0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3}}}, 0x108) r13 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r13, &(0x7f00000000c0), 0x0, 0x70, 0x2) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x8, 0x2, 0x3, 0x3}, {0xfff7, 0xb, 0x8, 0x7}, {0xfc2, 0x0, 0x1, 0x15}, {0x0, 0xf, 0x7}, {0x2, 0x1a, 0x8, 0xfffffbff}]}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) kernel console output (not intermixed with test programs): hanging to 7 [ 202.875594][ T5814] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 202.877388][ T5814] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.877400][ T5814] usb 9-1: Product: syz [ 202.877408][ T5814] usb 9-1: Manufacturer: syz [ 202.877415][ T5814] usb 9-1: SerialNumber: syz [ 202.881309][ T5814] usb 9-1: config 0 descriptor?? [ 202.881766][ T9310] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 202.894395][ T5814] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input57 [ 203.099038][ T9317] Illegal XDP return value 1515903480 on prog (id 86) dev syz_tun, expect packet loss! [ 203.238798][ T9320] comedi comedi3: comedi_config --init_data is deprecated [ 203.247830][ T9320] i2c i2c-0: Failed to register i2c client anx7411 at 0x02 (-16) [ 203.347070][ T9310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.347408][ T9310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.352919][ T9326] erofs (device nbd3): cannot find valid erofs superblock [ 203.360127][ T9310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.360444][ T9310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.383319][ T5814] usb 9-1: USB disconnect, device number 9 [ 203.383436][ C2] xpad 9-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 203.936233][ T9342] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1154'. [ 204.310717][ T9350] syz.4.1158: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 204.324345][ T9350] CPU: 2 UID: 0 PID: 9350 Comm: syz.4.1158 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.324378][ T9350] Tainted: [L]=SOFTLOCKUP [ 204.324384][ T9350] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 204.324392][ T9350] Call Trace: [ 204.324397][ T9350] [ 204.324402][ T9350] dump_stack_lvl+0x100/0x190 [ 204.324422][ T9350] warn_alloc.cold+0x9e/0xb2 [ 204.324436][ T9350] ? __pfx_warn_alloc+0x10/0x10 [ 204.324455][ T9350] ? __kasan_kmalloc+0xaa/0xb0 [ 204.324468][ T9350] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 204.324485][ T9350] ? xskq_create+0x52/0x290 [ 204.324498][ T9350] ? do_sock_setsockopt+0xf3/0x1d0 [ 204.324513][ T9350] ? __do_fast_syscall_32+0x13a/0x8b0 [ 204.324529][ T9350] ? do_fast_syscall_32+0x32/0x70 [ 204.324550][ T9350] ? xsk_setsockopt+0x743/0xab0 [ 204.324563][ T9350] __vmalloc_node_range_noprof+0x123b/0x1420 [ 204.324584][ T9350] ? xsk_setsockopt+0x743/0xab0 [ 204.324600][ T9350] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 204.324615][ T9350] ? kasan_save_track+0x14/0x30 [ 204.324627][ T9350] ? __kasan_kmalloc+0xaa/0xb0 [ 204.324639][ T9350] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 204.324656][ T9350] ? xskq_create+0x52/0x290 [ 204.324669][ T9350] ? xsk_setsockopt+0x743/0xab0 [ 204.324681][ T9350] xskq_create+0x18f/0x290 [ 204.324695][ T9350] ? xsk_setsockopt+0x743/0xab0 [ 204.324711][ T9350] xsk_setsockopt+0x743/0xab0 [ 204.324722][ T9350] ? __pfx_aa_sk_perm+0x10/0x10 [ 204.324738][ T9350] ? __pfx_xsk_setsockopt+0x10/0x10 [ 204.324750][ T9350] ? find_held_lock+0x2b/0x80 [ 204.324764][ T9350] ? aa_sock_opt_perm+0x114/0x1e0 [ 204.324777][ T9350] ? __pfx_xsk_setsockopt+0x10/0x10 [ 204.324790][ T9350] do_sock_setsockopt+0xf3/0x1d0 [ 204.324807][ T9350] __sys_setsockopt+0x119/0x190 [ 204.324824][ T9350] __ia32_sys_setsockopt+0xbc/0x160 [ 204.324839][ T9350] ? __do_fast_syscall_32+0xb3/0x8b0 [ 204.324854][ T9350] ? lockdep_hardirqs_on+0x7d/0x110 [ 204.324869][ T9350] __do_fast_syscall_32+0x13a/0x8b0 [ 204.324887][ T9350] do_fast_syscall_32+0x32/0x70 [ 204.324903][ T9350] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 204.324917][ T9350] RIP: 0023:0xf7f88fec [ 204.324931][ T9350] Code: Unable to access opcode bytes at 0xf7f88fc2. [ 204.324936][ T9350] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 204.324955][ T9350] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000000000011b [ 204.324962][ T9350] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 204.324969][ T9350] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 204.324976][ T9350] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 204.324983][ T9350] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 204.324998][ T9350] [ 204.417944][ T9350] Mem-Info: [ 204.417978][ T9350] active_anon:1811 inactive_anon:3476 isolated_anon:0 [ 204.417978][ T9350] active_file:7357 inactive_file:13106 isolated_file:0 [ 204.417978][ T9350] unevictable:1000 dirty:19 writeback:0 [ 204.417978][ T9350] slab_reclaimable:6918 slab_unreclaimable:59382 [ 204.417978][ T9350] mapped:30186 shmem:1472 pagetables:1266 [ 204.417978][ T9350] sec_pagetables:303 bounce:0 [ 204.417978][ T9350] kernel_misc_reclaimable:0 [ 204.417978][ T9350] free:29114 free_pcp:17592 free_cma:0 [ 204.418030][ T9350] Node 0 active_anon:200kB inactive_anon:84kB active_file:140kB inactive_file:3880kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:1052kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8512kB pagetables:1420kB sec_pagetables:1116kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 204.418073][ T9350] Node 1 active_anon:7044kB inactive_anon:13820kB active_file:29288kB inactive_file:48544kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:119692kB dirty:76kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5656kB pagetables:3644kB sec_pagetables:96kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 204.418118][ T9350] Node 0 DMA free:1992kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0kB free_highatomic:0kB active_anon:16kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:16kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:324kB local_pcp:260kB free_cma:0kB [ 204.418177][ T9350] lowmem_reserve[]: 0 277 277 277 277 [ 204.418323][ T9350] Node 0 DMA32 free:17708kB boost:2048kB min:14676kB low:17832kB high:20988kB reserved_highatomic:0kB free_highatomic:0kB active_anon:184kB inactive_anon:76kB active_file:140kB inactive_file:3880kB unevictable:2000kB writepending:0kB zspages:4kB present:1032196kB managed:284624kB mlocked:0kB bounce:0kB free_pcp:10584kB local_pcp:4904kB free_cma:0kB [ 204.466051][ T9350] lowmem_reserve[]: 0 0 0 0 0 [ 204.466081][ T9350] Node 1 DMA32 free:96756kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:7044kB inactive_anon:13820kB active_file:29288kB inactive_file:48544kB unevictable:2000kB writepending:76kB zspages:2804kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:59872kB local_pcp:15332kB free_cma:0kB [ 204.466121][ T9350] lowmem_reserve[]: 0 0 0 0 0 [ 204.466144][ T9350] Node 0 DMA: 4*4kB (U) 13*8kB (UM) 5*16kB (U) 6*32kB (U) 3*64kB (U) 3*128kB (M) 2*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 1992kB [ 204.466236][ T9350] Node 0 DMA32: 43*4kB (UME) 38*8kB (ME) 77*16kB (UME) 188*32kB (UME) 48*64kB (UME) 14*128kB (UME) 8*256kB (UE) 2*512kB (ME) 2*1024kB (UM) 0*2048kB 0*4096kB = 17708kB [ 204.466358][ T9350] Node 1 DMA32: 1404*4kB (UME) 1082*8kB (UME) 438*16kB (UME) 227*32kB (UME) 152*64kB (UE) 57*128kB (UME) 38*256kB (UME) 15*512kB (UME) 9*1024kB (M) 6*2048kB (UM) 3*4096kB (UM) = 96768kB [ 204.466458][ T9350] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 204.466469][ T9350] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 204.466478][ T9350] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 204.466489][ T9350] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 204.466498][ T9350] 22833 total pagecache pages [ 204.466503][ T9350] 902 pages in swap cache [ 204.466508][ T9350] Free swap = 115432kB [ 204.466513][ T9350] Total swap = 124996kB [ 204.466517][ T9350] 524155 pages RAM [ 204.466521][ T9350] 0 pages HighMem/MovableOnly [ 204.466526][ T9350] 212107 pages reserved [ 204.466530][ T9350] 0 pages cma reserved [ 204.963075][ T8077] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 205.022938][ T5728] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 205.112679][ T8077] usb 5-1: Using ep0 maxpacket: 8 [ 205.115556][ T8077] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 205.119286][ T8077] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 205.121873][ T8077] usb 5-1: config 0 has no interface number 0 [ 205.121896][ T8077] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 205.121909][ T8077] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 205.121922][ T8077] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 205.121936][ T8077] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 205.121957][ T8077] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.146013][ T8077] usb 5-1: config 0 descriptor?? [ 205.153882][ T8077] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 205.172744][ T5728] usb 6-1: Using ep0 maxpacket: 32 [ 205.175645][ T5728] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 205.177236][ T5728] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 205.177262][ T5728] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 205.177282][ T5728] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 205.177303][ T5728] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 205.179964][ T5728] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.179984][ T5728] usb 6-1: Product: syz [ 205.179998][ T5728] usb 6-1: Manufacturer: syz [ 205.180013][ T5728] usb 6-1: SerialNumber: syz [ 205.185548][ T5728] usb 6-1: config 0 descriptor?? [ 205.186172][ T9368] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 205.188261][ T5728] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input58 [ 205.211461][ C2] xpad 6-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 205.233244][ T35] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 205.395309][ T35] usb 9-1: Using ep0 maxpacket: 16 [ 205.399523][ T35] usb 9-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 205.407018][ T35] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.407077][ T35] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.407167][ T35] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 205.407191][ T35] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.414814][ T35] usb 9-1: config 0 descriptor?? [ 205.574082][ T9373] wg2 speed is unknown, defaulting to 1000 [ 205.615623][ T9368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.616003][ T9368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.635894][ T9368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.636274][ T9368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.661493][ T8077] usb 6-1: USB disconnect, device number 24 [ 205.661509][ C2] xpad 6-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 206.052478][ T35] appleir 0003:05AC:8241.0003: unknown main item tag 0x0 [ 206.055944][ T35] appleir 0003:05AC:8241.0003: unknown main item tag 0x0 [ 206.055960][ T35] appleir 0003:05AC:8241.0003: unknown main item tag 0x0 [ 206.055972][ T35] appleir 0003:05AC:8241.0003: unknown main item tag 0x0 [ 206.056287][ T35] appleir 0003:05AC:8241.0003: unknown main item tag 0x0 [ 206.111025][ T35] appleir 0003:05AC:8241.0003: hiddev1,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 206.356871][ T9387] erofs (device nbd1): cannot find valid erofs superblock [ 206.453348][ T9384] netlink: 'syz.3.1168': attribute type 1 has an invalid length. [ 206.685560][ T5814] usb 9-1: USB disconnect, device number 10 [ 207.029870][ T9396] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 207.792744][ T8994] usb 5-1: USB disconnect, device number 18 [ 207.799305][ T8994] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 207.923671][ T5814] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 208.072676][ T5814] usb 9-1: Using ep0 maxpacket: 16 [ 208.081256][ T5814] usb 9-1: unable to get BOS descriptor or descriptor too short [ 208.084067][ T5814] usb 9-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 208.088475][ T5814] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.092327][ T5814] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 208.104547][ T5814] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.105121][ T5814] usb 9-1: Product: syz [ 208.105156][ T5814] usb 9-1: Manufacturer: syz [ 208.105181][ T5814] usb 9-1: SerialNumber: syz [ 208.280796][ T9417] erofs (device nbd3): cannot find valid erofs superblock [ 208.473595][ T8994] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 208.529682][ T9406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.529925][ T9406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.625828][ T5814] usb 9-1: unit 0 not found! [ 208.627598][ T5814] usb 9-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 208.632420][ T5814] usb 9-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 208.653669][ T8994] usb 5-1: Using ep0 maxpacket: 32 [ 208.655858][ T8994] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 208.665886][ T8994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 208.665930][ T8994] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 208.665977][ T8994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 208.666004][ T8994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 208.687171][ T8994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.687207][ T8994] usb 5-1: Product: syz [ 208.687236][ T8994] usb 5-1: Manufacturer: syz [ 208.687280][ T8994] usb 5-1: SerialNumber: syz [ 208.699833][ T8994] usb 5-1: config 0 descriptor?? [ 208.706401][ T9421] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 208.717345][ T8994] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input60 [ 208.721834][ T5814] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 208.734433][ T5814] usb 9-1: USB disconnect, device number 11 [ 208.800454][ T9250] udevd[9250]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 209.160584][ T9421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.165524][ T9421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.170174][ T9421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.170603][ T9421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.206036][ T43] audit: type=1326 audit(1788605352.473:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9443 comm="syz.3.1183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 209.212742][ T43] audit: type=1326 audit(1788605352.473:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9443 comm="syz.3.1183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 209.216259][ T35] usb 5-1: USB disconnect, device number 19 [ 209.245973][ T43] audit: type=1326 audit(1788605352.483:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9443 comm="syz.3.1183" exe="/syz-executor" sig=0 arch=40000003 syscall=441 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 209.254166][ T43] audit: type=1326 audit(1788605352.493:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9443 comm="syz.3.1183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 209.260924][ T43] audit: type=1326 audit(1788605352.493:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9443 comm="syz.3.1183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 209.269302][ T43] audit: type=1326 audit(1788605352.533:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9443 comm="syz.3.1183" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 209.299505][ T43] audit: type=1326 audit(1788605352.553:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9443 comm="syz.3.1183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 209.316068][ T43] audit: type=1326 audit(1788605352.553:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9443 comm="syz.3.1183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 209.316132][ T43] audit: type=1326 audit(1788605352.553:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9443 comm="syz.3.1183" exe="/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 209.316171][ T43] audit: type=1326 audit(1788605352.553:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9443 comm="syz.3.1183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 209.546262][ T9451] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 209.934496][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1189'. [ 210.052990][ T5748] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 210.555491][ T9478] erofs (device nbd0): cannot find valid erofs superblock [ 211.727279][ T9509] gfs2: gfs2 mount does not exist [ 211.786195][ T9509] syzkaller0: entered promiscuous mode [ 211.788473][ T9509] syzkaller0: entered allmulticast mode [ 211.808897][ T9509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1200'. [ 212.174968][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 212.252741][ T5814] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 212.422015][ T5814] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 212.446804][ T5814] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.446904][ T5814] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.462518][ T5814] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 212.464142][ T5814] usb 9-1: SerialNumber: syz [ 212.832893][ T9511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1201'. [ 212.833030][ T9511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1201'. [ 212.845544][ T9511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1201'. [ 212.859492][ T9511] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1201'. [ 213.133736][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 213.152374][ T10] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 213.208318][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 213.215183][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 213.218771][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 213.226049][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 213.560710][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.564252][ T10] usb 5-1: Product: syz [ 213.575752][ T10] usb 5-1: Manufacturer: syz [ 213.579660][ T10] usb 5-1: SerialNumber: syz [ 213.605577][ T10] usb 5-1: config 0 descriptor?? [ 213.621404][ T9506] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 213.655947][ T5814] usb 9-1: USB disconnect, device number 12 [ 213.717008][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input61 [ 214.047141][ T9506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.047512][ T9506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.052938][ T9506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.053212][ T9506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.073526][ T8994] usb 5-1: USB disconnect, device number 20 [ 214.073620][ C3] xpad 5-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 214.409248][ T9527] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1204'. [ 215.163846][ T9534] erofs (device nbd0): cannot find valid erofs superblock [ 215.583264][ T9525] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 215.583435][ T9525] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 215.583592][ T9525] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 215.583731][ T9525] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 215.611285][ T9541] input: syz1 as /devices/virtual/input/input62 [ 215.852714][ T35] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 216.054473][ T35] usb 6-1: Using ep0 maxpacket: 16 [ 216.059144][ T35] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 216.059215][ T35] usb 6-1: too many configurations: 123, using maximum allowed: 8 [ 216.068924][ T35] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.075860][ T35] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.081109][ T35] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.089397][ T35] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.096190][ T35] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.101900][ T35] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.108289][ T35] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.114684][ T35] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.119243][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 216.122156][ T35] usb 6-1: SerialNumber: syz [ 216.125189][ T35] usb 6-1: config 0 descriptor?? [ 216.136590][ T35] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input63 [ 216.189471][ T9548] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.208618][ T9551] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1212'. [ 216.380125][ T9555] overlayfs: failed to resolve '/werdir=.': -2 [ 217.652630][ T5742] Bluetooth: hci4: command 0x0c1a tx timeout [ 217.652717][ T5742] Bluetooth: hci3: command 0x0c1a tx timeout [ 217.652757][ T5742] Bluetooth: hci2: command 0x0c1a tx timeout [ 217.652788][ T5742] Bluetooth: hci1: command 0x0c1a tx timeout [ 218.050404][ T9548] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.142440][ T9538] input: syz1 as /devices/virtual/input/input64 [ 218.156702][ T5133] bcm5974 6-1:0.0: could not read from device [ 218.174584][ T35] usb 6-1: USB disconnect, device number 25 [ 218.178413][ T5133] bcm5974 6-1:0.0: could not read from device [ 218.198874][ T5133] bcm5974 6-1:0.0: could not read from device [ 218.244057][ T9548] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.274356][ T42] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 218.394641][ T9548] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.427763][ T42] usb 8-1: Using ep0 maxpacket: 32 [ 218.429591][ T42] usb 8-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 218.435903][ T42] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 218.435968][ T42] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 218.436013][ T42] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 218.436033][ T42] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 218.445969][ T42] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.445985][ T42] usb 8-1: Product: syz [ 218.445992][ T42] usb 8-1: Manufacturer: syz [ 218.445999][ T42] usb 8-1: SerialNumber: syz [ 218.447345][ T42] usb 8-1: config 0 descriptor?? [ 218.448728][ T9558] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 218.465641][ T42] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input65 [ 218.544087][ T9561] /dev/nullb0: Can't open blockdev [ 218.732860][ T5815] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.732911][ T5815] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.732956][ T5815] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.732996][ T5815] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.891894][ T9558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.892218][ T9558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.902758][ T9558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.903075][ T9558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.919239][ T8994] usb 8-1: USB disconnect, device number 24 [ 218.919366][ C2] xpad 8-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 220.692607][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 223.134120][ T9581] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1219'. [ 230.163302][ T9579] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 230.163558][ T9579] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 230.163733][ T9579] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 230.163903][ T9579] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 230.812655][ T8994] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 230.902746][ T5785] usb 8-1: new full-speed USB device number 25 using dummy_hcd [ 230.962652][ T8994] usb 9-1: Using ep0 maxpacket: 32 [ 230.968128][ T8994] usb 9-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 230.969728][ T8994] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 230.969757][ T8994] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 230.969778][ T8994] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 230.969801][ T8994] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 230.971795][ T8994] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.971814][ T8994] usb 9-1: Product: syz [ 230.971826][ T8994] usb 9-1: Manufacturer: syz [ 230.971836][ T8994] usb 9-1: SerialNumber: syz [ 230.978989][ T8994] usb 9-1: config 0 descriptor?? [ 230.989638][ T9608] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 230.998038][ T8994] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input66 [ 231.077116][ T5785] usb 8-1: not running at top speed; connect to a high speed hub [ 231.077159][ T5785] usb 8-1: New USB device found, idVendor=046d, idProduct=152d, bcdDevice=ef.8f [ 231.077230][ T5785] usb 8-1: too many configurations: 241, using maximum allowed: 8 [ 231.086165][ T5785] usb 8-1: config 0 has no interfaces? [ 231.101149][ T5785] usb 8-1: config 0 has no interfaces? [ 231.103520][ T5785] usb 8-1: config 0 has no interfaces? [ 231.108958][ T5785] usb 8-1: config 0 has no interfaces? [ 231.111296][ T5785] usb 8-1: config 0 has no interfaces? [ 231.113803][ T5785] usb 8-1: config 0 has no interfaces? [ 231.116652][ T5785] usb 8-1: config 0 has no interfaces? [ 231.118860][ T5785] usb 8-1: config 0 has no interfaces? [ 231.123967][ T5785] usb 8-1: New USB device strings: Mfr=179, Product=45, SerialNumber=160 [ 231.123998][ T5785] usb 8-1: Product: syz [ 231.124020][ T5785] usb 8-1: Manufacturer: syz [ 231.124041][ T5785] usb 8-1: SerialNumber: syz [ 231.133438][ T5785] usb 8-1: config 0 descriptor?? [ 231.378738][ T9612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.387250][ T9612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.465909][ T9608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.466278][ T9608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.481196][ T9608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.481521][ T9608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.493061][ T9612] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1228'. [ 231.519053][ C2] xpad 9-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 231.519124][ T8994] usb 9-1: USB disconnect, device number 13 [ 231.600694][ T5728] usb 8-1: USB disconnect, device number 25 [ 232.213795][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 232.213919][ T66] Bluetooth: hci1: command 0x0c1a tx timeout [ 232.216568][ T5742] Bluetooth: hci3: command 0x0c1a tx timeout [ 232.216614][ T5748] Bluetooth: hci4: command 0x0c1a tx timeout [ 232.292945][ T9636] erofs (device nbd3): cannot find valid erofs superblock [ 232.370552][ T9648] trusted_key: syz.0.1237 sent an empty control message without MSG_MORE. [ 232.561982][ T9655] /dev/nullb0: Can't open blockdev [ 233.270352][ T9666] qrtr: Invalid version 0 [ 233.468706][ T9670] syzkaller1: entered promiscuous mode [ 233.468778][ T9670] syzkaller1: entered allmulticast mode [ 233.538498][ T9664] /dev/nullb0: Can't open blockdev [ 234.397427][ T9677] nvme nvme0: failed to connect socket: -512 [ 234.600367][ T9692] erofs (device nbd4): cannot find valid erofs superblock [ 234.920024][ T9699] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1254'. [ 235.425426][ T5748] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 235.430541][ T9711] /dev/nullb0: Can't open blockdev [ 235.712097][ T9716] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1260'. [ 235.724406][ T9717] RDS: rds_bind could not find a transport for 0:0:4::1, load rds_tcp or rds_rdma? [ 235.815504][ T9724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1262'. [ 236.632069][ T9737] erofs (device nbd0): cannot find valid erofs superblock [ 237.352774][ T9746] tipc: Started in network mode [ 237.354450][ T9746] tipc: Node identity 4, cluster identity 4711 [ 237.356523][ T9746] tipc: Node number set to 4 [ 237.362192][ T9746] tipc: Enabled bearer , priority 0 [ 237.362702][ T5728] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 237.370004][ T9746] tipc: Resetting bearer [ 237.532644][ T5728] usb 6-1: Using ep0 maxpacket: 8 [ 237.533663][ T5728] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 237.534424][ T5728] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 237.534437][ T5728] usb 6-1: config 0 has no interface number 0 [ 237.534453][ T5728] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 237.534465][ T5728] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 237.534477][ T5728] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 237.534531][ T5728] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 237.534552][ T5728] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.535800][ T5728] usb 6-1: config 0 descriptor?? [ 237.549500][ T5728] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 237.578919][ T9746] tipc: Disabling bearer [ 237.668648][ T9750] Invalid ELF header magic: != ELF [ 237.893125][ T5785] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 238.051463][ T9754] wg2 speed is unknown, defaulting to 1000 [ 238.053958][ T5785] usb 5-1: Using ep0 maxpacket: 32 [ 238.058314][ T5785] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 238.062390][ T5785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 238.062442][ T5785] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 238.062474][ T5785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 238.062506][ T5785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 238.084629][ T5785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.088411][ T5785] usb 5-1: Product: syz [ 238.088503][ T5785] usb 5-1: Manufacturer: syz [ 238.088530][ T5785] usb 5-1: SerialNumber: syz [ 238.106400][ T5785] usb 5-1: config 0 descriptor?? [ 238.111014][ T9752] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 238.145590][ T5785] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input67 [ 238.642612][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 238.655690][ T9752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.666017][ T9752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.677957][ T9752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.678208][ T9752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.693635][ T5785] usb 5-1: USB disconnect, device number 21 [ 238.693651][ C2] xpad 5-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 238.853222][ T57] usb 6-1: USB disconnect, device number 26 [ 238.853342][ C2] ldusb 6-1:0.55: usb_submit_urb failed (-19) [ 238.857896][ T57] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 238.859054][ T9744] ldusb: No device or device unplugged -19 [ 239.020125][ T9767] loop4: detected capacity change from 0 to 7 [ 239.034517][ T9767] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 239.038081][ T9767] loop4: partition table partially beyond EOD, truncated [ 239.045706][ T9767] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 239.065725][ T9767] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 239.092880][ T9595] udevd[9595]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 239.444578][ T9768] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1275'. [ 239.649614][ T9781] erofs (device nbd3): cannot find valid erofs superblock [ 239.873024][ T9768] syz.4.1275 (9768) used greatest stack depth: 19256 bytes left [ 239.990131][ T9787] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 239.997493][ T9787] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 239.999728][ T9787] PKCS7: Unsupported data type 106 [ 240.008659][ T9787] team0: Device xfrm0 is of different type [ 240.020719][ T9788] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1282'. [ 240.136937][ T9795] overlayfs: failed to resolve '/werdir=.': -2 [ 240.307001][ T9793] sd 0:0:0:0: PR command failed: 1026 [ 240.307280][ T9793] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 240.307394][ T9793] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 241.663407][ T5785] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 241.704636][ T9813] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1289'. [ 241.813889][ T5785] usb 9-1: Using ep0 maxpacket: 32 [ 241.816958][ T5785] usb 9-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 241.828218][ T5785] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 241.828954][ T5785] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 241.829197][ T5785] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 241.829927][ T5785] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 241.901597][ T5785] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.901912][ T5785] usb 9-1: Product: syz [ 241.901937][ T5785] usb 9-1: Manufacturer: syz [ 241.902067][ T5785] usb 9-1: SerialNumber: syz [ 242.076897][ T5785] usb 9-1: config 0 descriptor?? [ 242.085989][ T9807] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 242.168166][ T5785] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input68 [ 242.351886][ T9816] 8021q: VLANs not supported on vxcan1 [ 242.758832][ T9807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.759201][ T9807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.810437][ T9807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.811189][ T9807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.854806][ T5785] usb 9-1: USB disconnect, device number 14 [ 242.854856][ C3] xpad 9-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 242.938751][ T9823] IPVS: Unknown mcast interface: , [ 242.942362][ T9828] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1296'. [ 243.038863][ T9834] overlayfs: failed to resolve '/werdir=.': -2 [ 244.390860][ T9838] erofs (device nbd4): cannot find valid erofs superblock [ 244.675256][ T57] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 244.734955][ T9853] Device name not specified. [ 244.734955][ T9853] [ 244.854092][ T57] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 244.891626][ T57] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.891775][ T57] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 244.897770][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 244.897817][ T57] usb 6-1: SerialNumber: syz [ 245.251331][ T9843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1300'. [ 245.251699][ T9843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1300'. [ 245.251948][ T9843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1300'. [ 245.267860][ T9843] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1300'. [ 245.332892][ T57] usb 6-1: USB disconnect, device number 27 [ 246.246709][ T9859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1304'. [ 246.246844][ T9859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1304'. [ 246.246973][ T9859] netlink: 'syz.3.1304': attribute type 15 has an invalid length. [ 247.639243][ T9872] netlink: 'syz.1.1308': attribute type 1 has an invalid length. [ 247.685258][ T9872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.685683][ T9872] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1308'. [ 247.709436][ T9879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1310'. [ 247.842785][ T5785] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 248.002787][ T5785] usb 8-1: Using ep0 maxpacket: 32 [ 248.003314][ T5785] usb 8-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 248.004419][ T5785] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 248.004438][ T5785] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 248.004451][ T5785] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 248.004465][ T5785] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 248.006734][ T5785] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.006748][ T5785] usb 8-1: Product: syz [ 248.006756][ T5785] usb 8-1: Manufacturer: syz [ 248.006764][ T5785] usb 8-1: SerialNumber: syz [ 248.008097][ T5785] usb 8-1: config 0 descriptor?? [ 248.014233][ T9870] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 248.016427][ T5785] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input69 [ 248.038853][ C3] xpad 8-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 248.342398][ T5748] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 248.428590][ T9870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.428916][ T9870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.436485][ T9870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.436788][ T9870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.459496][ T5785] usb 8-1: USB disconnect, device number 26 [ 248.459583][ C3] xpad 8-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 248.815390][ T9899] input: syz1 as /devices/virtual/input/input70 [ 248.848723][ T9901] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1316'. [ 249.067923][ T9912] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 249.146207][ T9914] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 249.146266][ T9914] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 249.355891][ T9923] ebtables: wrong size: *len 168, entries_size 48, replsz 48 [ 249.390091][ T9925] comedi comedi1: Minor 47 could not be opened [ 249.392881][ T9925] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1325'. [ 249.553337][ T8994] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 249.712897][ T8994] usb 8-1: Using ep0 maxpacket: 32 [ 249.720741][ T8994] usb 8-1: unable to get BOS descriptor or descriptor too short [ 249.720822][ T8994] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 249.729986][ T8994] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 249.734288][ T8994] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 249.738196][ T8994] usb 8-1: config 14 has no interface number 0 [ 249.738217][ T8994] usb 8-1: config 14 has no interface number 1 [ 249.738273][ T8994] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 249.738293][ T8994] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 249.738314][ T8994] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 249.738336][ T8994] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 249.738359][ T8994] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 249.738379][ T8994] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.738402][ T8994] usb 8-1: config 14 interface 57 has no altsetting 0 [ 249.738417][ T8994] usb 8-1: config 14 interface 228 has no altsetting 0 [ 249.781740][ T8994] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.781764][ T8994] usb 8-1: Product: syz [ 249.781777][ T8994] usb 8-1: Manufacturer: syz [ 249.781789][ T8994] usb 8-1: SerialNumber: syz [ 249.973794][ T5728] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 250.154118][ T5728] usb 5-1: Using ep0 maxpacket: 32 [ 250.155170][ T5728] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 250.161477][ T5728] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 250.161581][ T5728] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 250.161598][ T5728] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 250.161611][ T5728] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 250.163686][ T5728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.163705][ T5728] usb 5-1: Product: syz [ 250.163713][ T5728] usb 5-1: Manufacturer: syz [ 250.163722][ T5728] usb 5-1: SerialNumber: syz [ 250.165401][ T5728] usb 5-1: config 0 descriptor?? [ 250.166181][ T9929] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 250.179731][ T5728] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input71 [ 250.228660][ T8994] legousbtower 8-1:14.57: interrupt endpoints not found [ 250.563117][ C2] xpad 5-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 250.647837][ T8994] legousbtower 8-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178 [ 250.651822][ T8994] legousbtower 8-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 250.724516][ T9938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.727462][ T9938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.733074][ T9938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.733389][ T9938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.743707][ T42] usb 5-1: USB disconnect, device number 22 [ 250.743831][ C2] xpad 5-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 251.014702][ T9942] __nla_validate_parse: 1 callbacks suppressed [ 251.017707][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1331'. [ 251.132640][ T5728] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 251.285541][ T9949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.286091][ T9949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.293659][ T5728] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 251.294813][ T5728] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 33, changing to 9 [ 251.296055][ T5728] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 33, changing to 9 [ 251.299063][ T5728] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.299076][ T5728] usb 6-1: Product: syz [ 251.299083][ T5728] usb 6-1: Manufacturer: syz [ 251.299091][ T5728] usb 6-1: SerialNumber: syz [ 251.312087][ T5728] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 251.328896][ T5728] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 251.352481][ T5728] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 251.507795][ T5785] usb 8-1: USB disconnect, device number 27 [ 251.519866][ T5785] legousbtower 8-1:14.228: LEGO USB Tower #-160 now disconnected [ 251.626551][ T9946] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 252.074309][ T9960] usb usb9: usbfs: process 9960 (syz.3.1336) did not claim interface 20 before use [ 252.079495][ T9960] sctp: [Deprecated]: syz.3.1336 (pid 9960) Use of int in max_burst socket option. [ 252.079495][ T9960] Use struct sctp_assoc_value instead [ 252.111174][ T9960] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1336'. [ 252.131741][ T9960] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1336'. [ 252.172903][ T9954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1332'. [ 252.283939][ T9967] fuse: Bad value for 'fd' [ 252.763760][ T9972] FAULT_INJECTION: forcing a failure. [ 252.763760][ T9972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.763845][ T9972] CPU: 2 UID: 0 PID: 9972 Comm: syz.3.1340 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.763873][ T9972] Tainted: [L]=SOFTLOCKUP [ 252.763879][ T9972] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 252.763886][ T9972] Call Trace: [ 252.763890][ T9972] [ 252.763895][ T9972] dump_stack_lvl+0x100/0x190 [ 252.764067][ T9972] should_fail_ex.cold+0x5/0xa [ 252.764084][ T9972] _copy_from_user+0x2e/0xd0 [ 252.764118][ T9972] get_compat_msghdr+0xb3/0x480 [ 252.764156][ T9972] ? __pfx_get_compat_msghdr+0x10/0x10 [ 252.764179][ T9972] ___sys_sendmsg+0x1b6/0x1e0 [ 252.764199][ T9972] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.764223][ T9972] ? find_held_lock+0x2b/0x80 [ 252.764246][ T9972] __sys_sendmsg+0x160/0x210 [ 252.764260][ T9972] ? __pfx___sys_sendmsg+0x10/0x10 [ 252.764278][ T9972] ? __pfx_ksys_write+0x10/0x10 [ 252.764292][ T9972] __do_fast_syscall_32+0x13a/0x8b0 [ 252.764328][ T9972] ? lockdep_hardirqs_on+0x7d/0x110 [ 252.764345][ T9972] do_fast_syscall_32+0x32/0x70 [ 252.764362][ T9972] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 252.764376][ T9972] RIP: 0023:0xf7fc7fec [ 252.764390][ T9972] Code: Unable to access opcode bytes at 0xf7fc7fc2. [ 252.764395][ T9972] RSP: 002b:00000000f546550c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 252.764407][ T9972] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800002c0 [ 252.764414][ T9972] RDX: 0000000000000840 RSI: 0000000000000000 RDI: 0000000000000000 [ 252.764421][ T9972] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 252.764428][ T9972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.764435][ T9972] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 252.764449][ T9972] [ 252.890670][ T9971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1341'. [ 252.960484][ T9971] team0 (unregistering): Port device team_slave_0 removed [ 252.978603][ T9971] team0 (unregistering): Port device team_slave_1 removed [ 253.188075][ T9981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.343331][ T57] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 253.504521][ T9940] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear output buffers, -110 [ 253.510840][ T42] usb 6-1: USB disconnect, device number 28 [ 253.513155][ T57] usb 8-1: Using ep0 maxpacket: 32 [ 253.515932][ T57] usb 8-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 253.520118][ T57] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 253.520169][ T57] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 253.520245][ T57] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 253.520261][ T57] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 253.522902][ T57] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.522920][ T57] usb 8-1: Product: syz [ 253.522931][ T57] usb 8-1: Manufacturer: syz [ 253.522943][ T57] usb 8-1: SerialNumber: syz [ 253.548059][ T42] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 253.552494][ T57] usb 8-1: config 0 descriptor?? [ 253.558859][ T9979] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 253.576948][ T57] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input72 [ 253.581959][ T42] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 253.582438][ T42] ti_usb_3410_5052 6-1:2.0: device disconnected [ 253.948697][ T9983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1345'. [ 253.976222][ T9979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.976549][ T9979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.983305][ T9979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.983630][ T9979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.999297][ C3] xpad 8-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 253.999373][ T57] usb 8-1: USB disconnect, device number 28 [ 254.207842][ T9998] fuse: Bad value for 'fd' [ 254.363211][ T5785] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 254.482660][ T42] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 254.512975][ T5785] usb 6-1: Using ep0 maxpacket: 8 [ 254.516460][ T5785] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 254.517532][ T5785] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 254.517548][ T5785] usb 6-1: config 179 has no interface number 0 [ 254.517577][ T5785] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 254.517592][ T5785] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 254.517608][ T5785] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 254.517623][ T5785] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 254.517638][ T5785] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 254.517653][ T5785] usb 6-1: config 179 interface 65 has no altsetting 0 [ 254.517671][ T5785] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.575230][ T5785] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input73 [ 254.630487][ T5133] input input73: unable to receive magic message: -110 [ 254.633899][ T42] usb 9-1: Using ep0 maxpacket: 8 [ 254.636293][ T42] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 254.640285][ T42] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 254.640320][ T42] usb 9-1: config 0 has no interface number 0 [ 254.640351][ T42] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 254.640376][ T42] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 254.640402][ T42] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 254.640428][ T42] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 254.640461][ T42] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.667054][ T5133] input input73: unable to receive magic message: -32 [ 254.680631][ T5133] input input73: unable to receive magic message: -32 [ 254.692311][ T5133] input input73: unable to receive magic message: -32 [ 254.704242][ T42] usb 9-1: config 0 descriptor?? [ 254.709248][ T9824] input input73: unable to receive magic message: -32 [ 254.728218][T10011] erofs (device nbd3): cannot find valid erofs superblock [ 254.732073][ T42] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 254.734146][ T5133] input input73: unable to receive magic message: -32 [ 254.764780][ T5133] input input73: unable to receive magic message: -32 [ 254.780702][ T5785] usb 6-1: USB disconnect, device number 29 [ 254.780801][ C3] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 254.863692][T10018] fuse: Bad value for 'fd' [ 255.088785][T10023] wg2 speed is unknown, defaulting to 1000 [ 255.254249][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.254303][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.254933][ T5785] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 255.404649][ T5785] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 255.405517][ T5785] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.405540][ T5785] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.418171][ T5785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.418221][ T5785] usb 5-1: Product: syz [ 255.418249][ T5785] usb 5-1: Manufacturer: syz [ 255.418271][ T5785] usb 5-1: SerialNumber: syz [ 255.536544][T10029] qrtr: Invalid version 0 [ 255.649459][T10030] syzkaller1: entered promiscuous mode [ 255.649499][T10030] syzkaller1: entered allmulticast mode [ 255.714958][ T35] usb 9-1: USB disconnect, device number 15 [ 255.715013][ C2] ldusb 9-1:0.55: usb_submit_urb failed (-19) [ 255.739430][ T8994] usb 5-1: USB disconnect, device number 23 [ 255.743616][ T35] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 255.766821][T10000] ldusb: No device or device unplugged -19 [ 255.903190][ T5728] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 256.072912][ T5728] usb 8-1: Using ep0 maxpacket: 32 [ 256.078728][ T5728] usb 8-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 256.087391][ T5728] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 256.087429][ T5728] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 256.087462][ T5728] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 256.087488][ T5728] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 256.126008][ T5728] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.126066][ T5728] usb 8-1: Product: syz [ 256.126095][ T5728] usb 8-1: Manufacturer: syz [ 256.126117][ T5728] usb 8-1: SerialNumber: syz [ 256.138550][ T5728] usb 8-1: config 0 descriptor?? [ 256.141025][T10033] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 256.150487][ T5728] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input74 [ 256.580564][T10033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.581675][T10033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.593216][T10033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.596180][T10033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.614684][ T35] usb 8-1: USB disconnect, device number 29 [ 256.614790][ C3] xpad 8-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 256.712221][T10036] tipc: Started in network mode [ 256.712281][T10036] tipc: Node identity ac1414aa, cluster identity 4711 [ 256.721576][T10036] tipc: New replicast peer: 172.20.20.187 [ 256.727280][T10036] tipc: Enabled bearer , priority 10 [ 256.841632][T10038] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint [ 256.970047][T10038] pci 0000:00:00.0: Adding to iommu group 0 [ 257.511050][T10052] qnx4: no qnx4 filesystem (no root dir). [ 257.844573][ T35] tipc: Node number set to 2886997162 [ 258.002932][T10063] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 258.002971][T10063] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 258.024594][T10063] vhci_hcd vhci_hcd.0: Device attached [ 258.063283][T10062] erofs (device nbd3): cannot find valid erofs superblock [ 258.134759][T10068] openvswitch: netlink: Flow key attr not present in new flow. [ 258.143319][T10068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1371'. [ 258.143366][T10068] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1371'. [ 258.323120][ T57] usb 38-1: SetAddress Request (10) to port 0 [ 258.323536][ T57] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 258.522570][T10071] qrtr: Invalid version 0 [ 258.742465][T10072] syzkaller1: entered promiscuous mode [ 258.742883][T10072] syzkaller1: entered allmulticast mode [ 259.204544][T10076] Line length is too long: Should be less than 4094 [ 259.363947][T10064] vhci_hcd: connection reset by peer [ 259.390150][ T12] vhci_hcd vhci_hcd.0: stop threads [ 259.390375][ T12] vhci_hcd vhci_hcd.0: release socket [ 259.390434][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 259.760654][ T42] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 259.778238][ T42] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 259.782435][ T42] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 259.785928][ T42] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 259.790413][ T42] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 259.793393][ T42] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 259.797188][ T42] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 259.801153][ T42] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 260.000521][ T42] hid-generic 0000:0000:0001.0004: hidraw1: HID v0.10 Device [syz0] on syz1 [ 260.003142][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 260.023168][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 260.032963][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 260.043161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 260.233095][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 260.241993][T10081] fido_id[10081]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 260.863639][ T42] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 260.870643][T10099] netlink: 'syz.3.1382': attribute type 12 has an invalid length. [ 261.005802][T10101] binder: 10100:10101 ioctl c018620c 80000240 returned -22 [ 261.014496][ T42] usb 5-1: Using ep0 maxpacket: 32 [ 261.017325][ T42] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 261.028893][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 261.028937][ T42] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 261.028972][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 261.029001][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 261.047730][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.047771][ T42] usb 5-1: Product: syz [ 261.047804][ T42] usb 5-1: Manufacturer: syz [ 261.047828][ T42] usb 5-1: SerialNumber: syz [ 261.061346][ T42] usb 5-1: config 0 descriptor?? [ 261.063896][T10090] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 261.070279][ T42] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input75 [ 261.265132][T10101] trusted_key: encrypted_key: insufficient parameters specified [ 261.300281][T10104] erofs (device nbd1): cannot find valid erofs superblock [ 261.545012][T10090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.545241][T10090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.573706][T10090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.573957][T10090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.598493][ T5814] usb 5-1: USB disconnect, device number 24 [ 261.598561][ C3] xpad 5-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 262.243154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 262.563801][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 262.582572][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 262.616883][T10128] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 262.701302][T10125] x_tables: duplicate underflow at hook 1 [ 262.894668][T10123] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1392'. [ 262.908411][T10123] Invalid ELF header magic: != ELF [ 263.215025][T10135] qrtr: Invalid version 0 [ 263.245608][T10135] syzkaller1: entered promiscuous mode [ 263.248063][T10135] syzkaller1: entered allmulticast mode [ 263.748260][ T57] usb 38-1: device descriptor read/8, error -110 [ 263.952053][T10144] erofs (device nbd1): cannot find valid erofs superblock [ 264.098042][T10137] pci_bus 0000:01: busn_res: [bus 01] is released [ 264.145408][ T57] usb usb38-port1: attempt power cycle [ 264.309981][T10142] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 264.331447][T10142] pci 0000:00:04.0: PCI bridge to [bus 01] [ 264.331637][T10142] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 264.343727][T10142] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 264.347215][T10142] pci 0000:00:04.0: bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 264.347641][T10142] pci 0000:00:04.0: enabling Extended Tags [ 264.402896][T10142] pci 0000:00:04.0: Adding to iommu group 4 [ 264.433313][ T5814] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 264.449313][T10142] pci 0000:00:04.0: PCI bridge to [bus 01] [ 264.462980][T10142] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 264.463071][T10142] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 264.463196][T10142] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff]: assigned [ 264.463235][T10142] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 264.463273][T10142] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 264.463372][T10142] pci 0000:00:04.0: PCI bridge to [bus 01] [ 264.463504][T10142] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 264.466467][T10142] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff] [ 264.468922][T10142] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 264.586337][ T5814] usb 9-1: Using ep0 maxpacket: 32 [ 264.589204][ T5814] usb 9-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 264.590046][ T5814] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 264.590063][ T5814] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 264.590075][ T5814] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 264.590088][ T5814] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 264.595312][ T5814] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.595325][ T5814] usb 9-1: Product: syz [ 264.595333][ T5814] usb 9-1: Manufacturer: syz [ 264.595340][ T5814] usb 9-1: SerialNumber: syz [ 264.598513][ T5814] usb 9-1: config 0 descriptor?? [ 264.599231][T10148] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 264.622681][ T5814] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input76 [ 264.657736][ C2] xpad 9-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 264.732998][ T57] usb usb38-port1: unable to enumerate USB device [ 264.747224][T10142] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 264.860354][T10142] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 264.867233][ C2] xpad 9-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 265.086169][T10148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.086614][T10148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.099010][T10148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.099328][T10148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.116505][ C2] xpad 9-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 265.116561][ T42] usb 9-1: USB disconnect, device number 16 [ 265.710868][T10169] (syz.1.1403,10169,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 265.849218][T10173] syzkaller0: entered promiscuous mode [ 265.849261][T10173] syzkaller0: entered allmulticast mode [ 265.962654][T10176] qrtr: Invalid version 0 [ 266.011784][T10176] syzkaller1: entered promiscuous mode [ 266.011849][T10176] syzkaller1: entered allmulticast mode [ 266.502639][ T42] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 266.525395][T10185] erofs (device nbd0): cannot find valid erofs superblock [ 266.663017][ T42] usb 8-1: Using ep0 maxpacket: 32 [ 266.663741][ T42] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 266.664548][ T42] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 266.664574][ T42] usb 8-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 266.666164][ T42] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.666177][ T42] usb 8-1: Product: syz [ 266.666185][ T42] usb 8-1: Manufacturer: syz [ 266.666193][ T42] usb 8-1: SerialNumber: syz [ 266.891328][ T42] usb 8-1: USB disconnect, device number 30 [ 266.894189][ T9822] udevd[9822]: setting mode of /dev/bus/usb/008/030 to 020664 failed: No such file or directory [ 266.894259][ T9822] udevd[9822]: setting owner of /dev/bus/usb/008/030 to uid=0, gid=0 failed: No such file or directory [ 267.060242][T10232] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 267.066544][T10232] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 267.469614][T10264] nvme nvme0: failed to connect socket: -111 [ 268.075820][T10326] erofs (device nbd3): cannot find valid erofs superblock [ 269.119890][T10336] fuse: Bad value for 'fd' [ 269.452403][ T42] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 269.627412][ T42] usb 9-1: Using ep0 maxpacket: 32 [ 269.629673][ T42] usb 9-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 269.630774][ T42] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 269.630805][ T42] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 269.630837][ T42] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 269.630863][ T42] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 269.633214][ T42] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.633250][ T42] usb 9-1: Product: syz [ 269.633288][ T42] usb 9-1: Manufacturer: syz [ 269.633316][ T42] usb 9-1: SerialNumber: syz [ 269.635858][ T42] usb 9-1: config 0 descriptor?? [ 269.636852][T10339] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 269.644326][ T42] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input77 [ 270.083492][T10340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1424'. [ 270.233472][T10339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.236567][T10339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.245777][T10339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.246341][T10339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.297357][ T42] usb 9-1: USB disconnect, device number 17 [ 270.297405][ C2] xpad 9-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 270.376806][T10340] team0 (unregistering): Port device team_slave_0 removed [ 270.511766][T10340] team0 (unregistering): Port device team_slave_1 removed [ 271.583048][ T42] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 271.587633][T10366] Invalid ELF header magic: != ELF [ 271.669845][T10368] fuse: Bad value for 'fd' [ 271.756512][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 271.757028][ T42] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 271.757931][ T42] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 271.757945][ T42] usb 5-1: config 179 has no interface number 0 [ 271.757986][ T42] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 271.758002][ T42] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 271.758017][ T42] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 271.758031][ T42] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 271.758046][ T42] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 271.758065][ T42] usb 5-1: config 179 interface 65 has no altsetting 0 [ 271.758081][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.780668][ T42] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input78 [ 271.824481][ T5133] input input78: unable to receive magic message: -110 [ 271.843000][ T67] block nbd4: Receive control failed (result -32) [ 271.877028][ T5133] input input78: unable to receive magic message: -32 [ 271.888241][ T5133] input input78: unable to receive magic message: -32 [ 271.897429][T10353] block nbd4: shutting down sockets [ 271.914619][ T5133] input input78: unable to receive magic message: -32 [ 271.930386][ T5133] input input78: unable to receive magic message: -32 [ 272.295498][ C2] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 272.295574][ T5728] usb 5-1: USB disconnect, device number 25 [ 272.652401][ T57] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 272.925554][ T57] usb 8-1: Using ep0 maxpacket: 32 [ 272.928421][ T57] usb 8-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 272.935116][ T57] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 272.935534][ T57] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 272.935548][ T57] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 272.935560][ T57] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 272.937214][ T57] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.937226][ T57] usb 8-1: Product: syz [ 272.937233][ T57] usb 8-1: Manufacturer: syz [ 272.937240][ T57] usb 8-1: SerialNumber: syz [ 272.938798][ T57] usb 8-1: config 0 descriptor?? [ 272.939256][T10383] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 272.942502][ T57] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input79 [ 273.003143][T10394] qrtr: Invalid version 0 [ 273.007203][T10393] fuse: Bad value for 'fd' [ 273.287335][ T43] kauditd_printk_skb: 29 callbacks suppressed [ 273.287387][ T43] audit: type=1800 audit(1788605416.544:77): pid=10406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1446" name="zone_nr_conv" dev="configfs" ino=35088 res=0 errno=0 [ 273.369648][T10383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.377619][T10383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.385618][T10383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.385922][T10383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.406878][ C3] xpad 8-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 273.429045][ T5728] usb 8-1: USB disconnect, device number 31 [ 273.429450][ C3] xpad 8-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 273.519241][T10411] erofs (device nbd1): cannot find valid erofs superblock [ 273.754900][T10424] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1451'. [ 273.755280][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1451'. [ 273.760610][T10424] MPI: mpi too large (113288 bits) [ 276.101926][T10435] syz.3.1455 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 276.109523][T10438] qrtr: Invalid version 0 [ 276.801953][ T5728] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 276.972527][ T5728] usb 9-1: Using ep0 maxpacket: 8 [ 276.976068][ T5728] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 276.980498][ T5728] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 276.980533][ T5728] usb 9-1: config 179 has no interface number 0 [ 276.980574][ T5728] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 276.980604][ T5728] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 276.980634][ T5728] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 276.980663][ T5728] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 276.980697][ T5728] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 276.980727][ T5728] usb 9-1: config 179 interface 65 has no altsetting 0 [ 276.980760][ T5728] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.044946][ T5728] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:179.65/input/input80 [ 277.138141][ T5133] input input80: unable to receive magic message: -110 [ 277.165704][ T5133] input input80: unable to receive magic message: -32 [ 277.182658][ T5133] input input80: unable to receive magic message: -32 [ 277.218981][ T5133] input input80: unable to receive magic message: -32 [ 277.269974][T10445] input input80: unable to receive magic message: -32 [ 277.283205][ T5133] input input80: unable to receive magic message: -32 [ 277.315394][ T5133] input input80: unable to receive magic message: -32 [ 277.324056][ T42] usb 9-1: USB disconnect, device number 18 [ 277.324166][ C2] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 277.324204][ C2] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 277.471842][ T8994] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 277.593187][T10463] input: syz0 as /devices/virtual/input/input81 [ 277.633881][ T8994] usb 8-1: Using ep0 maxpacket: 32 [ 277.636223][ T8994] usb 8-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 277.640106][ T8994] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 277.640141][ T8994] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 277.640167][ T8994] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 277.640193][ T8994] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 277.659650][ T8994] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.659683][ T8994] usb 8-1: Product: syz [ 277.659715][ T8994] usb 8-1: Manufacturer: syz [ 277.659736][ T8994] usb 8-1: SerialNumber: syz [ 277.668968][ T8994] usb 8-1: config 0 descriptor?? [ 277.673459][T10458] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 277.677983][ T8994] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input82 [ 277.804484][T10460] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 277.832569][T10457] tipc: Started in network mode [ 277.839863][T10457] tipc: Node identity ac1414aa, cluster identity 4711 [ 277.844976][T10457] tipc: New replicast peer: 172.20.20.187 [ 277.852923][T10457] tipc: Enabled bearer , priority 10 [ 277.931086][T10461] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint [ 277.980172][T10461] pci 0000:00:00.0: Adding to iommu group 0 [ 278.088985][T10466] erofs (device nbd4): cannot find valid erofs superblock [ 278.111103][T10458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.111535][T10458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.130651][T10458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.137114][T10458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.145091][ T8994] usb 8-1: USB disconnect, device number 32 [ 278.145171][ C2] xpad 8-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 278.841907][ T8994] tipc: Node number set to 2886997162 [ 279.218970][T10484] fuse: Unknown parameter 'orou˙id' [ 282.008940][T10496] RDS: rds_bind could not find a transport for 0:0:4::1, load rds_tcp or rds_rdma? [ 282.110482][T10505] qrtr: Invalid version 0 [ 282.118071][T10503] erofs (device nbd0): cannot find valid erofs superblock [ 282.418664][T10512] batman_adv: batadv0: Adding interface: wlan0 [ 282.418696][T10512] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.418746][T10512] batman_adv: batadv0: Interface activated: wlan0 [ 283.335575][ T67] block nbd0: Receive control failed (result -32) [ 283.339823][T10516] block nbd0: shutting down sockets [ 287.234364][T10553] erofs (device nbd1): cannot find valid erofs superblock [ 287.506272][T10560] fuse: Unknown parameter '00000000000000000008))?¸&óńËGż�ă¶áî‰é@B®Z¬ńťüi|żsď' [ 287.754372][T10560] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1489'. [ 287.839237][T10562] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1491'. [ 291.843500][T10579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1494'. [ 291.928723][T10582] autofs4:pid:10582:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 291.928791][T10582] autofs4:pid:10582:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 292.069276][T10582] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1495'. [ 292.103218][T10587] 9p: Bad value for 'rfdno' [ 292.256688][T10579] hsr_slave_1 (unregistering): left promiscuous mode [ 294.052765][ T5748] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 295.833749][T10617] qrtr: Invalid version 0 [ 296.103333][T10621] FAULT_INJECTION: forcing a failure. [ 296.103333][T10621] name failslab, interval 1, probability 0, space 0, times 0 [ 296.110791][T10621] CPU: 3 UID: 0 PID: 10621 Comm: syz.0.1506 Tainted: G L syzkaller #0 PREEMPT(full) [ 296.110823][T10621] Tainted: [L]=SOFTLOCKUP [ 296.110829][T10621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 296.110836][T10621] Call Trace: [ 296.110875][T10621] [ 296.110881][T10621] dump_stack_lvl+0x100/0x190 [ 296.110946][T10621] should_fail_ex.cold+0x5/0xa [ 296.110962][T10621] should_failslab+0xc2/0x120 [ 296.110998][T10621] kmem_cache_alloc_noprof+0x92/0x6a0 [ 296.111011][T10621] ? do_getname+0x35/0x390 [ 296.111029][T10621] do_getname+0x35/0x390 [ 296.111046][T10621] do_mq_open+0x173/0x9c0 [ 296.111059][T10621] ? ksys_write+0x190/0x250 [ 296.111070][T10621] ? ksys_write+0x190/0x250 [ 296.111081][T10621] ? __pfx_do_mq_open+0x10/0x10 [ 296.111094][T10621] ? __mutex_unlock_slowpath+0x35d/0x930 [ 296.111132][T10621] __ia32_compat_sys_mq_open+0x151/0x280 [ 296.111148][T10621] ? __pfx___ia32_compat_sys_mq_open+0x10/0x10 [ 296.111162][T10621] ? __fget_files+0x21f/0x3d0 [ 296.111179][T10621] ? __pfx_ksys_write+0x10/0x10 [ 296.111193][T10621] __do_fast_syscall_32+0x13a/0x8b0 [ 296.111209][T10621] ? lockdep_hardirqs_on+0x7d/0x110 [ 296.111226][T10621] do_fast_syscall_32+0x32/0x70 [ 296.111243][T10621] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 296.111258][T10621] RIP: 0023:0xf705efec [ 296.111289][T10621] Code: Unable to access opcode bytes at 0xf705efc2. [ 296.111317][T10621] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000115 [ 296.111334][T10621] RAX: ffffffffffffffda RBX: 0000000080000100 RCX: 0000000000000002 [ 296.111344][T10621] RDX: 0000000000000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 296.111353][T10621] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 296.111363][T10621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.111373][T10621] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 296.111397][T10621] [ 296.149237][T10514] syz.1.1471 (10514) used greatest stack depth: 18544 bytes left [ 296.741266][T10635] mmap: syz.0.1509 (10635) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 297.180535][T10643] qrtr: Invalid version 0 [ 297.408698][T10648] qrtr: Invalid version 0 [ 297.442037][ T10] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 297.540905][T10653] FAULT_INJECTION: forcing a failure. [ 297.540905][T10653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.541321][T10653] CPU: 3 UID: 0 PID: 10653 Comm: syz.1.1515 Tainted: G L syzkaller #0 PREEMPT(full) [ 297.541352][T10653] Tainted: [L]=SOFTLOCKUP [ 297.541358][T10653] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 297.541365][T10653] Call Trace: [ 297.541395][T10653] [ 297.541401][T10653] dump_stack_lvl+0x100/0x190 [ 297.541475][T10653] should_fail_ex.cold+0x5/0xa [ 297.541491][T10653] _copy_from_user+0x2e/0xd0 [ 297.541527][T10653] move_addr_to_kernel+0x65/0x170 [ 297.541568][T10653] __sys_connect+0xb5/0x170 [ 297.541580][T10653] ? __pfx___sys_connect+0x10/0x10 [ 297.541592][T10653] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 297.541635][T10653] ? ksys_write+0x1ac/0x250 [ 297.541647][T10653] ? __pfx_ksys_write+0x10/0x10 [ 297.541660][T10653] __ia32_sys_connect+0x71/0xb0 [ 297.541672][T10653] ? lockdep_hardirqs_on+0x7d/0x110 [ 297.541687][T10653] __do_fast_syscall_32+0x13a/0x8b0 [ 297.541704][T10653] ? lockdep_hardirqs_on+0x7d/0x110 [ 297.541720][T10653] do_fast_syscall_32+0x32/0x70 [ 297.541737][T10653] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 297.541752][T10653] RIP: 0023:0xf700efec [ 297.541784][T10653] Code: Unable to access opcode bytes at 0xf700efc2. [ 297.541808][T10653] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 000000000000016a [ 297.541821][T10653] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 297.541846][T10653] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000000 [ 297.541856][T10653] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 297.541863][T10653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.541870][T10653] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 297.541885][T10653] [ 297.658191][ T10] usb 9-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 297.664606][T10658] FAULT_INJECTION: forcing a failure. [ 297.664606][T10658] name failslab, interval 1, probability 0, space 0, times 0 [ 297.664681][T10658] CPU: 2 UID: 0 PID: 10658 Comm: syz.1.1517 Tainted: G L syzkaller #0 PREEMPT(full) [ 297.664710][T10658] Tainted: [L]=SOFTLOCKUP [ 297.664716][T10658] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 297.664724][T10658] Call Trace: [ 297.664728][T10658] [ 297.664733][T10658] dump_stack_lvl+0x100/0x190 [ 297.664755][T10658] should_fail_ex.cold+0x5/0xa [ 297.664771][T10658] should_failslab+0xc2/0x120 [ 297.664789][T10658] kmem_cache_alloc_noprof+0x92/0x6a0 [ 297.664809][T10658] ? do_getname+0x35/0x390 [ 297.664837][T10658] do_getname+0x35/0x390 [ 297.664862][T10658] do_sys_openat2+0xc7/0x1e0 [ 297.664880][T10658] ? __pfx_do_sys_openat2+0x10/0x10 [ 297.664897][T10658] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 297.664916][T10658] ? __fget_files+0x21f/0x3d0 [ 297.664932][T10658] __ia32_compat_sys_openat+0x12d/0x210 [ 297.664950][T10658] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 297.664968][T10658] ? ksys_write+0x1ac/0x250 [ 297.664985][T10658] do_int80_emulation+0x166/0x650 [ 297.665004][T10658] asm_int80_emulation+0x1a/0x20 [ 297.665016][T10658] RIP: 0023:0xf71475ab [ 297.665027][T10658] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 297.665039][T10658] RSP: 002b:00000000f53fd03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 297.665052][T10658] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53fd100 [ 297.665060][T10658] RDX: 000000000004ae20 RSI: 0000000000000000 RDI: 0000000000000000 [ 297.665067][T10658] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 297.665074][T10658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.665081][T10658] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 297.665096][T10658] [ 297.716924][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.716951][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.946914][ T9906] nvmet: connect request for invalid subsystem testsubsys! [ 297.958388][T10665] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 297.961857][T10670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1519'. [ 297.966131][T10670] veth1: entered promiscuous mode [ 297.974560][T10670] veth1: left promiscuous mode [ 298.418044][T10675] ptrace attach of "/syz-executor exec"[10677] was attempted by "/syz-executor exec"[10675] [ 298.419231][T10678] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1521'. [ 298.495302][ T10] wacom 0003:056A:033B.0005: unknown main item tag 0x0 [ 298.499356][T10680] ptrace attach of "/syz-executor exec"[10681] was attempted by "/syz-executor exec"[10680] [ 298.499740][T10680] FAULT_INJECTION: forcing a failure. [ 298.499740][T10680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.499780][T10680] CPU: 2 UID: 0 PID: 10680 Comm: syz.0.1523 Tainted: G L syzkaller #0 PREEMPT(full) [ 298.499807][T10680] Tainted: [L]=SOFTLOCKUP [ 298.499812][T10680] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 298.499819][T10680] Call Trace: [ 298.499823][T10680] [ 298.499828][T10680] dump_stack_lvl+0x100/0x190 [ 298.499860][T10680] should_fail_ex.cold+0x5/0xa [ 298.499875][T10680] _copy_to_user+0x32/0xd0 [ 298.499889][T10680] simple_read_from_buffer+0xcb/0x170 [ 298.499902][T10680] proc_fail_nth_read+0x1af/0x230 [ 298.499921][T10680] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 298.499939][T10680] ? rw_verify_area+0xce/0x6d0 [ 298.499955][T10680] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 298.499973][T10680] vfs_read+0x1e4/0xb40 [ 298.499983][T10680] ? lock_acquire+0x1d1/0x380 [ 298.499998][T10680] ? __fget_files+0x34/0x3d0 [ 298.500009][T10680] ? __pfx_vfs_read+0x10/0x10 [ 298.500018][T10680] ? find_held_lock+0x2b/0x80 [ 298.500029][T10680] ? __fget_files+0x215/0x3d0 [ 298.500043][T10680] ? __fget_files+0x21f/0x3d0 [ 298.500058][T10680] ksys_read+0x12a/0x250 [ 298.500068][T10680] ? __pfx_ksys_read+0x10/0x10 [ 298.500082][T10680] do_int80_emulation+0x166/0x650 [ 298.500100][T10680] asm_int80_emulation+0x1a/0x20 [ 298.500111][T10680] RIP: 0023:0xf71975ab [ 298.500120][T10680] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 298.500131][T10680] RSP: 002b:00000000f544d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 298.500142][T10680] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f544d5d0 [ 298.500149][T10680] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 298.500155][T10680] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 298.500162][T10680] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 298.500168][T10680] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.500181][T10680] [ 298.586342][T10689] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1520'. [ 298.586362][T10689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1520'. [ 298.587564][T10689] MPI: mpi too large (113288 bits) [ 298.635961][ T10] wacom 0003:056A:033B.0005: unknown main item tag 0x0 [ 298.641440][ T10] wacom 0003:056A:033B.0005: unknown main item tag 0x0 [ 298.641458][ T10] wacom 0003:056A:033B.0005: unbalanced collection at end of report description [ 298.641738][ T10] wacom 0003:056A:033B.0005: parse failed [ 298.641780][ T10] wacom 0003:056A:033B.0005: probe with driver wacom failed with error -22 [ 299.017565][T10691] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 299.024792][T10691] block device autoloading is deprecated and will be removed. [ 299.236285][ T8994] usb 9-1: USB disconnect, device number 19 [ 299.291687][T10696] FAULT_INJECTION: forcing a failure. [ 299.291687][T10696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.297065][T10696] CPU: 2 UID: 0 PID: 10696 Comm: syz.0.1526 Tainted: G L syzkaller #0 PREEMPT(full) [ 299.297095][T10696] Tainted: [L]=SOFTLOCKUP [ 299.297101][T10696] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 299.297107][T10696] Call Trace: [ 299.297112][T10696] [ 299.297117][T10696] dump_stack_lvl+0x100/0x190 [ 299.297136][T10696] should_fail_ex.cold+0x5/0xa [ 299.297151][T10696] strncpy_from_user+0x3b/0x2d0 [ 299.297163][T10696] ? get_pid_task+0x2a/0x250 [ 299.297176][T10696] do_tcp_setsockopt+0x957/0x2b50 [ 299.297190][T10696] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 299.297203][T10696] ? __lock_acquire+0x4c5/0x1ec0 [ 299.297223][T10696] ? lock_acquire+0x1d1/0x380 [ 299.297237][T10696] ? __fget_files+0x34/0x3d0 [ 299.297249][T10696] ? find_held_lock+0x2b/0x80 [ 299.297263][T10696] tcp_setsockopt+0xe2/0x100 [ 299.297273][T10696] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 299.297290][T10696] do_sock_setsockopt+0xf3/0x1d0 [ 299.297307][T10696] __sys_setsockopt+0x119/0x190 [ 299.297322][T10696] __ia32_sys_setsockopt+0xbc/0x160 [ 299.297334][T10696] ? __do_fast_syscall_32+0xb3/0x8b0 [ 299.297350][T10696] ? lockdep_hardirqs_on+0x7d/0x110 [ 299.297364][T10696] __do_fast_syscall_32+0x13a/0x8b0 [ 299.297378][T10696] ? lockdep_hardirqs_on+0x7d/0x110 [ 299.297398][T10696] do_fast_syscall_32+0x32/0x70 [ 299.297413][T10696] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 299.297427][T10696] RIP: 0023:0xf705efec [ 299.297440][T10696] Code: Unable to access opcode bytes at 0xf705efc2. [ 299.297445][T10696] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 299.297456][T10696] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000006 [ 299.297463][T10696] RDX: 000000000000001f RSI: 0000000080000400 RDI: 0000000000000008 [ 299.297469][T10696] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 299.297476][T10696] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 299.297482][T10696] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 299.297495][T10696] [ 299.892838][T10706] FAULT_INJECTION: forcing a failure. [ 299.892838][T10706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.897874][T10706] CPU: 2 UID: 0 PID: 10706 Comm: syz.0.1531 Tainted: G L syzkaller #0 PREEMPT(full) [ 299.897903][T10706] Tainted: [L]=SOFTLOCKUP [ 299.897909][T10706] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 299.897916][T10706] Call Trace: [ 299.897921][T10706] [ 299.897926][T10706] dump_stack_lvl+0x100/0x190 [ 299.897946][T10706] should_fail_ex.cold+0x5/0xa [ 299.897961][T10706] _copy_from_user+0x2e/0xd0 [ 299.897974][T10706] get_compat_msghdr+0xb3/0x480 [ 299.897991][T10706] ? __pfx_get_compat_msghdr+0x10/0x10 [ 299.898012][T10706] ___sys_sendmsg+0x1b6/0x1e0 [ 299.898031][T10706] ? __pfx____sys_sendmsg+0x10/0x10 [ 299.898059][T10706] ? find_held_lock+0x2b/0x80 [ 299.898080][T10706] __sys_sendmsg+0x160/0x210 [ 299.898094][T10706] ? __pfx___sys_sendmsg+0x10/0x10 [ 299.898110][T10706] ? __pfx_ksys_write+0x10/0x10 [ 299.898124][T10706] __do_fast_syscall_32+0x13a/0x8b0 [ 299.898140][T10706] ? lockdep_hardirqs_on+0x7d/0x110 [ 299.898156][T10706] do_fast_syscall_32+0x32/0x70 [ 299.898171][T10706] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 299.898185][T10706] RIP: 0023:0xf705efec [ 299.898198][T10706] Code: Unable to access opcode bytes at 0xf705efc2. [ 299.898203][T10706] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 299.898215][T10706] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 299.898222][T10706] RDX: 0000000020004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 299.898228][T10706] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 299.898234][T10706] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 299.898241][T10706] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 299.898254][T10706] [ 300.023480][T10711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1532'. [ 301.224143][T10726] FAULT_INJECTION: forcing a failure. [ 301.224143][T10726] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 301.224658][T10726] CPU: 3 UID: 0 PID: 10726 Comm: syz.3.1536 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.224684][T10726] Tainted: [L]=SOFTLOCKUP [ 301.224690][T10726] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 301.224700][T10726] Call Trace: [ 301.224710][T10726] [ 301.224718][T10726] dump_stack_lvl+0x100/0x190 [ 301.224746][T10726] should_fail_ex.cold+0x5/0xa [ 301.224765][T10726] ? prepare_alloc_pages+0x16d/0x5b0 [ 301.224789][T10726] should_fail_alloc_page+0xeb/0x140 [ 301.224812][T10726] prepare_alloc_pages+0x1f0/0x5b0 [ 301.224837][T10726] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 301.224864][T10726] ? unwind_get_return_address+0x59/0xa0 [ 301.224888][T10726] ? __lock_acquire+0x4c5/0x1ec0 [ 301.224915][T10726] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 301.224939][T10726] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 301.224965][T10726] ? look_up_lock_class+0x64/0x120 [ 301.224994][T10726] ? register_lock_class+0x3f/0x7b0 [ 301.225016][T10726] ? find_held_lock+0x2b/0x80 [ 301.225031][T10726] ? ima_match_policy+0x8c4/0x23f0 [ 301.225058][T10726] ? __lock_acquire+0x4c5/0x1ec0 [ 301.225089][T10726] ? __lock_acquire+0x4c5/0x1ec0 [ 301.225110][T10726] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 301.225134][T10726] ? policy_nodemask+0xed/0x4f0 [ 301.225157][T10726] alloc_pages_mpol+0x201/0x550 [ 301.225180][T10726] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 301.225201][T10726] ? do_raw_spin_lock+0x128/0x260 [ 301.225225][T10726] ? find_held_lock+0x2b/0x80 [ 301.225240][T10726] ? swap_cache_alloc_folio+0x374/0xc50 [ 301.225261][T10726] folio_alloc_mpol_noprof+0x36/0x260 [ 301.225287][T10726] swap_cache_alloc_folio+0x3d7/0xc50 [ 301.225309][T10726] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 301.225326][T10726] ? swap_cache_get_folio+0x28d/0x360 [ 301.225352][T10726] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 301.225378][T10726] ? lock_acquire+0x1d1/0x380 [ 301.225398][T10726] ? unwind_next_frame+0xbd/0x2090 [ 301.225421][T10726] swap_cache_read_folio+0x47/0x140 [ 301.225441][T10726] swap_cluster_readahead+0x477/0x5d0 [ 301.225464][T10726] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 301.225485][T10726] ? swap_table_get+0x28/0x2c0 [ 301.225523][T10726] swapin_readahead+0xf0/0x260 [ 301.225539][T10726] ? __pfx_swapin_readahead+0x10/0x10 [ 301.225556][T10726] ? __pfx_get_swap_device+0x10/0x10 [ 301.225583][T10726] do_swap_page+0xf72/0x5580 [ 301.225616][T10726] ? __pfx_do_swap_page+0x10/0x10 [ 301.225637][T10726] ? lock_acquire+0x1d1/0x380 [ 301.225657][T10726] ? __pte_offset_map+0x2f/0x310 [ 301.225681][T10726] ? rcu_is_watching+0x13/0xc0 [ 301.225697][T10726] ? __pte_offset_map+0x179/0x310 [ 301.225718][T10726] __handle_mm_fault+0x15bd/0x2f60 [ 301.225744][T10726] ? lock_vma_under_rcu+0x11d/0x590 [ 301.225767][T10726] ? __pfx___handle_mm_fault+0x10/0x10 [ 301.225796][T10726] ? lock_vma_under_rcu+0x17c/0x590 [ 301.225860][T10726] handle_mm_fault+0x363/0xa20 [ 301.225889][T10726] do_user_addr_fault+0x59c/0x12f0 [ 301.225915][T10726] exc_page_fault+0x6f/0xd0 [ 301.225938][T10726] asm_exc_page_fault+0x26/0x30 [ 301.225954][T10726] RIP: 0023:0xf70bd558 [ 301.225968][T10726] Code: 0c 8b 44 24 10 8d 80 ff 93 e3 ff 50 e8 31 3b ff ff 83 c4 7c 5b 5e 5f 5d c3 2e 8d b4 26 00 00 00 00 90 8b 44 24 20 8b 5c 24 08 <8b> 90 80 00 00 00 8b 40 04 8d 4b 2c e8 17 8b ff ff 89 43 5c e9 db [ 301.225989][T10726] RSP: 002b:00000000f5486580 EFLAGS: 00010246 [ 301.226005][T10726] RAX: 00000000f7426fb0 RBX: 00000000f7484f80 RCX: 00000000e2221a11 [ 301.226016][T10726] RDX: 00000000f5486a6c RSI: 0000000000000004 RDI: 00000000f54865c0 [ 301.226026][T10726] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 301.226036][T10726] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 301.226046][T10726] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 301.226068][T10726] [ 301.226277][T10726] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 301.679288][T10738] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 301.844623][T10742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1542'. [ 301.926372][T10747] FAULT_INJECTION: forcing a failure. [ 301.926372][T10747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.926426][T10747] CPU: 2 UID: 0 PID: 10747 Comm: syz.1.1543 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.926458][T10747] Tainted: [L]=SOFTLOCKUP [ 301.926465][T10747] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 301.926473][T10747] Call Trace: [ 301.926477][T10747] [ 301.926483][T10747] dump_stack_lvl+0x100/0x190 [ 301.926505][T10747] should_fail_ex.cold+0x5/0xa [ 301.926522][T10747] _copy_to_user+0x32/0xd0 [ 301.926538][T10747] simple_read_from_buffer+0xcb/0x170 [ 301.926554][T10747] proc_fail_nth_read+0x1af/0x230 [ 301.926576][T10747] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 301.926611][T10747] ? rw_verify_area+0xce/0x6d0 [ 301.926633][T10747] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 301.926654][T10747] vfs_read+0x1e4/0xb40 [ 301.926667][T10747] ? lock_acquire+0x1d1/0x380 [ 301.926720][T10747] ? __fget_files+0x34/0x3d0 [ 301.926745][T10747] ? __pfx_vfs_read+0x10/0x10 [ 301.926757][T10747] ? find_held_lock+0x2b/0x80 [ 301.926770][T10747] ? __fget_files+0x215/0x3d0 [ 301.926787][T10747] ? __fget_files+0x21f/0x3d0 [ 301.926819][T10747] ksys_read+0x12a/0x250 [ 301.926840][T10747] ? __pfx_ksys_read+0x10/0x10 [ 301.926864][T10747] do_int80_emulation+0x166/0x650 [ 301.926899][T10747] asm_int80_emulation+0x1a/0x20 [ 301.926920][T10747] RIP: 0023:0xf71475ab [ 301.926934][T10747] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 301.926946][T10747] RSP: 002b:00000000f53dc4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 301.926960][T10747] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f53dc5d0 [ 301.926968][T10747] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 301.926975][T10747] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 301.926982][T10747] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 301.926990][T10747] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 301.927006][T10747] [ 302.060505][T10752] qrtr: Invalid version 0 [ 302.349002][T10763] FAULT_INJECTION: forcing a failure. [ 302.349002][T10763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.354724][T10763] CPU: 2 UID: 0 PID: 10763 Comm: syz.1.1550 Tainted: G L syzkaller #0 PREEMPT(full) [ 302.354756][T10763] Tainted: [L]=SOFTLOCKUP [ 302.354762][T10763] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 302.354769][T10763] Call Trace: [ 302.354803][T10763] [ 302.354809][T10763] dump_stack_lvl+0x100/0x190 [ 302.354864][T10763] should_fail_ex.cold+0x5/0xa [ 302.354879][T10763] _copy_from_user+0x2e/0xd0 [ 302.354912][T10763] get_compat_msghdr+0xb3/0x480 [ 302.354949][T10763] ? __pfx_get_compat_msghdr+0x10/0x10 [ 302.354971][T10763] ___sys_sendmsg+0x1b6/0x1e0 [ 302.354989][T10763] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.355013][T10763] ? find_held_lock+0x2b/0x80 [ 302.355034][T10763] __sys_sendmsg+0x160/0x210 [ 302.355048][T10763] ? __pfx___sys_sendmsg+0x10/0x10 [ 302.355065][T10763] ? __pfx_ksys_write+0x10/0x10 [ 302.355079][T10763] __do_fast_syscall_32+0x13a/0x8b0 [ 302.355115][T10763] ? lockdep_hardirqs_on+0x7d/0x110 [ 302.355131][T10763] do_fast_syscall_32+0x32/0x70 [ 302.355147][T10763] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 302.355161][T10763] RIP: 0023:0xf700efec [ 302.355192][T10763] Code: Unable to access opcode bytes at 0xf700efc2. [ 302.355216][T10763] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 302.355227][T10763] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 302.355235][T10763] RDX: 0000000020004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 302.355241][T10763] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 302.355247][T10763] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 302.355254][T10763] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 302.355268][T10763] [ 302.503028][T10767] random: crng reseeded on system resumption [ 302.520763][T10767] input: syz1 as /devices/virtual/input/input83 [ 302.577803][T10767] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1551'. [ 302.625948][T10774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1553'. [ 302.928801][T10787] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 303.106715][T10791] input: syz0 as /devices/virtual/input/input84 [ 303.162413][ T9906] IPVS: starting estimator thread 0... [ 303.243392][T10800] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1564'. [ 303.247735][T10800] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1564'. [ 303.251328][T10798] IPVS: using max 43 ests per chain, 103200 per kthread [ 303.670412][ T42] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 303.836082][ T42] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 303.844584][ T42] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.848509][ T42] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.858782][ T42] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected [ 303.858908][ T42] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 81 [ 303.858954][ T42] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 1 [ 303.859562][ T42] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84 [ 303.859611][ T42] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2 [ 303.880737][ T42] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 303.884162][ T42] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 303.886818][ T42] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 303.891546][ T42] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 304.403248][ T42] usb 9-1: USB disconnect, device number 20 [ 304.416393][ T42] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 304.433524][ T42] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 304.437044][ T42] keyspan 9-1:1.0: device disconnected [ 306.055402][T10846] erofs (device nbd1): cannot find valid erofs superblock [ 307.068842][T10858] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1582'. [ 307.333383][T10867] fuse: Unknown parameter 'orou˙id' [ 307.410638][T10869] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1585'. [ 309.992231][ T1174] IPVS: starting estimator thread 0... [ 310.080059][T10900] IPVS: using max 43 ests per chain, 103200 per kthread [ 310.145928][ T5745] syz_tun (unregistering): left allmulticast mode [ 310.194428][T10902] erofs (device nbd3): cannot find valid erofs superblock [ 310.954625][ T13] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.203567][T10917] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 311.213729][ T13] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.345900][ T13] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.373303][ T5742] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 311.382569][ T5742] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 311.390429][ T5742] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 311.400663][ T5742] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 311.403371][ T5742] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 311.531319][ T13] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.151891][T10939] qrtr: Invalid version 0 [ 312.503912][ T13] bridge_slave_1: left allmulticast mode [ 312.528410][ T13] bridge_slave_1: left promiscuous mode [ 312.531194][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.668607][ T13] bridge_slave_0: left allmulticast mode [ 312.668656][ T13] bridge_slave_0: left promiscuous mode [ 312.670139][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.682154][ T13] pim6reg: left allmulticast mode [ 313.191282][T10955] overlayfs: failed to resolve '/˙˙': -2 [ 313.191536][T10956] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 313.204006][T10958] overlayfs: failed to resolve '/˙˙': -2 [ 313.489833][ T5748] Bluetooth: hci3: command tx timeout [ 313.779840][T10961] erofs (device nbd4): cannot find valid erofs superblock [ 314.254278][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.278782][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.290894][ T13] bond0 (unregistering): Released all slaves [ 314.341296][T10921] wg2 speed is unknown, defaulting to 1000 [ 314.468253][ T13] tipc: Disabling bearer [ 314.468447][ T13] tipc: Left network mode [ 315.570019][ T5748] Bluetooth: hci3: command tx timeout [ 316.135639][ T5450] 8021q: adding VLAN 0 to HW filter on device eth2 [ 316.334615][T10989] qrtr: Invalid version 0 [ 316.694357][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.697267][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.674357][ T5748] Bluetooth: hci3: command tx timeout [ 317.894790][ T13] hsr_slave_0: left promiscuous mode [ 317.903298][ T13] hsr_slave_1: left promiscuous mode [ 317.919046][ T13] batman_adv: : Interface deactivated: batadv_slave_0 [ 317.923580][ T13] batman_adv: : Removing interface: batadv_slave_0 [ 317.950421][ T13] batman_adv: : Interface deactivated: batadv_slave_1 [ 317.953461][ T13] batman_adv: : Removing interface: batadv_slave_1 [ 318.628224][ T13] veth1_macvtap: left promiscuous mode [ 318.697380][ T13] veth0_macvtap: left promiscuous mode [ 318.701802][ T13] veth1_vlan: left promiscuous mode [ 318.716824][ T13] veth0_vlan: left promiscuous mode [ 319.739622][ T5748] Bluetooth: hci3: command tx timeout [ 319.979866][T11011] CUSE: info not properly terminated [ 319.982608][ T5748] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 320.159798][T11014] erofs (device nbd1): cannot find valid erofs superblock [ 320.392699][ T5450] 8021q: adding VLAN 0 to HW filter on device eth3 [ 320.705341][T11025] FAULT_INJECTION: forcing a failure. [ 320.705341][T11025] name failslab, interval 1, probability 0, space 0, times 0 [ 320.705761][T11025] CPU: 3 UID: 0 PID: 11025 Comm: syz.3.1624 Tainted: G L syzkaller #0 PREEMPT(full) [ 320.705782][T11025] Tainted: [L]=SOFTLOCKUP [ 320.705787][T11025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 320.705795][T11025] Call Trace: [ 320.705801][T11025] [ 320.705807][T11025] dump_stack_lvl+0x100/0x190 [ 320.705892][T11025] should_fail_ex.cold+0x5/0xa [ 320.705910][T11025] should_failslab+0xc2/0x120 [ 320.705946][T11025] __kmalloc_noprof+0xfc/0x840 [ 320.705959][T11025] ? tomoyo_encode2+0xfb/0x3c0 [ 320.705983][T11025] tomoyo_encode2+0xfb/0x3c0 [ 320.706004][T11025] tomoyo_encode+0x29/0x50 [ 320.706022][T11025] tomoyo_mount_acl+0x14c/0x8b0 [ 320.706039][T11025] ? is_bpf_text_address+0x8a/0x1a0 [ 320.706056][T11025] ? is_bpf_text_address+0x8a/0x1a0 [ 320.706072][T11025] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 320.706091][T11025] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 320.706107][T11025] ? kernel_text_address+0x8d/0x100 [ 320.706123][T11025] ? unwind_get_return_address+0x59/0xa0 [ 320.706137][T11025] ? arch_stack_walk+0xa6/0xf0 [ 320.706152][T11025] ? __lock_acquire+0x4c5/0x1ec0 [ 320.706174][T11025] ? tomoyo_mount_permission+0x1f6/0x460 [ 320.706193][T11025] ? tomoyo_domain+0xb2/0x150 [ 320.706204][T11025] ? tomoyo_profile+0x47/0x60 [ 320.706216][T11025] tomoyo_mount_permission+0x214/0x460 [ 320.706233][T11025] ? tomoyo_mount_permission+0x1f6/0x460 [ 320.706250][T11025] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 320.706275][T11025] security_sb_mount+0xdd/0x270 [ 320.706291][T11025] path_mount+0x158/0x24c0 [ 320.706309][T11025] ? __pfx_path_mount+0x10/0x10 [ 320.706323][T11025] ? lockdep_hardirqs_on+0x7d/0x110 [ 320.706364][T11025] ? putname+0xb1/0x110 [ 320.706379][T11025] ? kmem_cache_free+0x127/0x6c0 [ 320.706405][T11025] ? __ia32_sys_mount+0x292/0x310 [ 320.706422][T11025] __ia32_sys_mount+0x292/0x310 [ 320.706439][T11025] ? __pfx___ia32_sys_mount+0x10/0x10 [ 320.706460][T11025] __do_fast_syscall_32+0x13a/0x8b0 [ 320.706482][T11025] do_fast_syscall_32+0x32/0x70 [ 320.706501][T11025] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 320.706516][T11025] RIP: 0023:0xf7fc7fec [ 320.706528][T11025] Code: Unable to access opcode bytes at 0xf7fc7fc2. [ 320.706534][T11025] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 320.706545][T11025] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000080 [ 320.706553][T11025] RDX: 0000000080000400 RSI: 0000000000010000 RDI: 0000000080000180 [ 320.706559][T11025] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 320.706566][T11025] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 320.706573][T11025] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 320.706642][T11025] [ 320.943313][T11033] FAULT_INJECTION: forcing a failure. [ 320.943313][T11033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.947649][T11033] CPU: 2 UID: 0 PID: 11033 Comm: syz.4.1626 Tainted: G L syzkaller #0 PREEMPT(full) [ 320.947679][T11033] Tainted: [L]=SOFTLOCKUP [ 320.947684][T11033] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 320.947691][T11033] Call Trace: [ 320.947695][T11033] [ 320.947700][T11033] dump_stack_lvl+0x100/0x190 [ 320.947720][T11033] should_fail_ex.cold+0x5/0xa [ 320.947735][T11033] _copy_from_user+0x2e/0xd0 [ 320.947749][T11033] __sys_bpf+0x2f5/0x4a30 [ 320.947764][T11033] ? __pfx___sys_bpf+0x10/0x10 [ 320.947774][T11033] ? lock_acquire+0x1d1/0x380 [ 320.947788][T11033] ? get_pid_task+0x2a/0x250 [ 320.947800][T11033] ? find_held_lock+0x2b/0x80 [ 320.947811][T11033] ? get_pid_task+0xfc/0x250 [ 320.947821][T11033] ? get_pid_task+0xfc/0x250 [ 320.947835][T11033] ? proc_fail_nth_write+0x9f/0x220 [ 320.947846][T11033] ? find_held_lock+0x2b/0x80 [ 320.947860][T11033] ? rcu_read_lock_any_held+0x6a/0x90 [ 320.947872][T11033] ? find_held_lock+0x2b/0x80 [ 320.947884][T11033] ? __pfx___cant_migrate+0x10/0x10 [ 320.947905][T11033] ? fput+0x7c/0x100 [ 320.947919][T11033] ? __ia32_sys_bpf+0xcc/0x170 [ 320.947930][T11033] __ia32_sys_bpf+0xcc/0x170 [ 320.947941][T11033] ? __seccomp_permit_syscall+0x1e7/0x2d0 [ 320.947955][T11033] __do_fast_syscall_32+0x13a/0x8b0 [ 320.947970][T11033] ? lockdep_hardirqs_on+0x7d/0x110 [ 320.947986][T11033] do_fast_syscall_32+0x32/0x70 [ 320.948002][T11033] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 320.948016][T11033] RIP: 0023:0xf7f88fec [ 320.948029][T11033] Code: Unable to access opcode bytes at 0xf7f88fc2. [ 320.948034][T11033] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 320.948045][T11033] RAX: ffffffffffffffda RBX: 000000000000001c RCX: 00000000800005c0 [ 320.948052][T11033] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000000 [ 320.948059][T11033] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 320.948065][T11033] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 320.948071][T11033] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 320.948085][T11033] [ 321.096063][T10921] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.098683][T10921] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.102525][T10921] bridge_slave_0: entered allmulticast mode [ 321.107062][T10921] bridge_slave_0: entered promiscuous mode [ 321.110453][T10921] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.113170][T10921] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.116061][T10921] bridge_slave_1: entered allmulticast mode [ 321.118918][T10921] bridge_slave_1: entered promiscuous mode [ 321.140146][T10921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.154527][T10921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.173512][T10921] team0: Port device team_slave_0 added [ 321.177311][T10921] team0: Port device team_slave_1 added [ 321.190702][T10921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.193144][T10921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.201947][T10921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.210087][T10921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.212708][T10921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.220662][T10921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.255390][T10921] hsr_slave_0: entered promiscuous mode [ 321.258178][T10921] hsr_slave_1: entered promiscuous mode [ 321.260644][T10921] debugfs: 'hsr0' already exists in 'hsr' [ 321.262797][T10921] Cannot create hsr debugfs directory [ 321.374337][ T5450] 8021q: adding VLAN 0 to HW filter on device eth4 [ 321.574880][ T13] IPVS: stop unused estimator thread 0... [ 321.706849][T10921] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 321.722317][T10921] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 321.725440][T10921] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 321.744682][T10921] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 321.751438][T10921] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 321.769032][T10921] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 321.778839][T10921] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 321.807670][T10921] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 322.075346][T10921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.085213][T10921] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.092390][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.092463][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.101210][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.101281][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.159448][ T5450] 8021q: adding VLAN 0 to HW filter on device eth5 [ 322.308690][T11072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1632'. [ 322.309145][T11072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1632'. [ 322.495823][T11052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1630'. [ 322.892963][T11083] xt_MASQUERADE: bad MAP_IPS. [ 323.102843][T11082] block nbd4: shutting down sockets [ 323.117239][T10921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.524302][T10921] veth0_vlan: entered promiscuous mode [ 323.543376][T10921] veth1_vlan: entered promiscuous mode [ 323.580488][T10921] veth0_macvtap: entered promiscuous mode [ 323.698317][T11104] FAULT_INJECTION: forcing a failure. [ 323.698317][T11104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.706209][T11104] CPU: 2 UID: 0 PID: 11104 Comm: syz.4.1644 Tainted: G L syzkaller #0 PREEMPT(full) [ 323.706242][T11104] Tainted: [L]=SOFTLOCKUP [ 323.706248][T11104] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 323.706256][T11104] Call Trace: [ 323.706260][T11104] [ 323.706275][T11104] dump_stack_lvl+0x100/0x190 [ 323.706296][T11104] should_fail_ex.cold+0x5/0xa [ 323.706312][T11104] _copy_from_user+0x2e/0xd0 [ 323.706327][T11104] get_compat_msghdr+0xb3/0x480 [ 323.706382][T11104] ? __pfx_get_compat_msghdr+0x10/0x10 [ 323.706409][T11104] ___sys_sendmsg+0x1b6/0x1e0 [ 323.706430][T11104] ? __pfx____sys_sendmsg+0x10/0x10 [ 323.706455][T11104] ? find_held_lock+0x2b/0x80 [ 323.706478][T11104] __sys_sendmsg+0x160/0x210 [ 323.706493][T11104] ? __pfx___sys_sendmsg+0x10/0x10 [ 323.706512][T11104] ? __pfx_ksys_write+0x10/0x10 [ 323.706527][T11104] __do_fast_syscall_32+0x13a/0x8b0 [ 323.706545][T11104] ? lockdep_hardirqs_on+0x7d/0x110 [ 323.706563][T11104] do_fast_syscall_32+0x32/0x70 [ 323.706580][T11104] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 323.706595][T11104] RIP: 0023:0xf7f88fec [ 323.706609][T11104] Code: Unable to access opcode bytes at 0xf7f88fc2. [ 323.706615][T11104] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 323.706627][T11104] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000600 [ 323.706635][T11104] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 323.706642][T11104] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 323.706649][T11104] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 323.706667][T11104] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 323.706684][T11104] [ 323.861587][T11106] fuse: Bad value for 'fd' [ 323.923498][T10921] veth1_macvtap: entered promiscuous mode [ 323.960558][T10921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.040999][T10921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.080994][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.081236][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.081343][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.081937][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.391493][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.391528][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.451900][ T9906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.452052][ T9906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.490094][T11123] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1643'. [ 324.499968][T11123] syzkaller1: entered promiscuous mode [ 324.502404][T11123] syzkaller1: entered allmulticast mode [ 324.506923][T11123] CUSE: info not properly terminated [ 324.747181][T11125] netlink: 'syz.3.1645': attribute type 10 has an invalid length. [ 324.771307][T11128] qrtr: Invalid version 0 [ 324.912332][ T55] ================================================================== [ 324.912353][ T55] BUG: KASAN: slab-use-after-free in drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 324.912377][ T55] Read of size 1 at addr ffff88805f28dc09 by task kworker/u33:2/55 [ 324.912386][ T55] [ 324.912393][ T55] CPU: 2 UID: 0 PID: 55 Comm: kworker/u33:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 324.912408][ T55] Tainted: [L]=SOFTLOCKUP [ 324.912412][ T55] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 324.912420][ T55] Workqueue: events_unbound commit_work [ 324.912436][ T55] Call Trace: [ 324.912441][ T55] [ 324.912445][ T55] dump_stack_lvl+0x100/0x190 [ 324.912459][ T55] print_report+0x13d/0x4b0 [ 324.912476][ T55] ? ** replaying previous printk message ** [ 324.912476][ T55] ? __virt_addr_valid+0x239/0x430 [ 324.912492][ T55] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 324.912507][ T55] kasan_report+0xdf/0x1c0 [ 324.912521][ T55] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 324.912538][ T55] drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 324.912554][ T55] ? preempt_schedule_common+0x3c/0xb0 [ 324.912568][ T55] ? preempt_schedule_thunk+0x16/0x40 [ 324.912580][ T55] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 324.912596][ T55] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 324.912609][ T55] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 324.912626][ T55] drm_atomic_helper_commit_tail+0xff/0x130 [ 324.912641][ T55] commit_tail+0x338/0x430 [ 324.912657][ T55] process_one_work+0xac7/0x1b10 [ 324.912673][ T55] ? __pfx_process_one_work+0x10/0x10 [ 324.912685][ T55] ? lock_acquire+0x1d1/0x380 [ 324.912701][ T55] ? __pfx_commit_work+0x10/0x10 [ 324.912716][ T55] worker_thread+0x5ef/0xe50 [ 324.912730][ T55] ? __pfx_worker_thread+0x10/0x10 [ 324.912742][ T55] ? kthread+0x13a/0x450 [ 324.912753][ T55] ? __pfx_worker_thread+0x10/0x10 [ 324.912765][ T55] kthread+0x373/0x450 [ 324.912775][ T55] ? __pfx_kthread+0x10/0x10 [ 324.912786][ T55] ret_from_fork+0x730/0xd60 [ 324.912803][ T55] ? __pfx_ret_from_fork+0x10/0x10 [ 324.912819][ T55] ? __switch_to+0x800/0x10f0 [ 324.912832][ T55] ? __pfx_kthread+0x10/0x10 [ 324.912843][ T55] ret_from_fork_asm+0x1a/0x30 [ 324.912856][ T55] [ 324.912860][ T55] [ 324.912862][ T55] Allocated by task 11133: [ 324.912867][ T55] kasan_save_stack+0x30/0x50 [ 324.912878][ T55] kasan_save_track+0x14/0x30 [ 324.912889][ T55] __kasan_kmalloc+0xaa/0xb0 [ 324.912898][ T55] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 324.912914][ T55] drm_atomic_helper_crtc_duplicate_state+0x72/0xd0 [ 324.912930][ T55] drm_atomic_get_crtc_state+0x1de/0x690 [ 324.912948][ T55] drm_atomic_set_property+0x165/0x3f90 [ 324.912961][ T55] drm_mode_atomic_ioctl+0x6ed/0x27c0 [ 324.912975][ T55] drm_ioctl_kernel+0x1f3/0x3e0 [ 324.912987][ T55] drm_ioctl+0x5e6/0xc60 [ 324.912999][ T55] drm_compat_ioctl+0x386/0x4c0 [ 324.913014][ T55] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 324.913030][ T55] __do_fast_syscall_32+0x13a/0x8b0 [ 324.913044][ T55] do_fast_syscall_32+0x32/0x70 [ 324.913057][ T55] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 324.913069][ T55] [ 324.913071][ T55] Freed by task 42: [ 324.913076][ T55] kasan_save_stack+0x30/0x50 [ 324.913086][ T55] kasan_save_track+0x14/0x30 [ 324.913096][ T55] kasan_save_free_info+0x3b/0x70 [ 324.913111][ T55] __kasan_slab_free+0x5f/0x80 [ 324.913122][ T55] kfree+0x22b/0x6d0 [ 324.913135][ T55] drm_atomic_commit_default_clear+0x465/0x10c0 [ 324.913148][ T55] __drm_atomic_commit_free+0x185/0x2f0 [ 324.913161][ T55] drm_atomic_helper_dirtyfb+0x578/0x790 [ 324.913171][ T55] drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x350 [ 324.913181][ T55] drm_fb_helper_damage_work+0x4c8/0xab0 [ 324.913196][ T55] process_one_work+0xac7/0x1b10 [ 324.913207][ T55] worker_thread+0x5ef/0xe50 [ 324.913218][ T55] kthread+0x373/0x450 [ 324.913227][ T55] ret_from_fork+0x730/0xd60 [ 324.913242][ T55] ret_from_fork_asm+0x1a/0x30 [ 324.913250][ T55] [ 324.913252][ T55] The buggy address belongs to the object at ffff88805f28dc00 [ 324.913252][ T55] which belongs to the cache kmalloc-512 of size 512 [ 324.913260][ T55] The buggy address is located 9 bytes inside of [ 324.913260][ T55] freed 512-byte region [ffff88805f28dc00, ffff88805f28de00) [ 324.913270][ T55] [ 324.913272][ T55] The buggy address belongs to the physical page: [ 324.913277][ T55] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5f28c [ 324.913287][ T55] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 324.913295][ T55] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 324.913305][ T55] page_type: f5(slab) [ 324.913314][ T55] raw: 04fff00000000040 ffff88801c042c80 dead000000000100 dead000000000122 [ 324.913323][ T55] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 324.913332][ T55] head: 04fff00000000040 ffff88801c042c80 dead000000000100 dead000000000122 [ 324.913341][ T55] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 324.913350][ T55] head: 04fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 324.913359][ T55] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 324.913376][ T55] page dumped because: kasan: bad access detected [ 324.913381][ T55] page_owner tracks the page as allocated [ 324.913385][ T55] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5745, tgid 5745 (syz-executor), ts 40762267093 [ 324.913402][ T55] post_alloc_hook+0xfd/0x120 [ 324.913417][ T55] get_page_from_freelist+0x110d/0x35d0 [ 324.913433][ T55] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 324.913449][ T55] new_slab+0xa9/0x6e0 [ 324.913463][ T55] refill_objects+0xe3/0x410 [ 324.913478][ T55] __pcs_replace_empty_main+0x35e/0x650 [ 324.913493][ T55] __kmalloc_noprof+0x67c/0x840 [ 324.913502][ T55] fib6_info_alloc+0x40/0x160 [ 324.913512][ T55] ip6_route_info_create+0x14c/0xad0 [ 324.913521][ T55] ip6_route_add+0x4b/0x1d0 [ 324.913533][ T55] addrconf_add_mroute+0x1de/0x350 [ 324.913547][ T55] addrconf_add_dev+0x14e/0x1a0 [ 324.913555][ T55] inet6_addr_add+0xfc/0x9a0 [ 324.913565][ T55] inet6_rtm_newaddr+0x147a/0x1bb0 [ 324.913575][ T55] rtnetlink_rcv_msg+0x95e/0xe90 [ 324.913588][ T55] netlink_rcv_skb+0x159/0x420 [ 324.913598][ T55] page last free pid 5745 tgid 5745 ts 40133903489 stack trace: [ 324.913605][ T55] __free_frozen_pages+0x79f/0x10f0 [ 324.913618][ T55] qlist_free_all+0x47/0xf0 [ 324.913628][ T55] kasan_quarantine_reduce+0x1a0/0x1f0 [ 324.913638][ T55] __kasan_slab_alloc+0x69/0x90 [ 324.913649][ T55] __kmalloc_cache_noprof+0x278/0x6d0 [ 324.913664][ T55] __netdev_adjacent_dev_insert+0x22b/0xbf0 [ 324.913674][ T55] __netdev_upper_dev_link+0x3d8/0x7e0 [ 324.913688][ T55] netdev_master_upper_dev_link+0x9f/0xd0 [ 324.913723][ T55] hsr_add_port+0x5d2/0xc00 [ 324.913734][ T55] hsr_dev_finalize+0x980/0xd60 [ 324.913743][ T55] hsr_newlink+0x45b/0xa90 [ 324.913752][ T55] rtnl_newlink+0x1697/0x2620 [ 324.913764][ T55] rtnetlink_rcv_msg+0x95e/0xe90 [ 324.913776][ T55] netlink_rcv_skb+0x159/0x420 [ 324.913786][ T55] netlink_unicast+0x585/0x850 [ 324.913795][ T55] netlink_sendmsg+0x8b0/0xda0 [ 324.913804][ T55] [ 324.913807][ T55] Memory state around the buggy address: [ 324.913880][ T55] ffff88805f28db00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 324.913889][ T55] ffff88805f28db80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 324.913900][ T55] >ffff88805f28dc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 324.913906][ T55] ^ [ 324.913912][ T55] ffff88805f28dc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 324.913919][ T55] ffff88805f28dd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 324.913925][ T55] ================================================================== [ 324.928458][T11125] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 324.954920][ T55] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 325.192517][ T55] CPU: 0 UID: 0 PID: 55 Comm: kworker/u33:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 325.196340][ T55] Tainted: [L]=SOFTLOCKUP [ 325.198010][ T55] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 325.201278][ T55] Workqueue: events_unbound commit_work [ 325.202982][ T55] Call Trace: [ 325.204071][ T55] [ 325.205014][ T55] dump_stack_lvl+0x100/0x190 [ 325.206521][ T55] vpanic+0x553/0x970 [ 325.207817][ T55] ? __pfx_vpanic+0x10/0x10 [ 325.209331][ T55] ? mark_held_locks+0x40/0x70 [ 325.210902][ T55] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 325.213285][ T55] panic+0xd1/0xe0 [ 325.214498][ T55] ? __pfx_panic+0x10/0x10 [ 325.215961][ T55] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 325.218528][ T55] ? preempt_schedule_common+0x3c/0xb0 [ 325.220463][ T55] check_panic_on_warn.cold+0x19/0x34 [ 325.222232][ T55] end_report.part.0+0x3a/0x90 [ 325.223772][ T55] kasan_report.cold+0xe/0x18 [ 325.225346][ T55] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 325.227632][ T55] drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 325.229801][ T55] ? preempt_schedule_common+0x3c/0xb0 [ 325.231486][ T55] ? preempt_schedule_thunk+0x16/0x40 [ 325.233215][ T55] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 325.235978][ T55] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 325.238167][ T55] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 325.240443][ T55] drm_atomic_helper_commit_tail+0xff/0x130 [ 325.242461][ T55] commit_tail+0x338/0x430 [ 325.243875][ T55] process_one_work+0xac7/0x1b10 [ 325.245437][ T55] ? __pfx_process_one_work+0x10/0x10 [ 325.247136][ T55] ? lock_acquire+0x1d1/0x380 [ 325.248684][ T55] ? __pfx_commit_work+0x10/0x10 [ 325.250252][ T55] worker_thread+0x5ef/0xe50 [ 325.251714][ T55] ? __pfx_worker_thread+0x10/0x10 [ 325.253323][ T55] ? kthread+0x13a/0x450 [ 325.254663][ T55] ? __pfx_worker_thread+0x10/0x10 [ 325.256292][ T55] kthread+0x373/0x450 [ 325.257574][ T55] ? __pfx_kthread+0x10/0x10 [ 325.259061][ T55] ret_from_fork+0x730/0xd60 [ 325.260936][ T55] ? __pfx_ret_from_fork+0x10/0x10 [ 325.262607][ T55] ? __switch_to+0x800/0x10f0 [ 325.264663][ T55] ? __pfx_kthread+0x10/0x10 [ 325.266919][ T55] ret_from_fork_asm+0x1a/0x30 [ 325.268976][ T55] [ 325.270674][ T55] Kernel Offset: disabled [ 325.272082][ T55] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:46:54 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000003 RBX=ffff88801cb53180 RCX=0000000000000200 RDX=39529a686290c103 RSI=00000000c46c529a RDI=00000000db147cf1 RBP=0000000000000007 RSP=ffffc9000041f2c8 R8 =000000007938eb5a R9 =0000000000000007 R10=0000000000000002 R11=0000000000000001 R12=ffff88801cb52580 R13=0000000000000002 R14=0000000000000003 R15=39529a686290c103 RIP=ffffffff81e6733d RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096963000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffca10662f0 CR3=000000006ae1f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000015422003 Opmask01=0000000000000001 Opmask02=00000000efffbfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000006 0000004000010015 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000001100010015 0000000900000050 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000600000048 0000000000000006 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000006 00001fff01000045 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000f00000054 0000000000000050 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000c 0000000400000024 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004400010015 0000000200000048 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6168730073257325 7325204650420050 5241006e65706f5f 667062203a732500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 444d560056005600 5600054650420050 5241004b40554a5f 435547051f560000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00060014 bb0325047e8b766f 00000000000080fe 0001001400000007 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008000080008 0000256d0000256d ffffffffffffffff 0006001444856880 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 901b748600000000 000080fe00010014 00000008fd80400a e73d4dac6a9bf418 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002001400000048 0000008000080008 000025f3000025f3 ffffffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00060014bb032504 7e8b766f00000000 000080fe00010014 00000007fd80400a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f64200a20202062 616420390a206562 695f00640a626d20 0a64616100206465 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801cf0cb00 RSI=ffffffff81b64e9e RDI=ffff88801cf0cb00 RBP=0000000000000001 RSP=ffffc9000047fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=0000000000000000 RIP=ffffffff81b64e9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096a63000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000057ac01fc CR3=000000000eb96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000001 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005568db2dde00 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005568db2c4c90 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe6819f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe6819f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 797469726765746e 692f33706f6f6c2f 6b636f6c622f6c61 75747269762f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000031 0000000000000000 0000000000007974 69726765746e692f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4ad244c8313dd3b2 0000556d8da77f25 00000000000001b1 0000000000000030 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 772c30362c41352c 39352c38352c3135 2c303566736c6d2c 31312c30312c352c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 342c332c322c312c 3061722c4533312c 4433312c4333312c 4233312c4133312c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3733312c3633312c 3433312c3333312c 3133312c3033316b 2c35312c332c312c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30652d3836313365 4332383570463645 307633303030623a 7475706e693d5341 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00414132302c3841 32302c344132302c 314132302c323832 302c463532302c44 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85ae4625 RDI=ffffffff9bc541e0 RBP=ffffffff9bc541a0 RSP=ffffc9000042f9e0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3530383838666666 R12=0000000000000000 R13=0000000000000033 R14=0000000000000000 R15=ffffc9000042fda8 RIP=ffffffff85ae464f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096b63000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000032511ff8 CR3=0000000048c2c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000009800000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=ffff88802146cb00 RSI=ffffffff855dd0c2 RDI=ffffc90004abfb60 RBP=ffff888049b3c700 RSP=ffffc90004abfab0 R8 =0000000000000001 R9 =fffffbfff211c138 R10=ffffffff908e09c7 R11=0000000000000001 R12=1ffff92000957f58 R13=ffffc90004abfae0 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff855dd0d5 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096c63000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5424ff4 CR3=000000006ebb4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000ffffff80 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560cef683c50 0000560cef683c50 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd7b1de3f0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 716b726f57205d35 35542020205b5d30 32343231392e3432 3320205b203a6c65 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20296c6c75662854 504d454552502030 232072656c6c616b 7a79732020202020 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 204c202020202020 2020202020202047 203a6465746e6961 5420323a3333752f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 72656b726f776b20 3a6d6d6f43203535 203a444950203020 3a4449552032203a ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 555043205d353554 2020205b5d333933 3231392e34323320 205b203a6c656e72 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3ec75d5e92fd37e3 c8bb53a5cd827a4d 5e346a475ed6799e 3c7fd95f97f98bf1 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000