last executing test programs: 2.019068375s ago: executing program 2 (id=957): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xc, 0xb}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24004864}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c", 0x11, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.913743637s ago: executing program 2 (id=960): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x40003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0x4, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80000000, 0x7, 0x3, 0x7}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0xffea, 0x44081}, 0x0) 1.83377959s ago: executing program 2 (id=962): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000a51000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00003cf000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x401b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x100001, 0x11d}) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc8) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000080) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(r2, &(0x7f0000000080)={0x265, 0x2, 0xafd, {{0x54f, 0x124, 0x28, 0x1f00, {}, 0x0, 0x0, 0xc, 0x401, 0xffffffffffffff7d, '\nnodev{evo\x03\xd3\x8b\x92\x00'/27, 0x28, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18x\x99\xa9\x16c\x88\x14\xe5p\x81\x03\xb4\x94\xe1\x00\x00\xfe\xff\xff\xff\xff\xff', 0x2, '\b\x00', 0xac, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4@\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x009\x86Ac\x1dD\xf4\xa3\x9b\x11\x91\x93z(\x0e\x8d\x88\x9f\xc2 \xd1\x15\xac\x8e/\x18K\x9aau\x8d&w*\xb0\xf2\x04M\x8e\xf0&=\xdd\x97\xd3\xc4\'\xb3\xa52\xef\xab\x1d\x1c\xe3,\xa7\xc1\xfc#\x1a\xf4\x84\b\xe0+%P(\xb7\xc9\xbb\x859oM\x8a\xf0\xeb\x95\xfc\x0e\xcc\x99\xf7\x80\xe2'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0xfd85) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000500)=0x7) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x6099, &(0x7f0000000100)={0x0, 0xe9b, 0x4, 0x2, 0x29e, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) r4 = openat$ndctl0(0xffffff9c, &(0x7f0000004f00), 0x20402, 0x0) get_robust_list(0x0, 0x0, 0x0) syz_ublk_add_dev(r0, r3, 0x0, 0x0, &(0x7f0000004f80)={0x2e, 0x28, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000004f40)=@any_dev={0x2, 0x3b2, 0x0, 0x0, 0x1000, 0x3, 0x0, 0x0, 0xe8}}}, &(0x7f0000005000)) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)}, 0x0) 1.761293166s ago: executing program 2 (id=964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xbd}]}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) r3 = socket(0x2d, 0x2, 0x0) bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, r2, 0xc}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x9c}}, 0x20050800) r5 = socket(0x2d, 0x2, 0x0) bind$xdp(r5, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f00000000c0)={r7, r7, 0x7, 0x2, &(0x7f0000000040)='9f', 0xe, 0x4, 0x8, 0x9, 0x3, 0x3, 0x2, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) close(r5) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c000000170a01040000000000000000010000040c00054000000000000000010c0005400000006c256b94040900020073797a32000000000900020073797a31000000000c000540010000000000000108000740000000000900010073797a30"], 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x20008020) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r8, 0x4004743d, 0x110e22fff6) write$cgroup_type(r8, &(0x7f0000000280), 0x9) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PPPIOCBRIDGECHAN(r8, 0x40047435, &(0x7f0000000200)=0x7fffffff) 1.626785337s ago: executing program 3 (id=970): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x8864, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x4, 0x11, 0x0, @empty, @empty}, {0xfffc, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001a00)=@raw={'raw\x00', 0x8, 0x3, 0x1208, 0x10e4, 0x11, 0x148, 0x0, 0x0, 0x1174, 0x2a8, 0x2a8, 0x1174, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffffff, 0xff000000, 'wg1\x00', 'dvmrp0\x00', {0xff}, {}, 0x67, 0x3, 0x2}, 0x0, 0x10c4, 0x10e4, 0x0, {}, [@common=@ttl={{0x24}, {0x0, 0x9}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x0, './cgroup.net/syz0\x00', 0x0, {0xe000000}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0xffffffff, 'macvtap0\x00', 'netdevsim0\x00', {0xff}}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x1264) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x28) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2}, 0x0, 0x0}, 0x1c) write(r2, &(0x7f0000000280), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='127.0.0.1', 0x9) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00') statx(r3, &(0x7f0000000240)='./config/file0\x00', 0x100, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r4, &(0x7f00000005c0)='.\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000001811", @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000080)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r5, 0x0, 0x25, 0x10, @void}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_PROBE_RESP={0x4}, @NL80211_ATTR_IE_PROBE_RESP={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}]}, 0x5c}}, 0x0) 1.555262883s ago: executing program 3 (id=972): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000004c000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x8, 0x0, 0x0, 0x1c3, 0x0, 0x0, 0x38, 0x16}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d80762ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x80000001, 0x0, 0x0, 0x10000004, {0x40, 0xd08, 0x0, 0xfe, 0x0, 0x1, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902, 0xfffffffd}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x800c0910, 0x200000000005) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006240)={0x2020, 0x0, 0x0}, 0x8001) r3 = socket$inet6(0xa, 0x3, 0x7) acct(&(0x7f0000000140)='./file0\x00') setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000440)=ANY=[@ANYBLOB="2b00001000000002"], 0x8) sendto$inet6(r3, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x1, 0x9, 0x0, 0xabee, 0x0, 0x0, 0x20, 0x8001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000a340)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005f5de6af0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0xfffffffffffffffe, {0x0, 0xf83cb676ac42ebc1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000000c0)={0x6, r1, 'id0\x00'}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r4, 0x0) recvmmsg(r4, 0x0, 0x0, 0x10122, 0x0) 890.32123ms ago: executing program 2 (id=986): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 846.9386ms ago: executing program 2 (id=988): signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1f3) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r1 = syz_io_uring_setup(0x34b9, &(0x7f0000000340)={0x0, 0x69ee, 0x40000, 0x3, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r5}}}}]}, 0x38}}, 0x0) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001000390400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="0100128008000100677265000c00028000074eac1414bb0000100000000000"], 0x38}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_DESTROY(r9, 0x5502) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r6, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010065bd7000ffdbdf252100000008000300", @ANYRES32=r8, @ANYBLOB="24002d8005000100030000000500040000000000080002"], 0x40}, 0x1, 0x0, 0x0, 0x24880}, 0x4000880) 526.722507ms ago: executing program 3 (id=993): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}, 0xfffffffffffffd4a}, 0x48) 526.533903ms ago: executing program 0 (id=994): r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1000000016140176"], 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x4004) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0xfffffffb, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r2, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000880)={'syztnl1\x00', 0x0}) 411.268734ms ago: executing program 3 (id=996): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x3, 0x2, 0x18, @private1, @remote, 0x1, 0x700, 0xe785, 0x3ff}}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) munmap(&(0x7f0000f1a000/0x1000)=nil, 0x1000) 411.001867ms ago: executing program 0 (id=997): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000089120e000013000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc}, 0x94) 395.970534ms ago: executing program 0 (id=998): bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) (async) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02c80010000c0001000302"], 0x15) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000640)={0x6, 0x8, 0x0, 0x60000000}, 0x10) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @empty}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x62ea0000, 0x0, 0x80000}}}}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00003a1000/0x18000)=nil, 0x0, 0x0, 0x4a, 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) (async) ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, 0x0) (async) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_freeze_timeout', 0x511000, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x3}, {0xfff3}}}, 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0) 338.937979ms ago: executing program 3 (id=1000): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xc, 0xb}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24004864}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0x12, 0x4, 0x0, 0x0) 221.311773ms ago: executing program 1 (id=1002): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', '\x00', '\x00', {'\x00', '\x00\x00\x00\x00\x00\x00\x00@\x00'}}}}}}}, 0x0) syz_emit_ethernet(0x92, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x70, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/88}}}}}}, 0x0) 220.927591ms ago: executing program 1 (id=1003): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xc, 0xb}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x4}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004864}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 191.998975ms ago: executing program 3 (id=1004): sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="ac000000", @ANYRES16=0x0, @ANYBLOB="00012bbd5000fbdbdf2510000000080006000800000600000400ff03000008000500150e00002c000280080007000f00000006000f000200220006000f000400000008000500ff0300000800070000000000540002800000000000000000010800070007000000080003000400000006000f000300000006000b0002000000080006000700000014000100fe88000000000000000000000000010100"/166], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x1) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000540)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x100) r3 = syz_ublk_setup_io_uring(0x6a53, &(0x7f0000000040)={0x0, 0xeb07, 0x20, 0x8000, 0xa9}, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000200), 0x4) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006080)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x4d0, 0x30, 0x12f, 0x0, 0x0, {}, [{0x4bc, 0x1, [@m_police={0x4b8, 0x1, 0x0, 0x0, {{0xb}, {0x48c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x233d2ae8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x726, 0x4, 0xfffffffe, 0x5, 0x9, {0x8, 0x2, 0x4, 0x6, 0x9, 0xa}, {0x10, 0x0, 0x6, 0xf, 0x3, 0xfffffc01}, 0x1ff, 0x7fffffff, 0x1}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x80, 0x0, {0x7, 0x2, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0xfff8, 0x0, 0x4}}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x4d0}}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x2, 0x80442) mmap(&(0x7f0000437000/0x3000)=nil, 0x3000, 0xb635773f06ebbeef, 0x10, r6, 0x1f) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000004c0), 0x208e24b) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r9 = getpid() syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010903e6e8dc40e1050804d6a40102030109022400010c0bc0090904630e02b912d00109050204080007100109050d00280207ffaa"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) syz_pidfd_open(r9, 0x0) syz_clone3(&(0x7f0000000500)={0x54000600, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x21}, &(0x7f0000000300)=""/52, 0x34, &(0x7f0000000340)=""/132, &(0x7f0000000440)=[r9, r9, r9, r9, r9, 0x0, r9], 0x7, {r7}}, 0x58) socket$nl_route(0x10, 0x3, 0x0) pread64(r8, &(0x7f0000002200)=""/224, 0xe0, 0x8d35) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r7, &(0x7f0000000040), &(0x7f000009de80), 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000002580)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0xffffffff}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) syz_open_dev$vim2m(&(0x7f0000000040), 0x94, 0x2) 185.584554ms ago: executing program 1 (id=1005): socket$kcm(0x2b, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(0x0, 0x0) setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)) r1 = socket(0x1a, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x41) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000040)=0x200) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/oss_mixer\x00', 0x80401, 0x0) gettid() 148.099707ms ago: executing program 1 (id=1006): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700020000005800ef000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) 115.611663ms ago: executing program 1 (id=1007): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@const={0x1, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x28) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000080)=0x6100204) r4 = epoll_create(0xa67) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x10000000}) pwritev(r3, &(0x7f0000000100)=[{&(0x7f0000000540)='\x00!', 0x2}], 0x1, 0x739, 0x1) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="00feffff0000000000000000000000000000000060eca9b0e836f77bcd4d3da9af07a4ada97ab3a380c63c5dec49a227f1e41c2268cef0a4744e7cec05822f46a0e3db54142b3b8dac1b0b6c336ab08e2da3644d837a78ab8ed6861e0cf0117868233c56a22f5b27f564af6063e8a67c26457f12f931d1d4b54ab1de3a2827d053f4a6b8727f98d54982d2a7c2f0"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x2b}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) r9 = fcntl$dupfd(r8, 0x0, r8) write$binfmt_script(r9, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008021b000057336f"], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) 115.435776ms ago: executing program 0 (id=1008): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 40.255509ms ago: executing program 0 (id=1009): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "00000000000000000000000000000000000000000000000000000000000200"}}}}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$yama_ptrace_scope(0xffffff9c, 0x0, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 37.072661ms ago: executing program 0 (id=1010): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x7, &(0x7f0000000280)) (async) io_setup(0x7, &(0x7f0000000280)=0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x2200000f4, 0x2) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaa"], 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaa"], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0e05403, &(0x7f00000002c0)={{0x0, 0x1, 0x5, 0x1, 0x2}, 0x1, 0x6, 'id1\x00', 'timer0\x00', 0x0, 0x5, 0x8, 0x5, 0x9}) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0e05403, &(0x7f00000002c0)={{0x0, 0x1, 0x5, 0x1, 0x2}, 0x1, 0x6, 'id1\x00', 'timer0\x00', 0x0, 0x5, 0x8, 0x5, 0x9}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x1, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc048aeca, &(0x7f0000000080)={0x3, 0x0, [{0x2fe, 0x0, 0x2ad2}, {0xa93, 0x0, 0x4}, {0xab5, 0x0, 0x8001}]}) (async) ioctl$KVM_SET_MSRS(r7, 0xc048aeca, &(0x7f0000000080)={0x3, 0x0, [{0x2fe, 0x0, 0x2ad2}, {0xa93, 0x0, 0x4}, {0xab5, 0x0, 0x8001}]}) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0xfffe, r0, 0x0}]) 0s ago: executing program 1 (id=1011): bpf$PROG_LOAD(0x5, &(0x7f0000002580)={0xc, 0x1c, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000003000000000000000900000018110000", @ANYRES32, @ANYBLOB="000000001c000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b708000040e600007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000", @ANYRES32, @ANYBLOB="0000000000000000b705040008007c0073ba9992473c41000085800000a50000e3ba91800000000000b7020089e0f0f72cfe3a739ea77a6feb910df40001"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 556246][ T6434] veth0: left promiscuous mode [ 77.628200][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.129'. [ 77.673205][ T6490] dlm: Unknown command passed to DLM device : 0 [ 77.673205][ T6490] [ 77.798494][ T6493] dlm: Unknown command passed to DLM device : 0 [ 77.798494][ T6493] [ 77.960360][ T6499] overlayfs: missing 'lowerdir' [ 77.961018][ T44] kauditd_printk_skb: 10 callbacks suppressed [ 77.961028][ T44] audit: type=1326 audit(1789259136.902:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.3.134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 77.961131][ T44] audit: type=1326 audit(1789259136.902:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.3.134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 77.961430][ T44] audit: type=1326 audit(1789259136.902:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.3.134" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 77.961517][ T44] audit: type=1326 audit(1789259136.902:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.3.134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 77.961605][ T44] audit: type=1326 audit(1789259136.902:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.3.134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 77.961783][ T44] audit: type=1326 audit(1789259136.902:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.3.134" exe="/syz-executor" sig=0 arch=40000003 syscall=367 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 77.961887][ T44] audit: type=1326 audit(1789259136.902:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.3.134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 78.289479][ T6515] orangefs_devreq_open: device cannot be opened in blocking mode [ 78.384698][ T6522] netlink: 9 bytes leftover after parsing attributes in process `syz.3.139'. [ 78.388133][ T6522] netlink: 9 bytes leftover after parsing attributes in process `syz.3.139'. [ 78.503942][ T6528] dlm: Unknown command passed to DLM device : 0 [ 78.503942][ T6528] [ 78.574906][ T44] audit: type=1326 audit(1789259137.512:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.3.143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 78.575273][ T44] audit: type=1326 audit(1789259137.522:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.3.143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 78.575366][ T44] audit: type=1326 audit(1789259137.522:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.3.143" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 79.347313][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.148'. [ 79.520334][ T67] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 79.529532][ T6551] overlayfs: missing 'lowerdir' [ 79.857123][ T6563] syzkaller0: entered promiscuous mode [ 79.857137][ T6563] syzkaller0: entered allmulticast mode [ 79.860462][ T6563] tipc: Started in network mode [ 79.860477][ T6563] tipc: Node identity eec4ed1be277, cluster identity 4711 [ 79.860967][ T6563] tipc: Enabled bearer , priority 0 [ 79.861957][ T6562] tipc: Resetting bearer [ 79.888002][ T6562] tipc: Disabling bearer [ 80.143486][ T6579] dlm: Unknown command passed to DLM device : 0 [ 80.143486][ T6579] [ 80.422467][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.160'. [ 81.147102][ T6592] overlayfs: missing 'lowerdir' [ 81.300560][ T6592] syzkaller0: entered promiscuous mode [ 81.300579][ T6592] syzkaller0: entered allmulticast mode [ 81.443784][ T6604] netlink: 113 bytes leftover after parsing attributes in process `syz.0.167'. [ 81.609146][ T6606] dlm: Unknown command passed to DLM device : 0 [ 81.609146][ T6606] [ 81.822019][ T6594] dlm: Unknown command passed to DLM device : 0 [ 81.822019][ T6594] [ 82.205188][ T6624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.173'. [ 82.253032][ T6625] Bluetooth: MGMT ver 1.23 [ 82.258453][ T6625] netlink: 20 bytes leftover after parsing attributes in process `syz.2.172'. [ 82.440910][ T6628] overlayfs: missing 'lowerdir' [ 82.469269][ T6628] syzkaller0: entered promiscuous mode [ 82.469288][ T6628] syzkaller0: entered allmulticast mode [ 83.035801][ T6625] syz.2.172 (6625) used greatest stack depth: 19256 bytes left [ 83.279725][ T6639] dlm: Unknown command passed to DLM device : 0 [ 83.279725][ T6639] [ 83.466611][ T6658] syzkaller0: entered promiscuous mode [ 83.466631][ T6658] syzkaller0: entered allmulticast mode [ 83.470226][ T6658] tipc: Enabled bearer , priority 0 [ 83.478010][ T6653] tipc: Resetting bearer [ 83.535951][ T6653] tipc: Disabling bearer [ 83.542290][ T6664] pim6reg: entered allmulticast mode [ 83.606436][ T6666] netlink: 'syz.0.188': attribute type 10 has an invalid length. [ 83.626093][ T6666] team0 (unregistering): Port device team_slave_0 removed [ 83.629365][ T6666] team0 (unregistering): Port device team_slave_1 removed [ 83.648248][ T6671] 9p: Bad value for 'rfdno' [ 83.661614][ T6671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'. [ 83.806652][ T6676] netlink: 20 bytes leftover after parsing attributes in process `syz.3.190'. [ 83.974534][ T6684] input: syz1 as /devices/virtual/input/input5 [ 84.082407][ T6690] netlink: 113 bytes leftover after parsing attributes in process `syz.3.195'. [ 84.798338][ T6698] netlink: 9 bytes leftover after parsing attributes in process `syz.0.198'. [ 85.355066][ T6698] netlink: 9 bytes leftover after parsing attributes in process `syz.0.198'. [ 86.157422][ T6728] 9p: Bad value for 'rfdno' [ 86.215915][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'. [ 86.852915][ T6746] syzkaller0: entered promiscuous mode [ 86.852935][ T6746] syzkaller0: entered allmulticast mode [ 86.857883][ T6746] tipc: Enabled bearer , priority 0 [ 86.861011][ T6745] tipc: Resetting bearer [ 86.872056][ T6745] tipc: Disabling bearer [ 87.055003][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 87.110966][ T6752] syzkaller0: entered promiscuous mode [ 87.110987][ T6752] syzkaller0: entered allmulticast mode [ 87.206642][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 87.207471][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 87.207485][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.207493][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 87.207512][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.208636][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 87.208648][ T9] usb 5-1: Product: syz [ 87.208655][ T9] usb 5-1: Manufacturer: syz [ 87.216341][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 87.216354][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 87.218602][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 87.218613][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 87.290487][ T6754] 9p: Bad value for 'rfdno' [ 87.323438][ T6756] netlink: 113 bytes leftover after parsing attributes in process `syz.1.221'. [ 87.368695][ T6759] syz.1.222 uses obsolete (PF_INET,SOCK_PACKET) [ 87.372785][ T6759] jffs2: notice: (6759) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 87.390746][ T6759] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 87.411832][ T6760] overlayfs: upper fs does not support tmpfile. [ 87.420394][ T6760] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 87.489145][ T25] usb 5-1: USB disconnect, device number 3 [ 87.535082][ T44] kauditd_printk_skb: 12 callbacks suppressed [ 87.535094][ T44] audit: type=1326 audit(1789259146.482:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.3.225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 87.535198][ T44] audit: type=1326 audit(1789259146.482:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.3.225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 87.535509][ T44] audit: type=1326 audit(1789259146.482:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.3.225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 87.535600][ T44] audit: type=1326 audit(1789259146.482:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.3.225" exe="/syz-executor" sig=0 arch=40000003 syscall=176 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 87.535687][ T44] audit: type=1326 audit(1789259146.482:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.3.225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 87.535775][ T44] audit: type=1326 audit(1789259146.482:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.3.225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 87.535878][ T44] audit: type=1326 audit(1789259146.482:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.3.225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 87.535968][ T44] audit: type=1326 audit(1789259146.482:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.3.225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 87.536178][ T44] audit: type=1326 audit(1789259146.482:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.3.225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 87.536276][ T44] audit: type=1326 audit(1789259146.482:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.3.225" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 87.543726][ T6769] netlink: 'syz.3.225': attribute type 10 has an invalid length. [ 87.544661][ T6769] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.545697][ T6769] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.549478][ T6769] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.549552][ T6769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.549616][ T6767] 9p: Bad value for 'rfdno' [ 87.550286][ T6769] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.550338][ T6769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.552108][ T6769] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 87.573352][ T6767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.223'. [ 88.654281][ T6776] syzkaller0: entered promiscuous mode [ 88.654301][ T6776] syzkaller0: entered allmulticast mode [ 89.927500][ T6805] geneve3: entered allmulticast mode [ 90.656429][ T6822] syzkaller0: entered promiscuous mode [ 90.656453][ T6822] syzkaller0: entered allmulticast mode [ 90.658373][ T6822] tipc: Started in network mode [ 90.658387][ T6822] tipc: Node identity fe84398a4bb8, cluster identity 4711 [ 90.658495][ T6822] tipc: Enabled bearer , priority 0 [ 90.659157][ T6821] tipc: Resetting bearer [ 90.667170][ T6821] tipc: Disabling bearer [ 90.735906][ T67] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 90.937702][ T6831] fuse: Bad value for 'fd' [ 92.083584][ T6860] 9p: Bad value for 'rfdno' [ 92.160343][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'. [ 92.240981][ T6852] syzkaller0: entered promiscuous mode [ 92.241032][ T6852] syzkaller0: entered allmulticast mode [ 92.338756][ T6864] netlink: 9 bytes leftover after parsing attributes in process `syz.0.254'. [ 92.342554][ T6864] netlink: 9 bytes leftover after parsing attributes in process `syz.0.254'. [ 92.719686][ T6879] dlm: Unknown command passed to DLM device : 0 [ 92.719686][ T6879] [ 92.777556][ T6870] Zero length message leads to an empty skb [ 92.786210][ T6516] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 92.947341][ T6516] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 92.947364][ T6516] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 92.948171][ T6516] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.948193][ T6516] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.948206][ T6516] usb 6-1: config 0 interface 0 has no altsetting 0 [ 92.948958][ T6516] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.948989][ T6516] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.949013][ T6516] usb 6-1: config 0 interface 0 has no altsetting 0 [ 92.949799][ T6516] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.949820][ T6516] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.949832][ T6516] usb 6-1: config 0 interface 0 has no altsetting 0 [ 92.950777][ T6516] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.950798][ T6516] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.950810][ T6516] usb 6-1: config 0 interface 0 has no altsetting 0 [ 92.951763][ T6516] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.951783][ T6516] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.951795][ T6516] usb 6-1: config 0 interface 0 has no altsetting 0 [ 92.953043][ T6516] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.953064][ T6516] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.953082][ T6516] usb 6-1: config 0 interface 0 has no altsetting 0 [ 92.953869][ T6516] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.953889][ T6516] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.953902][ T6516] usb 6-1: config 0 interface 0 has no altsetting 0 [ 92.955601][ T6516] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.955635][ T6516] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.955655][ T6516] usb 6-1: config 0 interface 0 has no altsetting 0 [ 92.959487][ T6516] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 92.959502][ T6516] usb 6-1: Product: syz [ 92.959509][ T6516] usb 6-1: Manufacturer: syz [ 92.959516][ T6516] usb 6-1: SerialNumber: syz [ 92.960904][ T6516] usb 6-1: config 0 descriptor?? [ 92.971734][ T6516] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 93.045863][ T6890] fuse: Bad value for 'fd' [ 93.396095][ T6894] syzkaller0: entered promiscuous mode [ 93.396110][ T6894] syzkaller0: entered allmulticast mode [ 93.569595][ T6905] syzkaller0: entered promiscuous mode [ 93.569616][ T6905] syzkaller0: entered allmulticast mode [ 93.572757][ T6905] tipc: Enabled bearer , priority 0 [ 93.574013][ T6904] tipc: Resetting bearer [ 93.591906][ T6904] tipc: Disabling bearer [ 93.886877][ T6921] dlm: Unknown command passed to DLM device : 0 [ 93.886877][ T6921] [ 94.047856][ T6918] 9p: Bad value for 'rfdno' [ 94.049854][ T6918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.269'. [ 94.574476][ T6925] overlayfs: failed to resolve './file1': -2 [ 94.623733][ T6928] syzkaller0: entered promiscuous mode [ 94.623746][ T6928] syzkaller0: entered allmulticast mode [ 94.860806][ T6938] netlink: 9 bytes leftover after parsing attributes in process `syz.3.277'. [ 94.864167][ T6938] netlink: 9 bytes leftover after parsing attributes in process `syz.3.277'. [ 95.005443][ T6952] fuse: Bad value for 'fd' [ 95.105078][ T1038] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 95.123566][ T6957] fuse: Bad value for 'fd' [ 95.274971][ T1038] usb 5-1: Using ep0 maxpacket: 16 [ 95.275553][ T1038] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 95.278965][ T1038] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 95.278987][ T1038] usb 5-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 95.279006][ T1038] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 95.279026][ T1038] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 95.279046][ T1038] usb 5-1: config 0 interface 0 has no altsetting 0 [ 95.281070][ T1038] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.281090][ T1038] usb 5-1: Product: syz [ 95.281102][ T1038] usb 5-1: Manufacturer: syz [ 95.281114][ T1038] usb 5-1: SerialNumber: syz [ 95.286691][ T1038] usb 5-1: config 0 descriptor?? [ 95.287555][ T6941] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 95.488993][ T6941] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 95.493576][ T1038] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input6 [ 95.587063][ T62] usb 6-1: USB disconnect, device number 3 [ 95.594374][ T62] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 95.630717][ T44] kauditd_printk_skb: 57 callbacks suppressed [ 95.630731][ T44] audit: type=1326 audit(1789259154.572:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.1.281" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 95.631361][ T44] audit: type=1326 audit(1789259154.572:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.1.281" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 95.631460][ T44] audit: type=1326 audit(1789259154.572:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.1.281" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf701efec code=0x7ffc0000 [ 95.631547][ T44] audit: type=1326 audit(1789259154.572:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.1.281" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 95.631637][ T44] audit: type=1326 audit(1789259154.572:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.1.281" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 95.632105][ T44] audit: type=1326 audit(1789259154.572:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.1.281" exe="/syz-executor" sig=0 arch=40000003 syscall=367 compat=1 ip=0xf701efec code=0x7ffc0000 [ 95.632214][ T44] audit: type=1326 audit(1789259154.572:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.1.281" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 95.692856][ T6980] dlm: Unknown command passed to DLM device : 0 [ 95.692856][ T6980] [ 95.954070][ T6996] 9p: Bad value for 'rfdno' [ 95.957645][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.284'. [ 97.045802][ T7017] netlink: 20 bytes leftover after parsing attributes in process `syz.2.286'. [ 97.578931][ T7042] fuse: Bad value for 'fd' [ 97.887650][ T6516] usb 5-1: USB disconnect, device number 4 [ 98.291460][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'. [ 98.356023][ T7059] fuse: Bad value for 'fd' [ 98.449303][ T7074] netlink: 113 bytes leftover after parsing attributes in process `syz.3.295'. [ 98.904726][ T7092] netlink: 9 bytes leftover after parsing attributes in process `syz.3.299'. [ 99.125616][ T67] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 99.160321][ T7109] syzkaller0: entered promiscuous mode [ 99.160335][ T7109] syzkaller0: entered allmulticast mode [ 99.166201][ T7109] tipc: Enabled bearer , priority 0 [ 99.195148][ T7107] tipc: Resetting bearer [ 99.227192][ T7123] netlink: 20 bytes leftover after parsing attributes in process `syz.1.305'. [ 99.227659][ T7107] tipc: Disabling bearer [ 100.104471][ T7156] fuse: Bad value for 'fd' [ 100.153574][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.309'. [ 100.332687][ T7171] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 100.332840][ T7171] CIFS: Attempting to mount //127.0.0.1/share [ 100.338248][ T7171] CIFS: VFS: Error connecting to socket. Aborting operation. [ 100.338292][ T7171] CIFS: VFS: cifs_mount failed w/return code = -111 [ 100.444300][ T7182] bond1: option lacp_rate: invalid value (2) [ 100.447822][ T7182] bond1 (unregistering): Released all slaves [ 100.723480][ T7255] dlm: Unknown command passed to DLM device : 0 [ 100.723480][ T7255] [ 100.898569][ T44] audit: type=1326 audit(1789259159.842:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.0.319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 100.898753][ T44] audit: type=1326 audit(1789259159.842:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.0.319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 100.902322][ T44] audit: type=1326 audit(1789259159.842:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.0.319" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 100.902359][ T44] audit: type=1326 audit(1789259159.842:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.0.319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 100.902391][ T44] audit: type=1326 audit(1789259159.842:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.0.319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 100.903064][ T44] audit: type=1326 audit(1789259159.842:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.0.319" exe="/syz-executor" sig=0 arch=40000003 syscall=367 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 100.903246][ T44] audit: type=1326 audit(1789259159.842:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.0.319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 100.903382][ T44] audit: type=1326 audit(1789259159.842:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.0.319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 100.978079][ T7269] FAULT_INJECTION: forcing a failure. [ 100.978079][ T7269] name failslab, interval 1, probability 0, space 0, times 1 [ 100.978107][ T7269] CPU: 3 UID: 0 PID: 7269 Comm: syz.0.320 Not tainted syzkaller #0 PREEMPT(full) [ 100.978126][ T7269] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.978136][ T7269] Call Trace: [ 100.978142][ T7269] [ 100.978149][ T7269] dump_stack_lvl+0x100/0x190 [ 100.978237][ T7269] should_fail_ex.cold+0x5/0xa [ 100.978260][ T7269] should_failslab+0xc2/0x120 [ 100.978306][ T7269] kmem_cache_alloc_noprof+0x92/0x6a0 [ 100.978329][ T7269] ? audit_log_start+0x29d/0x930 [ 100.978354][ T7269] audit_log_start+0x29d/0x930 [ 100.978376][ T7269] ? __pfx_audit_log_start+0x10/0x10 [ 100.978400][ T7269] ? rcu_read_lock_any_held+0x6a/0x90 [ 100.978420][ T7269] ? find_held_lock+0x2b/0x80 [ 100.978441][ T7269] audit_seccomp+0x60/0x190 [ 100.978461][ T7269] __seccomp_filter+0x88c/0x1130 [ 100.978501][ T7269] ? __pfx___seccomp_filter+0x10/0x10 [ 100.978524][ T7269] ? fput+0x7c/0x100 [ 100.978545][ T7269] ? ksys_write+0x1ac/0x250 [ 100.978565][ T7269] __seccomp_permit_syscall+0x207/0x2d0 [ 100.978586][ T7269] __do_fast_syscall_32+0x420/0x8b0 [ 100.978637][ T7269] ? lockdep_hardirqs_on+0x7d/0x110 [ 100.978665][ T7269] do_fast_syscall_32+0x32/0x70 [ 100.978692][ T7269] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.978714][ T7269] RIP: 0023:0xf6feefec [ 100.978733][ T7269] Code: Unable to access opcode bytes at 0xf6feefc2. [ 100.978741][ T7269] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 000000000000016f [ 100.978758][ T7269] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 100.978769][ T7269] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.978780][ T7269] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.978790][ T7269] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 100.978800][ T7269] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.978822][ T7269] [ 100.979163][ T44] audit: type=1326 audit(1789259159.922:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7268 comm="syz.0.320" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 100.979203][ T44] audit: type=1326 audit(1789259159.922:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7268 comm="syz.0.320" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 101.172339][ T7275] netlink: 113 bytes leftover after parsing attributes in process `syz.1.322'. [ 101.391095][ T7272] FAULT_INJECTION: forcing a failure. [ 101.391095][ T7272] name failslab, interval 1, probability 0, space 0, times 0 [ 101.391115][ T7272] CPU: 0 UID: 0 PID: 7272 Comm: syz.0.321 Not tainted syzkaller #0 PREEMPT(full) [ 101.391127][ T7272] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.391133][ T7272] Call Trace: [ 101.391136][ T7272] [ 101.391141][ T7272] dump_stack_lvl+0x100/0x190 [ 101.391160][ T7272] should_fail_ex.cold+0x5/0xa [ 101.391176][ T7272] should_failslab+0xc2/0x120 [ 101.391192][ T7272] __kmalloc_noprof+0xfc/0x840 [ 101.391205][ T7272] ? __memcg_list_lru_alloc+0x418/0x680 [ 101.391225][ T7272] __memcg_list_lru_alloc+0x418/0x680 [ 101.391242][ T7272] ? xa_load+0x149/0x2c0 [ 101.391256][ T7272] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 101.391274][ T7272] ? rcu_read_unlock+0x17/0x60 [ 101.391293][ T7272] memcg_list_lru_alloc+0xd3/0x100 [ 101.391311][ T7272] __memcg_slab_post_alloc_hook+0x27b/0x1270 [ 101.391332][ T7272] ? kasan_save_track+0x14/0x30 [ 101.391346][ T7272] kmem_cache_alloc_lru_noprof+0x4f6/0x6a0 [ 101.391359][ T7272] ? aio_alloc_inode+0x25/0x70 [ 101.391373][ T7272] ? __pfx_aio_alloc_inode+0x10/0x10 [ 101.391386][ T7272] aio_alloc_inode+0x25/0x70 [ 101.391398][ T7272] alloc_inode+0x68/0x250 [ 101.391413][ T7272] alloc_anon_inode+0x2a/0x3e0 [ 101.391428][ T7272] ioctx_alloc+0x4dc/0x21a0 [ 101.391445][ T7272] ? __might_fault+0xc5/0x140 [ 101.391482][ T7272] ? find_held_lock+0x2b/0x80 [ 101.391497][ T7272] ? __pfx_ioctx_alloc+0x10/0x10 [ 101.391516][ T7272] __ia32_compat_sys_io_setup+0xc8/0x220 [ 101.391533][ T7272] __do_fast_syscall_32+0x13a/0x8b0 [ 101.391553][ T7272] do_fast_syscall_32+0x32/0x70 [ 101.391571][ T7272] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 101.391585][ T7272] RIP: 0023:0xf6feefec [ 101.391597][ T7272] Code: Unable to access opcode bytes at 0xf6feefc2. [ 101.391602][ T7272] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 00000000000000f5 [ 101.391613][ T7272] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080001380 [ 101.391620][ T7272] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.391626][ T7272] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.391632][ T7272] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 101.391643][ T7272] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 101.391656][ T7272] [ 101.469914][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'. [ 101.504652][ T7302] dlm: Unknown command passed to DLM device : 0 [ 101.504652][ T7302] [ 101.620672][ T7312] netlink: 16142 bytes leftover after parsing attributes in process `syz.3.329'. [ 101.878296][ T7323] kvm: pic: level sensitive irq not supported [ 101.894983][ T5616] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 102.035205][ T5616] usb 8-1: device descriptor read/64, error -71 [ 102.296925][ T5616] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 102.337969][ T7348] fuse: Bad value for 'fd' [ 102.445003][ T5616] usb 8-1: device descriptor read/64, error -71 [ 102.556072][ T5616] usb usb8-port1: attempt power cycle [ 102.928602][ T5616] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 102.949461][ T5616] usb 8-1: device descriptor read/8, error -71 [ 103.022062][ T7358] netlink: 40 bytes leftover after parsing attributes in process `syz.0.335'. [ 103.057828][ T7358] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 103.057846][ T7358] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 103.058684][ T7358] vhci_hcd vhci_hcd.0: Device attached [ 103.076919][ T7364] netlink: 20 bytes leftover after parsing attributes in process `syz.1.336'. [ 103.154297][ T7361] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 103.161058][ T12] vhci_hcd vhci_hcd.0: stop threads [ 103.161110][ T12] vhci_hcd vhci_hcd.0: release socket [ 103.161134][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 103.205047][ T5616] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 103.227631][ T5616] usb 8-1: device descriptor read/8, error -71 [ 103.345215][ T5616] usb usb8-port1: unable to enumerate USB device [ 103.423472][ T7385] FAULT_INJECTION: forcing a failure. [ 103.423472][ T7385] name failslab, interval 1, probability 0, space 0, times 0 [ 103.423491][ T7385] CPU: 3 UID: 0 PID: 7385 Comm: syz.1.341 Not tainted syzkaller #0 PREEMPT(full) [ 103.423503][ T7385] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.423509][ T7385] Call Trace: [ 103.423513][ T7385] [ 103.423517][ T7385] dump_stack_lvl+0x100/0x190 [ 103.423536][ T7385] should_fail_ex.cold+0x5/0xa [ 103.423552][ T7385] should_failslab+0xc2/0x120 [ 103.423567][ T7385] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 103.423579][ T7385] ? __alloc_skb+0x5b7/0x710 [ 103.423629][ T7385] ? __alloc_skb+0x140/0x710 [ 103.423644][ T7385] __alloc_skb+0x140/0x710 [ 103.423657][ T7385] ? __alloc_skb+0x5b7/0x710 [ 103.423669][ T7385] ? __pfx___alloc_skb+0x10/0x10 [ 103.423684][ T7385] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 103.423702][ T7385] ? lockdep_init_map_type+0x5c/0x250 [ 103.423728][ T7385] audit_log_start+0x350/0x930 [ 103.423752][ T7385] ? __pfx_audit_log_start+0x10/0x10 [ 103.423778][ T7385] ? rcu_read_lock_any_held+0x6a/0x90 [ 103.423799][ T7385] ? find_held_lock+0x2b/0x80 [ 103.423822][ T7385] audit_seccomp+0x60/0x190 [ 103.423844][ T7385] __seccomp_filter+0x88c/0x1130 [ 103.423865][ T7385] ? __pfx___seccomp_filter+0x10/0x10 [ 103.423879][ T7385] ? fput+0x7c/0x100 [ 103.423892][ T7385] ? ksys_write+0x1ac/0x250 [ 103.423905][ T7385] __seccomp_permit_syscall+0x207/0x2d0 [ 103.423937][ T7385] __do_fast_syscall_32+0x420/0x8b0 [ 103.423954][ T7385] ? lockdep_hardirqs_on+0x7d/0x110 [ 103.423971][ T7385] do_fast_syscall_32+0x32/0x70 [ 103.423988][ T7385] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.424002][ T7385] RIP: 0023:0xf701efec [ 103.424015][ T7385] Code: Unable to access opcode bytes at 0xf701efc2. [ 103.424020][ T7385] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016f [ 103.424031][ T7385] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 103.424043][ T7385] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.424050][ T7385] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.424055][ T7385] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 103.424062][ T7385] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.424075][ T7385] [ 104.112988][ T7400] netlink: 'syz.0.344': attribute type 2 has an invalid length. [ 104.113006][ T7400] netlink: 'syz.0.344': attribute type 11 has an invalid length. [ 104.113015][ T7400] netlink: 132 bytes leftover after parsing attributes in process `syz.0.344'. [ 104.159296][ T7402] netlink: 24 bytes leftover after parsing attributes in process `syz.2.346'. [ 104.286010][ T7414] fuse: Bad value for 'fd' [ 105.764739][ T7462] netlink: 20 bytes leftover after parsing attributes in process `syz.1.357'. [ 105.784428][ T67] Bluetooth: hci0: unexpected event for opcode 0x0c38 [ 105.967952][ T7492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.361'. [ 105.982139][ T44] kauditd_printk_skb: 50 callbacks suppressed [ 105.982254][ T44] audit: type=1326 audit(1789259164.922:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7493 comm="syz.3.364" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 105.982646][ T44] audit: type=1326 audit(1789259164.922:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7493 comm="syz.3.364" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 105.982729][ T44] audit: type=1326 audit(1789259164.922:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7493 comm="syz.3.364" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 105.983045][ T44] audit: type=1326 audit(1789259164.922:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7493 comm="syz.3.364" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 105.983194][ T44] audit: type=1326 audit(1789259164.922:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7493 comm="syz.3.364" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 105.983302][ T44] audit: type=1326 audit(1789259164.922:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7493 comm="syz.3.364" exe="/syz-executor" sig=0 arch=40000003 syscall=367 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 105.983608][ T44] audit: type=1326 audit(1789259164.922:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7493 comm="syz.3.364" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 105.983680][ T44] audit: type=1326 audit(1789259164.922:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7493 comm="syz.3.364" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 106.138332][ T7500] dlm: Unknown command passed to DLM device : 0 [ 106.138332][ T7500] [ 106.504665][ T7527] FAULT_INJECTION: forcing a failure. [ 106.504665][ T7527] name failslab, interval 1, probability 0, space 0, times 0 [ 106.504751][ T7527] CPU: 1 UID: 0 PID: 7527 Comm: syz.3.369 Not tainted syzkaller #0 PREEMPT(full) [ 106.504773][ T7527] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.504782][ T7527] Call Trace: [ 106.504789][ T7527] [ 106.504795][ T7527] dump_stack_lvl+0x100/0x190 [ 106.504822][ T7527] should_fail_ex.cold+0x5/0xa [ 106.504845][ T7527] should_failslab+0xc2/0x120 [ 106.504884][ T7527] __kmalloc_cache_noprof+0x91/0x6d0 [ 106.504911][ T7527] ? __do_sys_mincore+0x120/0x6c0 [ 106.504940][ T7527] __do_sys_mincore+0x120/0x6c0 [ 106.504970][ T7527] __do_fast_syscall_32+0x13a/0x8b0 [ 106.504999][ T7527] do_fast_syscall_32+0x32/0x70 [ 106.505025][ T7527] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 106.505046][ T7527] RIP: 0023:0xf6feefec [ 106.505065][ T7527] Code: Unable to access opcode bytes at 0xf6feefc2. [ 106.505072][ T7527] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 00000000000000da [ 106.505089][ T7527] RAX: ffffffffffffffda RBX: 0000000080ffd000 RCX: 0000000000003000 [ 106.505101][ T7527] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.505113][ T7527] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 106.505123][ T7527] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 106.505133][ T7527] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 106.505155][ T7527] [ 106.972525][ T44] audit: type=1326 audit(1789259165.912:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.3.378" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 106.973294][ T7541] FAULT_INJECTION: forcing a failure. [ 106.973294][ T7541] name failslab, interval 1, probability 0, space 0, times 0 [ 106.973315][ T7541] CPU: 2 UID: 0 PID: 7541 Comm: syz.3.378 Not tainted syzkaller #0 PREEMPT(full) [ 106.973331][ T7541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.973339][ T7541] Call Trace: [ 106.973343][ T7541] [ 106.973349][ T7541] dump_stack_lvl+0x100/0x190 [ 106.973371][ T7541] should_fail_ex.cold+0x5/0xa [ 106.973390][ T7541] should_failslab+0xc2/0x120 [ 106.973409][ T7541] __kmalloc_cache_noprof+0x91/0x6d0 [ 106.973431][ T7541] ? audit_log_d_path+0xed/0x210 [ 106.973451][ T7541] audit_log_d_path+0xed/0x210 [ 106.973469][ T7541] audit_log_d_path_exe+0x46/0x80 [ 106.973486][ T7541] audit_log_task+0x2fe/0x3a0 [ 106.973505][ T7541] ? __pfx_audit_log_task+0x10/0x10 [ 106.973525][ T7541] ? rcu_read_lock_any_held+0x6a/0x90 [ 106.973542][ T7541] ? find_held_lock+0x2b/0x80 [ 106.973559][ T7541] audit_seccomp+0x79/0x190 [ 106.973574][ T7541] __seccomp_filter+0x88c/0x1130 [ 106.973592][ T7541] ? __pfx___seccomp_filter+0x10/0x10 [ 106.973609][ T7541] ? fput+0x7c/0x100 [ 106.973626][ T7541] ? ksys_write+0x1ac/0x250 [ 106.973648][ T7541] __seccomp_permit_syscall+0x207/0x2d0 [ 106.973665][ T7541] __do_fast_syscall_32+0x420/0x8b0 [ 106.973686][ T7541] ? lockdep_hardirqs_on+0x7d/0x110 [ 106.973707][ T7541] do_fast_syscall_32+0x32/0x70 [ 106.973728][ T7541] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 106.973746][ T7541] RIP: 0023:0xf6feefec [ 106.973761][ T7541] Code: Unable to access opcode bytes at 0xf6feefc2. [ 106.973768][ T7541] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 000000000000016f [ 106.973782][ T7541] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 106.973791][ T7541] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.973799][ T7541] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 106.973807][ T7541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.973815][ T7541] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 106.973833][ T7541] [ 106.974566][ T44] audit: type=1326 audit(1789259165.912:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.3.378" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 107.037691][ T7548] netlink: 20 bytes leftover after parsing attributes in process `syz.3.379'. [ 107.082454][ T7552] dlm: Unknown command passed to DLM device : 0 [ 107.082454][ T7552] [ 107.090186][ T7551] netlink: 113 bytes leftover after parsing attributes in process `syz.3.380'. [ 107.278636][ T7560] netlink: 56 bytes leftover after parsing attributes in process `syz.3.382'. [ 107.447213][ T7560] netlink: 280 bytes leftover after parsing attributes in process `syz.3.382'. [ 107.450377][ T7560] warning: `syz.3.382' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 107.621373][ T7577] fuse: Bad value for 'fd' [ 107.717700][ T7581] fuse: Bad value for 'fd' [ 108.412700][ T7593] netlink: 'syz.0.388': attribute type 11 has an invalid length. [ 108.532859][ T7598] dlm: Unknown command passed to DLM device : 0 [ 108.532859][ T7598] [ 108.543284][ T7602] syzkaller0: entered promiscuous mode [ 108.543298][ T7602] syzkaller0: entered allmulticast mode [ 108.554767][ T7602] tipc: Enabled bearer , priority 0 [ 108.561101][ T7597] tipc: Resetting bearer [ 108.596321][ T7597] tipc: Disabling bearer [ 108.659566][ T7616] dlm: Unknown command passed to DLM device : 0 [ 108.659566][ T7616] [ 108.691545][ T67] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 108.760015][ T7634] fuse: Unknown parameter '0xffffffffffffffff' [ 108.888392][ T7643] fuse: Bad value for 'fd' [ 109.749924][ T7665] FAULT_INJECTION: forcing a failure. [ 109.749924][ T7665] name failslab, interval 1, probability 0, space 0, times 0 [ 109.749942][ T7665] CPU: 1 UID: 0 PID: 7665 Comm: syz.1.402 Not tainted syzkaller #0 PREEMPT(full) [ 109.749954][ T7665] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.749961][ T7665] Call Trace: [ 109.749965][ T7665] [ 109.749969][ T7665] dump_stack_lvl+0x100/0x190 [ 109.749987][ T7665] should_fail_ex.cold+0x5/0xa [ 109.750002][ T7665] should_failslab+0xc2/0x120 [ 109.750016][ T7665] __kmalloc_cache_noprof+0x91/0x6d0 [ 109.750034][ T7665] ? audit_log_d_path+0xed/0x210 [ 109.750050][ T7665] audit_log_d_path+0xed/0x210 [ 109.750064][ T7665] audit_log_d_path_exe+0x46/0x80 [ 109.750091][ T7665] audit_log_task+0x2fe/0x3a0 [ 109.750106][ T7665] ? __pfx_audit_log_task+0x10/0x10 [ 109.750122][ T7665] ? rcu_read_lock_any_held+0x6a/0x90 [ 109.750135][ T7665] ? find_held_lock+0x2b/0x80 [ 109.750148][ T7665] audit_seccomp+0x79/0x190 [ 109.750160][ T7665] __seccomp_filter+0x88c/0x1130 [ 109.750173][ T7665] ? __pfx___seccomp_filter+0x10/0x10 [ 109.750187][ T7665] ? fput+0x7c/0x100 [ 109.750200][ T7665] ? ksys_write+0x1ac/0x250 [ 109.750212][ T7665] __seccomp_permit_syscall+0x207/0x2d0 [ 109.750225][ T7665] __do_fast_syscall_32+0x420/0x8b0 [ 109.750242][ T7665] ? lockdep_hardirqs_on+0x7d/0x110 [ 109.750259][ T7665] do_fast_syscall_32+0x32/0x70 [ 109.750275][ T7665] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 109.750289][ T7665] RIP: 0023:0xf701efec [ 109.750302][ T7665] Code: Unable to access opcode bytes at 0xf701efc2. [ 109.750306][ T7665] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016f [ 109.750317][ T7665] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 109.750324][ T7665] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.750330][ T7665] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 109.750336][ T7665] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 109.750342][ T7665] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 109.750355][ T7665] [ 109.760799][ T7664] netlink: 113 bytes leftover after parsing attributes in process `syz.2.403'. [ 110.052532][ T7654] Process accounting resumed [ 110.098642][ T6516] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 110.228024][ T7692] fuse: Unknown parameter '0xffffffffffffffff' [ 110.245462][ T6516] usb 6-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 110.246453][ T6516] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.246470][ T6516] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 110.248249][ T6516] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.248266][ T6516] usb 6-1: Product: syz [ 110.248277][ T6516] usb 6-1: Manufacturer: syz [ 110.248286][ T6516] usb 6-1: SerialNumber: syz [ 110.458697][ T7674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.405'. [ 110.482693][ T7674] veth0_to_bond: entered allmulticast mode [ 110.549805][ T6516] usb 6-1: USB disconnect, device number 4 [ 110.680484][ T7710] netlink: 28 bytes leftover after parsing attributes in process `syz.0.411'. [ 110.681078][ T7711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.411'. [ 110.681088][ T7711] netlink: 24 bytes leftover after parsing attributes in process `syz.0.411'. [ 110.815963][ T6516] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 111.026932][ T7741] fuse: Bad value for 'fd' [ 111.076092][ T7750] ima: Unable to open file: / (-22) [ 111.077280][ T7750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.415'. [ 111.077345][ T7750] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 111.077629][ T7748] ima: policy update failed [ 111.077705][ T44] kauditd_printk_skb: 94 callbacks suppressed [ 111.077712][ T44] audit: type=1802 audit(1789259170.022:304): pid=7748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.415" res=0 errno=0 [ 111.092107][ T7752] syzkaller0: entered promiscuous mode [ 111.092125][ T7752] syzkaller0: entered allmulticast mode [ 111.100092][ T7752] tipc: Enabled bearer , priority 0 [ 111.106168][ T7751] tipc: Resetting bearer [ 111.143764][ T7751] tipc: Disabling bearer [ 111.875952][ T7782] dlm: Unknown command passed to DLM device : 0 [ 111.875952][ T7782] [ 111.956944][ T7780] fuse: Unknown parameter '0xffffffffffffffff' [ 112.079651][ T7790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.420'. [ 112.743116][ T7810] syzkaller0: entered promiscuous mode [ 112.743175][ T7810] syzkaller0: entered allmulticast mode [ 113.073473][ T7832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.431'. [ 113.084574][ T7829] netlink: 9 bytes leftover after parsing attributes in process `syz.2.430'. [ 113.111438][ T7823] fuse: Bad value for 'fd' [ 113.127723][ T7836] dlm: Unknown command passed to DLM device : 0 [ 113.127723][ T7836] [ 113.789669][ T7869] syzkaller0: entered promiscuous mode [ 113.789692][ T7869] syzkaller0: entered allmulticast mode [ 114.115610][ T7886] dlm: Unknown command passed to DLM device : 0 [ 114.115610][ T7886] [ 114.121352][ T7890] syzkaller0: entered promiscuous mode [ 114.121374][ T7890] syzkaller0: entered allmulticast mode [ 114.129891][ T7890] tipc: Enabled bearer , priority 0 [ 114.133415][ T7889] tipc: Resetting bearer [ 114.157152][ T7889] tipc: Disabling bearer [ 114.366217][ T7917] syzkaller0: entered promiscuous mode [ 114.366239][ T7917] syzkaller0: entered allmulticast mode [ 114.427215][ T7922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.447'. [ 114.941320][ T7940] 9p: Bad value for 'rfdno' [ 114.973999][ T7940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.450'. [ 116.183063][ T7956] 9p: Bad value for 'rfdno' [ 116.216175][ T44] audit: type=1326 audit(1789259175.152:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.1.453" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 116.216444][ T44] audit: type=1326 audit(1789259175.162:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.1.453" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 116.233746][ T44] audit: type=1326 audit(1789259175.162:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.1.453" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf701efec code=0x7ffc0000 [ 116.234218][ T44] audit: type=1326 audit(1789259175.162:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.1.453" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 116.234572][ T44] audit: type=1326 audit(1789259175.162:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.1.453" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 116.266869][ T44] audit: type=1326 audit(1789259175.202:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.1.453" exe="/syz-executor" sig=0 arch=40000003 syscall=367 compat=1 ip=0xf701efec code=0x7ffc0000 [ 116.267154][ T44] audit: type=1326 audit(1789259175.212:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.1.453" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 116.267286][ T44] audit: type=1326 audit(1789259175.212:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.1.453" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 117.335366][ T7972] netlink: 9 bytes leftover after parsing attributes in process `syz.1.456'. [ 117.637145][ T7952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.451'. [ 117.642706][ T7972] netlink: 9 bytes leftover after parsing attributes in process `syz.1.456'. [ 117.829106][ T7985] syzkaller0: entered promiscuous mode [ 117.829128][ T7985] syzkaller0: entered allmulticast mode [ 118.066113][ T7993] program syz.1.458 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.175074][ T67] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 118.313251][ T7991] fuse: Unknown parameter '0xffffffffffffffff' [ 118.815636][ T5741] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 118.840170][ T44] audit: type=1326 audit(1789259177.782:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.1.461" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 118.840273][ T44] audit: type=1326 audit(1789259177.782:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.1.461" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 118.859764][ T8013] netlink: 56 bytes leftover after parsing attributes in process `syz.1.461'. [ 118.891946][ T8013] netlink: 280 bytes leftover after parsing attributes in process `syz.1.461'. [ 119.064252][ T8022] dlm: Unknown command passed to DLM device : 0 [ 119.064252][ T8022] [ 119.307759][ T5616] wiimote 0005:057E:0306.0002: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 119.308248][ T5616] wiimote 0005:057E:0306.0002: New device registered [ 119.349194][ T8036] fuse: Bad value for 'fd' [ 119.407121][ T8046] syzkaller0: entered promiscuous mode [ 119.407134][ T8046] syzkaller0: entered allmulticast mode [ 119.434706][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.465'. [ 119.555070][ T5616] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 119.786188][ T8059] 9p: Bad value for 'rfdno' [ 119.794668][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.468'. [ 119.815014][ T5616] usb 5-1: Using ep0 maxpacket: 8 [ 119.889002][ T5616] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 120.098297][ T5616] usb 5-1: config 0 has no interfaces? [ 120.236972][ T5616] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.236988][ T5616] usb 5-1: Product: syz [ 120.236996][ T5616] usb 5-1: Manufacturer: syz [ 120.237006][ T5616] usb 5-1: SerialNumber: syz [ 120.326410][ T5839] wiimote 0005:057E:0306.0002: detected device: Nintendo Wii Remote (Gen 1) [ 120.518066][ T8072] fuse: Bad value for 'fd' [ 120.585510][ T5831] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 120.735917][ T5831] usb 8-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 120.736877][ T5831] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.736889][ T5831] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 120.738674][ T5831] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.738686][ T5831] usb 8-1: Product: syz [ 120.738693][ T5831] usb 8-1: Manufacturer: syz [ 120.738700][ T5831] usb 8-1: SerialNumber: syz [ 120.812789][ T5616] usb 5-1: config 0 descriptor?? [ 120.837068][ T5839] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input8 [ 120.843515][ T5839] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input9 [ 120.847209][ T5839] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input7 [ 121.023143][ T8051] usb 5-1: USB disconnect, device number 5 [ 121.029512][ T8032] wiimote 0005:057E:0306.0002: Device removed [ 121.033458][ T8065] netlink: 16 bytes leftover after parsing attributes in process `syz.3.469'. [ 121.084172][ T8065] veth0_to_bond: entered allmulticast mode [ 121.201862][ T5831] usb 8-1: USB disconnect, device number 7 [ 121.332707][ T8117] netlink: 20 bytes leftover after parsing attributes in process `syz.1.471'. [ 121.423064][ T8123] dlm: Unknown command passed to DLM device : 0 [ 121.423064][ T8123] [ 121.728225][ T8137] syzkaller0: entered promiscuous mode [ 121.728238][ T8137] syzkaller0: entered allmulticast mode [ 122.052126][ T8152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.478'. [ 122.440909][ T8147] dlm: Unknown command passed to DLM device : 0 [ 122.440909][ T8147] [ 122.696078][ T8157] fuse: Bad value for 'fd' [ 122.876224][ T8169] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 123.120570][ T8178] tmpfs: Unknown parameter '‘Çhè9å­±ÍH{üÛÞdx‰iÿ‰©ø8¼àã­0ZÑl |wµ?–VHü²C\W4ÒÙÆtµC|þA [ 123.120570][ T8178] Ä5¾' [ 123.130660][ T6342] Bluetooth: hci4: Frame reassembly failed (-84) [ 123.422747][ T8185] serio: Serial port ptm1 [ 123.649612][ T8194] syzkaller0: entered promiscuous mode [ 123.649625][ T8194] syzkaller0: entered allmulticast mode [ 123.799661][ T8201] syzkaller0: entered promiscuous mode [ 123.799675][ T8201] syzkaller0: entered allmulticast mode [ 123.802989][ T8201] tipc: Enabled bearer , priority 0 [ 123.803631][ T8200] tipc: Resetting bearer [ 123.821240][ T8200] tipc: Disabling bearer [ 124.014472][ T8210] 9p: Bad value for 'rfdno' [ 124.017455][ T8210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.488'. [ 124.492331][ T8216] syzkaller1: entered promiscuous mode [ 124.492351][ T8216] syzkaller1: entered allmulticast mode [ 125.142792][ T44] kauditd_printk_skb: 85 callbacks suppressed [ 125.142805][ T44] audit: type=1326 audit(1789259184.082:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.1.491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 125.142933][ T44] audit: type=1326 audit(1789259184.082:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.1.491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 125.143061][ T44] audit: type=1326 audit(1789259184.082:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.1.491" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf701efec code=0x7ffc0000 [ 125.143556][ T44] audit: type=1326 audit(1789259184.082:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.1.491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 125.143741][ T44] audit: type=1326 audit(1789259184.082:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.1.491" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 125.143872][ T44] audit: type=1326 audit(1789259184.082:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.1.491" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71575ab code=0x7ffc0000 [ 125.144754][ T44] audit: type=1326 audit(1789259184.082:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.1.491" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71575ab code=0x7ffc0000 [ 125.145045][ T44] audit: type=1326 audit(1789259184.082:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.1.491" exe="/syz-executor" sig=0 arch=40000003 syscall=367 compat=1 ip=0xf701efec code=0x7ffc0000 [ 125.205451][ T5744] Bluetooth: hci4: command 0x1003 tx timeout [ 125.213358][ T5741] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 125.234599][ T8227] FAULT_INJECTION: forcing a failure. [ 125.234599][ T8227] name failslab, interval 1, probability 0, space 0, times 0 [ 125.234627][ T8227] CPU: 0 UID: 0 PID: 8227 Comm: syz.1.491 Not tainted syzkaller #0 PREEMPT(full) [ 125.234646][ T8227] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.234656][ T8227] Call Trace: [ 125.234662][ T8227] [ 125.234669][ T8227] dump_stack_lvl+0x100/0x190 [ 125.234697][ T8227] should_fail_ex.cold+0x5/0xa [ 125.234719][ T8227] should_failslab+0xc2/0x120 [ 125.234743][ T8227] __kmalloc_noprof+0xfc/0x840 [ 125.234763][ T8227] ? aa_label_asxprint+0x75/0x130 [ 125.234791][ T8227] aa_label_asxprint+0x75/0x130 [ 125.234816][ T8227] apparmor_lsmprop_to_secctx+0xb2/0x1a0 [ 125.234836][ T8227] security_lsmprop_to_secctx+0x146/0x1a0 [ 125.234873][ T8227] audit_log_subj_ctx+0x34f/0x460 [ 125.234896][ T8227] ? map_id_range_up+0x2ce/0x3b0 [ 125.234920][ T8227] ? __pfx_audit_log_subj_ctx+0x10/0x10 [ 125.234944][ T8227] ? audit_log_format+0xe8/0x130 [ 125.234963][ T8227] ? apparmor_current_getlsmprop_subj+0x107/0x3c0 [ 125.234992][ T8227] audit_log_task_context+0x88/0xb0 [ 125.235014][ T8227] ? __pfx_audit_log_task_context+0x10/0x10 [ 125.235039][ T8227] audit_log_task+0x1b7/0x3a0 [ 125.235065][ T8227] ? __pfx_audit_log_task+0x10/0x10 [ 125.235090][ T8227] ? __wake_up+0x3f/0x60 [ 125.235115][ T8227] audit_seccomp+0x79/0x190 [ 125.235135][ T8227] __seccomp_filter+0x88c/0x1130 [ 125.235157][ T8227] ? __pfx___seccomp_filter+0x10/0x10 [ 125.235187][ T8227] __seccomp_permit_syscall+0x207/0x2d0 [ 125.235209][ T8227] do_int80_emulation+0x408/0x650 [ 125.235240][ T8227] asm_int80_emulation+0x1a/0x20 [ 125.235257][ T8227] RIP: 0023:0xf71575ab [ 125.235272][ T8227] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 125.235288][ T8227] RSP: 002b:00000000f540d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 125.235306][ T8227] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f540d5d0 [ 125.235317][ T8227] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 125.235326][ T8227] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 125.235336][ T8227] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 125.235346][ T8227] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 125.235376][ T8227] [ 125.324996][ T8227] audit: error in audit_log_subj_ctx [ 125.325098][ T44] audit: type=1326 audit(1789259184.172:408): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=8226 comm="syz.1.491" exe="/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf71575ab code=0x7ffc0000 [ 125.565871][ T8233] fuse: Bad value for 'fd' [ 126.190175][ T8242] FAULT_INJECTION: forcing a failure. [ 126.190175][ T8242] name failslab, interval 1, probability 0, space 0, times 0 [ 126.190196][ T8242] CPU: 1 UID: 0 PID: 8242 Comm: syz.2.495 Not tainted syzkaller #0 PREEMPT(full) [ 126.190208][ T8242] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 126.190215][ T8242] Call Trace: [ 126.190219][ T8242] [ 126.190224][ T8242] dump_stack_lvl+0x100/0x190 [ 126.190241][ T8242] should_fail_ex.cold+0x5/0xa [ 126.190255][ T8242] should_failslab+0xc2/0x120 [ 126.190271][ T8242] __kmalloc_cache_node_noprof+0x94/0x720 [ 126.190286][ T8242] ? sbitmap_queue_init_node+0x291/0x4a0 [ 126.190302][ T8242] sbitmap_queue_init_node+0x291/0x4a0 [ 126.190315][ T8242] blk_mq_init_tags+0x1ba/0x300 [ 126.190333][ T8242] blk_mq_alloc_map_and_rqs+0x244/0xe30 [ 126.190351][ T8242] ? blk_mq_update_queue_map+0x227/0x3a0 [ 126.190363][ T8242] blk_mq_alloc_tag_set+0x848/0x1330 [ 126.190383][ T8242] loop_add+0x3b7/0xb60 [ 126.190395][ T8242] ? __pfx_loop_add+0x10/0x10 [ 126.190415][ T8242] ? __fget_files+0x34/0x3d0 [ 126.190428][ T8242] ? find_held_lock+0x2b/0x80 [ 126.190439][ T8242] ? __fget_files+0x215/0x3d0 [ 126.190452][ T8242] loop_control_ioctl+0xae/0x620 [ 126.190465][ T8242] ? __pfx_loop_control_ioctl+0x10/0x10 [ 126.190480][ T8242] ? __pfx_loop_control_ioctl+0x10/0x10 [ 126.190500][ T8242] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 126.190521][ T8242] __do_fast_syscall_32+0x13a/0x8b0 [ 126.190538][ T8242] ? lockdep_hardirqs_on+0x7d/0x110 [ 126.190556][ T8242] do_fast_syscall_32+0x32/0x70 [ 126.190573][ T8242] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 126.190587][ T8242] RIP: 0023:0xf705efec [ 126.190600][ T8242] Code: Unable to access opcode bytes at 0xf705efc2. [ 126.190604][ T8242] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 126.190616][ T8242] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000004c80 [ 126.190623][ T8242] RDX: 0000000007000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 126.190630][ T8242] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 126.190636][ T8242] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 126.190642][ T8242] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 126.190655][ T8242] [ 126.190834][ T8242] blk-mq: reduced tag depth (128 -> 64) [ 127.135914][ T67] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 127.501511][ T8284] netlink: 113 bytes leftover after parsing attributes in process `syz.3.501'. [ 127.511745][ T8286] fuse: Bad value for 'fd' [ 127.638246][ T8300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.505'. [ 127.701462][ T8306] fuse: Bad value for 'fd' [ 127.935773][ T8316] 9p: Bad value for 'rfdno' [ 128.075438][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.507'. [ 128.414742][ T8323] dlm: Unknown command passed to DLM device : 0 [ 128.414742][ T8323] [ 129.816243][ T8378] dlm: Unknown command passed to DLM device : 0 [ 129.816243][ T8378] [ 129.960884][ T8395] 9p: Bad value for 'rfdno' [ 130.064964][ T63] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 130.151247][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.524'. [ 130.455513][ T5831] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 130.560587][ T8424] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 130.560793][ T8424] Error validating options; rc = [-22] [ 130.560999][ T8424] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 130.561012][ T8424] Error validating options; rc = [-22] [ 130.561252][ T8424] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 130.561264][ T8424] Error validating options; rc = [-22] [ 130.561449][ T8424] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 130.561461][ T8424] Error validating options; rc = [-22] [ 130.561652][ T8424] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 130.561664][ T8424] Error validating options; rc = [-22] [ 130.561848][ T8424] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 130.561859][ T8424] Error validating options; rc = [-22] [ 130.562042][ T8424] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 130.562053][ T8424] Error validating options; rc = [-22] [ 130.562234][ T8424] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 130.562246][ T8424] Error validating options; rc = [-22] [ 130.562434][ T8424] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 130.562445][ T8424] Error validating options; rc = [-22] [ 130.562642][ T8424] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 130.562654][ T8424] Error validating options; rc = [-22] [ 130.562836][ T8424] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 130.562846][ T8424] Error validating options; rc = [-22] [ 130.563027][ T8424] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 130.563038][ T8424] Error validating options; rc = [-22] [ 130.563225][ T8424] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 130.563236][ T8424] Error validating options; rc = [-22] [ 130.563430][ T8424] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 130.563440][ T8424] Error validating options; rc = [-22] [ 130.563641][ T8424] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 130.563653][ T8424] Error validating options; rc = [-22] [ 130.563862][ T8424] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 130.563874][ T8424] Error validating options; rc = [-22] [ 130.564062][ T8424] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 130.564073][ T8424] Error validating options; rc = [-22] [ 130.564257][ T8424] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 130.564268][ T8424] Error validating options; rc = [-22] [ 130.564451][ T8424] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 130.564462][ T8424] Error validating options; rc = [-22] [ 130.564652][ T8424] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 130.564664][ T8424] Error validating options; rc = [-22] [ 130.564854][ T8424] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 130.570775][ T8424] Error validating options; rc = [-22] [ 130.571013][ T8424] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 130.571025][ T8424] Error validating options; rc = [-22] [ 130.571213][ T8424] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 130.571225][ T8424] Error validating options; rc = [-22] [ 130.571408][ T8424] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 130.571419][ T8424] Error validating options; rc = [-22] [ 130.571649][ T8424] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 130.571662][ T8424] Error validating options; rc = [-22] [ 130.571868][ T8424] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 130.571880][ T8424] Error validating options; rc = [-22] [ 130.572066][ T8424] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 130.572077][ T8424] Error validating options; rc = [-22] [ 130.572260][ T8424] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 130.572271][ T8424] Error validating options; rc = [-22] [ 130.572507][ T8424] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 130.572519][ T8424] Error validating options; rc = [-22] [ 130.572706][ T8424] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 130.572717][ T8424] Error validating options; rc = [-22] [ 130.573057][ T8424] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 130.573069][ T8424] Error validating options; rc = [-22] [ 130.573256][ T8424] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 130.573268][ T8424] Error validating options; rc = [-22] [ 130.573479][ T8424] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 130.573490][ T8424] Error validating options; rc = [-22] [ 130.610350][ T5831] usb 6-1: Using ep0 maxpacket: 8 [ 130.613168][ T5831] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 130.613718][ T5831] usb 6-1: config 0 has no interfaces? [ 130.616327][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.616346][ T5831] usb 6-1: Product: syz [ 130.616358][ T5831] usb 6-1: Manufacturer: syz [ 130.616370][ T5831] usb 6-1: SerialNumber: syz [ 130.621388][ T5831] usb 6-1: config 0 descriptor?? [ 130.648426][ T8429] netlink: 113 bytes leftover after parsing attributes in process `syz.3.531'. [ 130.826770][ T1038] usb 6-1: USB disconnect, device number 5 [ 131.044969][ T67] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 131.051028][ T8452] fuse: Bad value for 'fd' [ 131.305580][ T8464] syzkaller0: entered promiscuous mode [ 131.305595][ T8464] syzkaller0: entered allmulticast mode [ 131.449023][ T8474] scsi_nl_rcv_msg: discarding partial message [ 131.449038][ T8474] scsi_nl_rcv_msg: discarding partial skb [ 131.450223][ T44] kauditd_printk_skb: 37 callbacks suppressed [ 131.450237][ T44] audit: type=1326 audit(1789259190.392:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8473 comm="syz.1.539" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701efec code=0x0 [ 131.668604][ T8479] dlm: Unknown command passed to DLM device : 0 [ 131.668604][ T8479] [ 131.907237][ T8496] affs: No valid root block on device sr0 [ 132.336680][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.336756][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.339939][ T8509] syzkaller0: entered promiscuous mode [ 132.339958][ T8509] syzkaller0: entered allmulticast mode [ 132.345800][ T8509] tipc: Enabled bearer , priority 0 [ 132.346871][ T8508] tipc: Resetting bearer [ 132.360698][ T8508] tipc: Disabling bearer [ 132.458570][ T8518] syzkaller0: entered promiscuous mode [ 132.458584][ T8518] syzkaller0: entered allmulticast mode [ 132.502783][ T8524] netlink: 'syz.1.549': attribute type 1 has an invalid length. [ 132.502796][ T8524] netlink: 224 bytes leftover after parsing attributes in process `syz.1.549'. [ 132.948572][ T8568] syzkaller0: entered promiscuous mode [ 132.948591][ T8568] syzkaller0: entered allmulticast mode [ 133.789258][ T8612] FAULT_INJECTION: forcing a failure. [ 133.789258][ T8612] name failslab, interval 1, probability 0, space 0, times 0 [ 133.789277][ T8612] CPU: 1 UID: 0 PID: 8612 Comm: syz.2.564 Not tainted syzkaller #0 PREEMPT(full) [ 133.789290][ T8612] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 133.789296][ T8612] Call Trace: [ 133.789300][ T8612] [ 133.789305][ T8612] dump_stack_lvl+0x100/0x190 [ 133.789324][ T8612] should_fail_ex.cold+0x5/0xa [ 133.789339][ T8612] should_failslab+0xc2/0x120 [ 133.789355][ T8612] __kmalloc_noprof+0xfc/0x840 [ 133.789366][ T8612] ? rcu_is_watching+0x13/0xc0 [ 133.789377][ T8612] ? tomoyo_realpath_from_path+0xb6/0x690 [ 133.789392][ T8612] tomoyo_realpath_from_path+0xb6/0x690 [ 133.789407][ T8612] tomoyo_path_number_perm+0x23c/0x580 [ 133.789422][ T8612] ? tomoyo_path_number_perm+0x22e/0x580 [ 133.789438][ T8612] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 133.789453][ T8612] ? futex_wait+0x11e/0x370 [ 133.789477][ T8612] ? __lock_acquire+0x5c0/0x1f40 [ 133.789499][ T8612] ? __fget_files+0x34/0x3d0 [ 133.789513][ T8612] ? find_held_lock+0x2b/0x80 [ 133.789525][ T8612] ? __fget_files+0x215/0x3d0 [ 133.789618][ T8612] ? hook_file_ioctl_common+0x140/0x440 [ 133.789636][ T8612] ? __fget_files+0x215/0x3d0 [ 133.789651][ T8612] ? __fget_files+0x21f/0x3d0 [ 133.789666][ T8612] security_file_ioctl_compat+0xd3/0x230 [ 133.789684][ T8612] __ia32_compat_sys_ioctl+0xc2/0x360 [ 133.789703][ T8612] __do_fast_syscall_32+0x13a/0x8b0 [ 133.789720][ T8612] ? lockdep_hardirqs_on+0x7d/0x110 [ 133.789736][ T8612] do_fast_syscall_32+0x32/0x70 [ 133.789753][ T8612] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 133.789766][ T8612] RIP: 0023:0xf705efec [ 133.789778][ T8612] Code: Unable to access opcode bytes at 0xf705efc2. [ 133.789783][ T8612] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 133.789793][ T8612] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800c6613 [ 133.789800][ T8612] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 133.789821][ T8612] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 133.789827][ T8612] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 133.789833][ T8612] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 133.789847][ T8612] [ 133.789921][ T8612] ERROR: Out of memory at tomoyo_realpath_from_path. [ 133.833908][ T8621] syzkaller0: entered promiscuous mode [ 133.833922][ T8621] syzkaller0: entered allmulticast mode [ 133.950577][ T44] audit: type=1326 audit(1789259192.892:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.0.569" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 133.950694][ T44] audit: type=1326 audit(1789259192.892:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.0.569" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 133.952895][ T44] audit: type=1326 audit(1789259192.892:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.0.569" exe="/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 133.952920][ T44] audit: type=1326 audit(1789259192.892:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.0.569" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 133.953100][ T44] audit: type=1326 audit(1789259192.892:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.0.569" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 133.953395][ T44] audit: type=1326 audit(1789259192.892:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.0.569" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 133.953428][ T44] audit: type=1326 audit(1789259192.892:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.0.569" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 133.953577][ T44] audit: type=1326 audit(1789259192.892:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.0.569" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 133.954230][ T44] audit: type=1326 audit(1789259192.892:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.0.569" exe="/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 134.434669][ T8653] nvmet_tcp: enabling port 1 (127.0.0.1:4420) [ 134.447054][ T8638] 9p: Bad value for 'rfdno' [ 134.805427][ T8638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.568'. [ 135.047982][ T5441] nvmet: connect by host nqn.2014-08.org.nvmexpress:uuid:47695cb4-7f4c-49e6-9e67-5d16fa230ba3 for subsystem testsubsys not allowed [ 135.065627][ T8655] nvme nvme0: Connect for subsystem testsubsys is not allowed, hostnqn: nqn.2014-08.org.nvmexpress:uuid:47695cb4-7f4c-49e6-9e67-5d16fa230ba3 [ 135.069212][ T8655] nvme nvme0: failed to connect queue: 0 ret=16772 [ 135.234596][ T8666] openvswitch: netlink: Key 4 has unexpected len 2 expected 12 [ 135.521176][ T8687] syzkaller0: entered promiscuous mode [ 135.521199][ T8687] syzkaller0: entered allmulticast mode [ 135.540107][ T8682] dlm: Unknown command passed to DLM device : 0 [ 135.540107][ T8682] [ 135.913894][ T8698] dlm: Unknown command passed to DLM device : 0 [ 135.913894][ T8698] [ 136.080048][ T8712] PKCS7: Unsupported SignerInfo version [ 136.304316][ T8716] dlm: Unknown command passed to DLM device : 0 [ 136.304316][ T8716] [ 136.340627][ T8724] 9p: Could not find request transport: fdd“›aJê”;ôîe [ 136.340627][ T8724] ýê [ 136.433253][ T8731] 9p: Could not find request transport: fdd“›aJê”;ôîe [ 136.433253][ T8731] ýê [ 136.449495][ T8740] netlink: 113 bytes leftover after parsing attributes in process `syz.1.592'. [ 136.523309][ T8745] dlm: Unknown command passed to DLM device : 0 [ 136.523309][ T8745] [ 136.554690][ T8751] syzkaller0: entered promiscuous mode [ 136.554745][ T8751] syzkaller0: entered allmulticast mode [ 137.685074][ T67] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 138.130243][ T8774] 9p: Bad value for 'rfdno' [ 138.135050][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.601'. [ 138.222327][ T8776] dlm: Unknown command passed to DLM device : 0 [ 138.222327][ T8776] [ 138.241128][ T8793] syzkaller0: entered promiscuous mode [ 138.241141][ T8793] syzkaller0: entered allmulticast mode [ 138.287939][ T8787] bond1 (unregistering): Released all slaves [ 138.708609][ T8874] new mount options do not match the existing superblock, will be ignored [ 138.710481][ T8874] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 138.755690][ T8877] syzkaller0: entered promiscuous mode [ 138.755704][ T8877] syzkaller0: entered allmulticast mode [ 139.082219][ T8895] fuse: Bad value for 'fd' [ 139.122549][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.615'. [ 139.122614][ T8898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.148921][ T8898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.514426][ T8925] overlayfs: missing 'lowerdir' [ 139.610492][ T8925] syzkaller0: entered promiscuous mode [ 139.610513][ T8925] syzkaller0: entered allmulticast mode [ 139.807352][ T8933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.620'. [ 140.338799][ T8948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.622'. [ 140.782450][ T8956] syzkaller0: entered promiscuous mode [ 140.783127][ T8956] syzkaller0: entered allmulticast mode [ 141.087261][ T8968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.624'. [ 141.174560][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.625'. [ 142.506800][ T8991] netlink: 52 bytes leftover after parsing attributes in process `syz.0.627'. [ 142.542837][ T8979] fuse: Bad value for 'fd' [ 142.854587][ T8996] fuse: Bad value for 'fd' [ 142.933859][ T9008] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 142.934289][ T9008] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 142.934768][ T9008] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 142.935673][ T9008] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 142.974825][ T9008] nvme nvme0: failed to connect socket: -111 [ 143.313961][ T9026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.635'. [ 143.826831][ T9032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.638'. [ 143.871947][ T9040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.640'. [ 143.927968][ T9058] lo speed is unknown, defaulting to 1000 [ 143.928003][ T9058] lo speed is unknown, defaulting to 1000 [ 143.930438][ T9058] lo speed is unknown, defaulting to 1000 [ 143.931212][ T9058] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 143.931233][ T9058] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 143.931255][ T9058] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 143.932825][ T9058] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 143.937012][ T9058] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 144.203397][ T9058] lo speed is unknown, defaulting to 1000 [ 144.230332][ T9058] lo speed is unknown, defaulting to 1000 [ 144.249002][ T9058] lo speed is unknown, defaulting to 1000 [ 144.256942][ T9058] lo speed is unknown, defaulting to 1000 [ 144.258334][ T9058] lo speed is unknown, defaulting to 1000 [ 144.298003][ T44] kauditd_printk_skb: 30 callbacks suppressed [ 144.298015][ T44] audit: type=1326 audit(1789259203.242:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.2.643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 144.298251][ T44] audit: type=1326 audit(1789259203.242:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.2.643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 144.298806][ T44] audit: type=1326 audit(1789259203.242:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.2.643" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf705efec code=0x7ffc0000 [ 144.298829][ T44] audit: type=1326 audit(1789259203.242:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.2.643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 144.298848][ T44] audit: type=1326 audit(1789259203.242:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.2.643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 144.298964][ T44] audit: type=1326 audit(1789259203.242:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.2.643" exe="/syz-executor" sig=0 arch=40000003 syscall=367 compat=1 ip=0xf705efec code=0x7ffc0000 [ 144.299057][ T44] audit: type=1326 audit(1789259203.242:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.2.643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 144.299133][ T44] audit: type=1326 audit(1789259203.242:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.2.643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 144.299293][ T44] audit: type=1326 audit(1789259203.242:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.2.643" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf705efec code=0x7ffc0000 [ 144.299350][ T44] audit: type=1326 audit(1789259203.242:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.2.643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 144.392563][ T9094] netlink: 113 bytes leftover after parsing attributes in process `syz.3.647'. [ 144.642738][ T9108] 9p: Bad value for 'rfdno' [ 144.659959][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.648'. [ 144.839857][ T9100] fuse: Bad value for 'fd' [ 145.290584][ T9118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.650'. [ 146.144606][ T9127] 9p: Bad value for 'rfdno' [ 146.530918][ T9127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 147.631117][ T9160] overlayfs: missing 'lowerdir' [ 147.765097][ T67] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 148.519522][ T9144] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 148.522021][ T9144] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 148.522521][ T9144] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 148.522647][ T9144] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 148.638695][ T9189] netlink: 20 bytes leftover after parsing attributes in process `syz.1.657'. [ 148.949849][ T9203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.661'. [ 149.295107][ T5741] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 150.164968][ T5741] Bluetooth: hci2: command 0x0c1a tx timeout [ 150.273516][ T9246] syzkaller0: entered promiscuous mode [ 150.273535][ T9246] syzkaller0: entered allmulticast mode [ 150.540188][ T9266] netlink: 113 bytes leftover after parsing attributes in process `syz.3.668'. [ 150.567235][ T5741] Bluetooth: hci0: command 0x0c1a tx timeout [ 150.577984][ T5744] Bluetooth: hci1: command 0x0c1a tx timeout [ 150.578075][ T5741] Bluetooth: hci3: command 0x0c1a tx timeout [ 152.077329][ T9308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.673'. [ 152.851075][ T9283] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 152.851216][ T9283] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 152.851317][ T9283] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 152.851427][ T9283] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 152.965585][ T5741] Bluetooth: hci2: command 0x0c1a tx timeout [ 153.485622][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.684'. [ 153.652370][ T9352] capability: warning: `syz.2.678' uses 32-bit capabilities (legacy support in use) [ 154.476688][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 154.885352][ T5741] Bluetooth: hci3: command 0x0c1a tx timeout [ 154.885376][ T5741] Bluetooth: hci1: command 0x0c1a tx timeout [ 154.885391][ T5741] Bluetooth: hci0: command 0x0c1a tx timeout [ 154.918650][ T9389] usb usb7: usbfs: interface 0 claimed by hub while 'syz.2.686' resets device [ 155.375217][ T25] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 155.655038][ T9436] syzkaller0: entered promiscuous mode [ 155.655051][ T9436] syzkaller0: entered allmulticast mode [ 155.691205][ T4353] IPVS: starting estimator thread 0... [ 155.775797][ T9443] IPVS: using max 43 ests per chain, 103200 per kthread [ 161.678736][ T9476] 9p: Bad value for 'rfdno' [ 161.770940][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.691'. [ 162.808770][ T5741] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 162.808953][ T5741] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 164.735353][ T5744] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 165.090626][ T9616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.712'. [ 165.234139][ T9619] fuse: Bad value for 'fd' [ 165.394827][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.714'. [ 165.487863][ T8051] wiimote 0005:057E:0306.0003: unbalanced collection at end of report description [ 165.488140][ T8051] wiimote 0005:057E:0306.0003: HID parse failed [ 165.490752][ T8051] wiimote 0005:057E:0306.0003: probe with driver wiimote failed with error -22 [ 165.744946][ T8051] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 165.904979][ T8051] usb 6-1: Using ep0 maxpacket: 8 [ 165.905685][ T8051] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 165.906152][ T8051] usb 6-1: config 0 has no interfaces? [ 165.908706][ T8051] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.908719][ T8051] usb 6-1: Product: syz [ 165.908726][ T8051] usb 6-1: Manufacturer: syz [ 165.908733][ T8051] usb 6-1: SerialNumber: syz [ 165.912779][ T8051] usb 6-1: config 0 descriptor?? [ 166.036590][ T9651] fuse: Bad value for 'fd' [ 166.073649][ T9657] syzkaller0: entered promiscuous mode [ 166.073663][ T9657] syzkaller0: entered allmulticast mode [ 166.132597][ T5831] usb 6-1: USB disconnect, device number 7 [ 166.797308][ T44] kauditd_printk_skb: 1 callbacks suppressed [ 166.797320][ T44] audit: type=1326 audit(1789259225.742:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9670 comm="syz.1.719" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 166.797421][ T44] audit: type=1326 audit(1789259225.742:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9670 comm="syz.1.719" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 166.856903][ T9671] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 167.329297][ T9685] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.479701][ T9689] 9p: Bad value for 'rfdno' [ 167.499801][ T9689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.721'. [ 168.416835][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 168.585788][ T25] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 168.589139][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.589154][ T25] usb 5-1: Product: syz [ 168.589161][ T25] usb 5-1: Manufacturer: syz [ 168.589169][ T25] usb 5-1: SerialNumber: syz [ 168.637051][ T9716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.725'. [ 168.679014][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.724'. [ 169.220739][ T9717] fuse: Bad value for 'fd' [ 169.372205][ T25] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 169.414024][ T9726] Console: switching to colour dummy device 80x25 [ 169.518463][ T9733] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 169.539214][ T9733] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 169.539379][ T9733] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 169.539602][ T9733] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 169.548502][ T9733] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 169.558556][ T9740] netlink: 20 bytes leftover after parsing attributes in process `syz.2.728'. [ 169.570078][ T9733] pci 0000:00:01.0: Adding to iommu group 1 [ 169.586238][ T9733] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 169.586263][ T9733] pci 0000:00:01.0: vgaarb: bridge control possible [ 169.586271][ T9733] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 169.592098][ T9733] pci 0000:00:05.0: [1af4:1009] type 00 class 0x000200 conventional PCI endpoint [ 169.602429][ T9733] pci 0000:00:05.0: BAR 0 [io 0xc0c0-0xc0df] [ 169.602607][ T9733] pci 0000:00:05.0: BAR 1 [mem 0xfeaf6000-0xfeaf6fff] [ 169.602998][ T9733] pci 0000:00:05.0: BAR 4 [mem 0xfe204000-0xfe207fff 64bit pref] [ 169.617768][ T9733] pci 0000:00:05.0: Adding to iommu group 5 [ 169.664037][ T9733] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 169.664219][ T9733] pci 0000:00:05.0: BAR 4 [mem 0x580200000-0x580203fff 64bit pref]: assigned [ 169.670417][ T9733] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 169.673750][ T9733] pci 0000:00:05.0: BAR 1 [mem 0x81201000-0x81201fff]: assigned [ 169.674320][ T9747] netlink: 'syz.2.730': attribute type 1 has an invalid length. [ 169.674331][ T9747] netlink: 'syz.2.730': attribute type 2 has an invalid length. [ 169.674337][ T9747] netlink: 16 bytes leftover after parsing attributes in process `syz.2.730'. [ 169.678299][ T9733] pci 0000:00:05.0: BAR 0 [io 0x2020-0x203f]: assigned [ 169.686712][ T9733] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 169.689749][ T9748] netlink: 'syz.2.730': attribute type 1 has an invalid length. [ 169.689760][ T9748] netlink: 'syz.2.730': attribute type 2 has an invalid length. [ 169.689767][ T9748] netlink: 16 bytes leftover after parsing attributes in process `syz.2.730'. [ 169.694688][ T9747] xt_policy: output policy not valid in PREROUTING and INPUT [ 169.715168][ T9733] [drm] Found bochs VGA, ID 0xb0c5. [ 169.715180][ T9733] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 169.793005][ T9733] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 169.893707][ T9750] fuse: Bad value for 'fd' [ 170.122590][ T9774] 9p: Bad value for 'rfdno' [ 170.125136][ T9774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.734'. [ 170.192052][ T9733] Console: switching to colour frame buffer device 160x50 [ 170.234407][ T9733] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 170.414989][ T25] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 170.415324][ T25] ath9k_htc: Failed to initialize the device [ 170.673196][ T9791] fuse: Bad value for 'fd' [ 170.956446][ T5883] usb 5-1: USB disconnect, device number 7 [ 171.027940][ T5883] usb 5-1: ath9k_htc: USB layer deinitialized [ 171.076423][ T5839] wiimote 0005:057E:0306.0004: unbalanced collection at end of report description [ 171.076874][ T5839] wiimote 0005:057E:0306.0004: HID parse failed [ 171.077204][ T5839] wiimote 0005:057E:0306.0004: probe with driver wiimote failed with error -22 [ 171.261102][ T9814] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.388818][ T44] audit: type=1326 audit(1789259230.332:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.3.738" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 171.388963][ T44] audit: type=1326 audit(1789259230.332:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.3.738" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 171.389512][ T9814] md: invalid raid superblock magic on ram2 [ 171.389907][ T9814] md: ram2 does not have a valid v0.0 superblock, not importing! [ 171.390271][ T9814] md: md_import_device returned -22 [ 171.447162][ T5883] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 171.522289][ T9824] 9p: Bad value for 'rfdno' [ 171.531107][ T9824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.743'. [ 171.675267][ T5883] usb 5-1: Using ep0 maxpacket: 8 [ 171.678067][ T5883] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 171.681511][ T5883] usb 5-1: config 0 has no interfaces? [ 171.695075][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.695328][ T5883] usb 5-1: Product: syz [ 171.695388][ T5883] usb 5-1: Manufacturer: syz [ 171.695421][ T5883] usb 5-1: SerialNumber: syz [ 171.734271][ T5883] usb 5-1: config 0 descriptor?? [ 172.020427][ T5883] usb 5-1: USB disconnect, device number 8 [ 172.740369][ T9841] fuse: Bad value for 'fd' [ 172.766008][ T9854] netlink: 113 bytes leftover after parsing attributes in process `syz.3.749'. [ 172.854065][ T44] audit: type=1326 audit(1789259231.792:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9858 comm="syz.3.750" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 172.855579][ T44] audit: type=1326 audit(1789259231.802:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9858 comm="syz.3.750" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 173.018191][ T9868] syzkaller0: entered promiscuous mode [ 173.018205][ T9868] syzkaller0: entered allmulticast mode [ 173.331838][ T9876] fuse: Bad value for 'fd' [ 173.574379][ T9884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.754'. [ 173.703734][ T9897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.756'. [ 174.645414][ T5744] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 174.755017][ T9919] netlink: 76 bytes leftover after parsing attributes in process `syz.0.759'. [ 174.756922][ T9919] netlink: 72 bytes leftover after parsing attributes in process `syz.0.759'. [ 174.757005][ T9919] FAULT_INJECTION: forcing a failure. [ 174.757005][ T9919] name fail_futex, interval 1, probability 0, space 0, times 1 [ 174.757021][ T9919] CPU: 0 UID: 0 PID: 9919 Comm: syz.0.759 Not tainted syzkaller #0 PREEMPT(full) [ 174.757033][ T9919] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 174.757039][ T9919] Call Trace: [ 174.757043][ T9919] [ 174.757048][ T9919] dump_stack_lvl+0x100/0x190 [ 174.757117][ T9919] should_fail_ex.cold+0x5/0xa [ 174.757131][ T9919] get_futex_key+0x1d0/0x14f0 [ 174.757150][ T9919] ? __pfx_get_futex_key+0x10/0x10 [ 174.757168][ T9919] ? ___sys_sendmsg+0x127/0x1e0 [ 174.757200][ T9919] futex_wake+0xf4/0x5e0 [ 174.757216][ T9919] ? futex_wait+0x11e/0x370 [ 174.757229][ T9919] ? __pfx_futex_wake+0x10/0x10 [ 174.757244][ T9919] ? find_held_lock+0x2b/0x80 [ 174.757259][ T9919] do_futex+0x2b2/0x440 [ 174.757270][ T9919] ? __pfx_do_futex+0x10/0x10 [ 174.757281][ T9919] ? fput+0x7c/0x100 [ 174.757315][ T9919] __ia32_sys_futex_time32+0x2f4/0x470 [ 174.757329][ T9919] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 174.757347][ T9919] __do_fast_syscall_32+0x13a/0x8b0 [ 174.757382][ T9919] ? lockdep_hardirqs_on+0x7d/0x110 [ 174.757399][ T9919] do_fast_syscall_32+0x32/0x70 [ 174.757419][ T9919] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 174.757433][ T9919] RIP: 0023:0xf6feefec [ 174.757446][ T9919] Code: Unable to access opcode bytes at 0xf6feefc2. [ 174.757451][ T9919] RSP: 002b:00000000f53dd5cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 174.757462][ T9919] RAX: ffffffffffffffda RBX: 00000000f73e4f8c RCX: 0000000000000081 [ 174.757469][ T9919] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 174.757475][ T9919] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 174.757481][ T9919] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 174.757488][ T9919] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 174.757501][ T9919] [ 175.195310][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.762'. [ 175.387551][ T9948] fuse: Bad value for 'fd' [ 175.489377][ T9956] netlink: 20 bytes leftover after parsing attributes in process `syz.0.766'. [ 175.867998][ T9974] 9p: Bad value for 'rfdno' [ 176.017597][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.769'. [ 176.258569][ T9994] comedi comedi3: dt2817: I/O base address or length out of range [ 176.258619][ T9994] comedi comedi3: dt2817: I/O base address or length out of range [ 176.258659][ T9994] comedi comedi3: dt2817: I/O base address or length out of range [ 176.258698][ T9994] comedi comedi3: dt2817: I/O base address or length out of range [ 176.258738][ T9994] comedi comedi3: dt2817: I/O base address or length out of range [ 176.258779][ T9994] comedi comedi3: dt2817: I/O base address or length out of range [ 176.258818][ T9994] comedi comedi3: dt2817: I/O base address or length out of range [ 176.258857][ T9994] comedi comedi3: dt2817: I/O base address or length out of range [ 176.258896][ T9994] comedi comedi3: dt2817: I/O base address or length out of range [ 176.258936][ T9994] comedi comedi3: dt2817: I/O base address or length out of range [ 176.258976][ T9994] comedi comedi3: dt2817: I/O base address or length out of range [ 176.259015][ T9994] comedi comedi3: dt2817: I/O base address or length out of range [ 176.259054][ T9994] comedi comedi3: dt2817: I/O base address or length out of range [ 176.259095][ T9994] comedi comedi3: dt2817: I/O base address or length out of range [ 176.259134][ T9994] comedi comedi3: dt2817: I/O base address or length out of range [ 176.259174][ T9994] comedi comedi3: dt2817: I/O base address or length out of range [ 176.259213][ T9994] comedi comedi3: dt2817: I/O base address or length out of range [ 176.259254][ T9994] comedi comedi3: dt2817: I/O base address or length out of range [ 176.259297][ T9994] comedi comedi3: dt2817: I/O base address or length out of range [ 176.259367][ T9994] comedi comedi3: dt2817: I/O base address or length out of range [ 176.259409][ T9994] comedi comedi3: dt2817: I/O base address or length out of range [ 176.259449][ T9994] comedi comedi3: dt2817: I/O base address or length out of range [ 176.259488][ T9994] comedi comedi3: dt2817: I/O base address or length out of range [ 176.259528][ T9994] comedi comedi3: dt2817: I/O base address or length out of range [ 176.259567][ T9994] comedi comedi3: dt2817: I/O base address or length out of range [ 176.259633][ T9994] comedi comedi3: dt2817: I/O base address or length out of range [ 176.259673][ T9994] comedi comedi3: dt2817: I/O base address or length out of range [ 176.259712][ T9994] comedi comedi3: dt2817: I/O base address or length out of range [ 176.259752][ T9994] comedi comedi3: dt2817: I/O base address or length out of range [ 176.259794][ T9994] comedi comedi3: dt2817: I/O base address or length out of range [ 176.259834][ T9994] comedi comedi3: dt2817: I/O base address or length out of range [ 176.259873][ T9994] comedi comedi3: dt2817: I/O base address or length out of range [ 176.259912][ T9994] comedi comedi3: dt2817: I/O base address or length out of range [ 176.479431][ T9998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.770'. [ 176.815381][ T5831] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 176.966122][ T5831] usb 5-1: Using ep0 maxpacket: 8 [ 176.966569][ T5831] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 176.967352][ T5831] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 176.967384][ T5831] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 176.967401][ T5831] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 176.967421][ T5831] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 176.967437][ T5831] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.967465][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.212346][ T5831] usb 5-1: usb_control_msg returned -32 [ 177.212479][ T5831] usbtmc 5-1:16.0: can't read capabilities [ 177.424656][ T6352] IPVS: starting estimator thread 0... [ 177.476234][T10043] fuse: Bad value for 'fd' [ 177.510921][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.782'. [ 177.514982][T10039] IPVS: using max 43 ests per chain, 103200 per kthread [ 177.852180][T10053] 9p: Bad value for 'rfdno' [ 178.112889][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.785'. [ 178.316648][T10062] netlink: 20 bytes leftover after parsing attributes in process `syz.1.787'. [ 178.460800][ T44] audit: type=1326 audit(1789259237.402:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.2.792" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf705efec code=0x7ffc0000 [ 178.460828][ T44] audit: type=1326 audit(1789259237.402:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.2.792" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf705efec code=0x7ffc0000 [ 178.469786][ T44] audit: type=1326 audit(1789259237.402:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.2.792" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf705efec code=0x7ffc0000 [ 178.484171][ T44] audit: type=1326 audit(1789259237.422:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.2.792" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf705efec code=0x7ffc0000 [ 178.484202][ T44] audit: type=1326 audit(1789259237.422:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.2.792" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf705efec code=0x7ffc0000 [ 178.484223][ T44] audit: type=1326 audit(1789259237.422:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.2.792" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf705efec code=0x7ffc0000 [ 178.484243][ T44] audit: type=1326 audit(1789259237.422:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.2.792" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf705efec code=0x7ffc0000 [ 178.484262][ T44] audit: type=1326 audit(1789259237.422:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.2.792" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf705efec code=0x7ffc0000 [ 178.484281][ T44] audit: type=1326 audit(1789259237.422:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.2.792" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf705efec code=0x7ffc0000 [ 178.484300][ T44] audit: type=1326 audit(1789259237.422:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.2.792" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf705efec code=0x7ffc0000 [ 178.557008][T10117] netlink: 'syz.2.792': attribute type 30 has an invalid length. [ 178.622745][T10132] fuse: Bad value for 'fd' [ 178.636645][T10166] fuse: Bad value for 'fd' [ 178.674086][ T5446] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.693510][T10117] lo speed is unknown, defaulting to 1000 [ 178.695432][ T5831] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 178.825343][ T5831] usb 7-1: device descriptor read/64, error -71 [ 179.065284][ T5831] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 179.195366][ T5831] usb 7-1: device descriptor read/64, error -71 [ 179.215844][ T5181] usb 5-1: USB disconnect, device number 9 [ 179.306920][ T5831] usb usb7-port1: attempt power cycle [ 179.477994][T10221] 9p: Bad value for 'rfdno' [ 179.515495][T10221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.794'. [ 179.545683][T10225] fuse: Bad value for 'fd' [ 179.666224][ T5831] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 179.698805][ T5831] usb 7-1: device descriptor read/8, error -71 [ 179.976365][ T5831] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 179.997384][ T5831] usb 7-1: device descriptor read/8, error -71 [ 180.108605][ T5831] usb usb7-port1: unable to enumerate USB device [ 180.680246][T10245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.798'. [ 182.813085][T10277] process 'syz.2.805' launched './file1' with NULL argv: empty string added [ 182.866024][T10277] lo speed is unknown, defaulting to 1000 [ 182.962875][T10281] fuse: Bad value for 'fd' [ 182.971585][T10318] fuse: Bad value for 'fd' [ 183.091363][T10325] 9p: Bad value for 'source' [ 183.319739][T10335] netlink: 136 bytes leftover after parsing attributes in process `syz.2.811'. [ 183.319755][T10335] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 183.987431][T10355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.813'. [ 185.065641][T10371] syzkaller0: entered promiscuous mode [ 185.065732][T10371] syzkaller0: entered allmulticast mode [ 185.311370][T10379] fuse: Bad value for 'fd' [ 185.603872][T10384] 9p: Bad value for 'rfdno' [ 185.612028][T10384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.821'. [ 185.953597][T10398] netlink: 'syz.0.824': attribute type 3 has an invalid length. [ 185.953754][T10398] netlink: 9 bytes leftover after parsing attributes in process `syz.0.824'. [ 185.994049][T10403] netlink: 20 bytes leftover after parsing attributes in process `syz.2.825'. [ 186.307753][T10416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.827'. [ 186.699400][T10423] ALSA: mixer_oss: invalid OSS volume '' [ 187.267180][T10453] fuse: Bad value for 'fd' [ 187.466963][T10462] 9p: Bad value for 'rfdno' [ 187.473753][T10462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.834'. [ 187.502919][T10465] fuse: Bad value for 'fd' [ 187.852671][T10474] netlink: 20 bytes leftover after parsing attributes in process `syz.3.838'. [ 187.902246][T10481] netlink: 256 bytes leftover after parsing attributes in process `syz.3.839'. [ 188.118054][T10495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.842'. [ 188.152863][ T5839] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 188.325824][ T5839] usb 8-1: Using ep0 maxpacket: 8 [ 188.329725][ T5839] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 188.330498][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.844'. [ 188.333133][ T5839] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 188.333156][ T5839] usb 8-1: config 179 has no interface number 0 [ 188.333243][ T5839] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 188.333266][ T5839] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 188.333319][ T5839] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 188.333371][ T5839] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 188.333422][ T5839] usb 8-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 188.333474][ T5839] usb 8-1: config 179 interface 65 has no altsetting 0 [ 188.333567][ T5839] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.530236][T10504] lo speed is unknown, defaulting to 1000 [ 188.558788][T10518] 9p: Bad value for 'rfdno' [ 188.649397][ T5839] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input10 [ 188.792654][T10518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.846'. [ 189.136521][ T5831] usb 8-1: USB disconnect, device number 8 [ 189.136687][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 189.559219][T10560] netlink: 132 bytes leftover after parsing attributes in process `syz.3.848'. [ 189.560414][T10581] syzkaller0: entered promiscuous mode [ 189.560434][T10581] syzkaller0: entered allmulticast mode [ 189.782478][T10595] fuse: Bad value for 'fd' [ 189.987143][T10613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.853'. [ 190.915463][T10618] fuse: Bad value for 'fd' [ 191.032696][T10629] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 191.608673][T10645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.858'. [ 191.668776][T10656] 9p: Bad value for 'rfdno' [ 191.887925][T10667] No source specified [ 191.988274][T10678] netlink: 20 bytes leftover after parsing attributes in process `syz.3.865'. [ 192.180433][T10685] fuse: Bad value for 'fd' [ 192.210744][T10689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.867'. [ 193.385164][T10701] fuse: Bad value for 'fd' [ 193.389801][T10708] syzkaller0: entered promiscuous mode [ 193.389816][T10708] syzkaller0: entered allmulticast mode [ 193.771212][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.542802][T10732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'. [ 195.488163][T10754] input: syz1 as /devices/virtual/input/input11 [ 196.006357][T10769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.879'. [ 196.522654][T10776] syzkaller0: entered promiscuous mode [ 196.522746][T10776] syzkaller0: entered allmulticast mode [ 197.099927][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.887'. [ 197.319735][T10804] netlink: 113 bytes leftover after parsing attributes in process `syz.3.886'. [ 197.500207][T10808] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 198.123528][T10824] 9p: Bad value for 'rfdno' [ 198.140588][T10824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.889'. [ 198.172326][T10832] syzkaller0: entered promiscuous mode [ 198.172347][T10832] syzkaller0: entered allmulticast mode [ 198.301412][T10839] syzkaller0: entered promiscuous mode [ 198.301427][T10839] syzkaller0: entered allmulticast mode [ 198.519590][T10847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.895'. [ 199.268668][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.897'. [ 199.672212][T10867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.899'. [ 200.443033][T10871] fuse: Bad value for 'fd' [ 200.748091][T10877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.901'. [ 201.027245][T10887] netlink: 'syz.2.902': attribute type 4 has an invalid length. [ 201.028656][T10888] netlink: 'syz.2.902': attribute type 4 has an invalid length. [ 201.215064][ T5744] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 201.249402][T10894] syzkaller0: entered promiscuous mode [ 201.249418][T10894] syzkaller0: entered allmulticast mode [ 201.260200][T10908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.905'. [ 201.630812][ T1038] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 201.799315][ T1038] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 201.812599][ T1038] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 201.812645][ T1038] usb 7-1: config 0 interface 0 has no altsetting 0 [ 201.892902][ T1038] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 201.892921][ T1038] usb 7-1: Product: syz [ 201.893124][ T1038] usb 7-1: Manufacturer: syz [ 201.893576][ T1038] usb 7-1: SerialNumber: syz [ 201.971674][ T1038] usb 7-1: config 0 descriptor?? [ 202.228127][ T1038] usb 7-1: selecting invalid altsetting 0 [ 202.561567][ T1038] usb 7-1: USB disconnect, device number 7 [ 202.748808][T10962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.908'. [ 202.749172][T10966] fuse: Bad value for 'fd' [ 203.369903][ T9669] udevd[9669]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.779640][T10987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.911'. [ 204.624035][T11015] capability: warning: `syz.0.921' uses deprecated v2 capabilities in a way that may be insecure [ 204.646668][T11016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.921'. [ 204.822362][T11032] fuse: Bad value for 'fd' [ 204.822712][T11032] fuse: Bad value for 'fd' [ 204.823135][T11032] FAULT_INJECTION: forcing a failure. [ 204.823135][T11032] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 204.823152][T11032] CPU: 2 UID: 0 PID: 11032 Comm: syz.0.925 Not tainted syzkaller #0 PREEMPT(full) [ 204.823165][T11032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 204.823171][T11032] Call Trace: [ 204.823175][T11032] [ 204.823180][T11032] dump_stack_lvl+0x100/0x190 [ 204.823197][T11032] should_fail_ex.cold+0x5/0xa [ 204.823212][T11032] strncpy_from_user+0x3b/0x2d0 [ 204.823229][T11032] do_getname+0x78/0x390 [ 204.823246][T11032] acct_on+0x93/0xa00 [ 204.823260][T11032] ? __pfx_acct_on+0x10/0x10 [ 204.823272][T11032] ? bpf_lsm_capable+0x9/0x10 [ 204.823292][T11032] __ia32_sys_acct+0x80/0x1e0 [ 204.823304][T11032] ? lockdep_hardirqs_on+0x7d/0x110 [ 204.823320][T11032] __do_fast_syscall_32+0x13a/0x8b0 [ 204.823336][T11032] ? lockdep_hardirqs_on+0x7d/0x110 [ 204.823353][T11032] do_fast_syscall_32+0x32/0x70 [ 204.823370][T11032] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 204.823384][T11032] RIP: 0023:0xf6feefec [ 204.823396][T11032] Code: Unable to access opcode bytes at 0xf6feefc2. [ 204.823401][T11032] RSP: 002b:00000000f53bc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000033 [ 204.823412][T11032] RAX: ffffffffffffffda RBX: 0000000080000140 RCX: 0000000000000000 [ 204.823419][T11032] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 204.823425][T11032] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 204.823432][T11032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.823438][T11032] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 204.823473][T11032] [ 205.010295][T11038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.926'. [ 205.604058][T11044] fuse: Bad value for 'fd' [ 205.880991][T11060] netlink: 113 bytes leftover after parsing attributes in process `syz.0.932'. [ 206.104985][ T5831] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 206.599169][T11068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.933'. [ 206.715780][ T5831] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 206.716594][ T5831] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 206.716609][ T5831] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 206.716620][ T5831] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 206.719457][ T5831] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.719475][ T5831] usb 7-1: Product: syz [ 206.719485][ T5831] usb 7-1: Manufacturer: syz [ 206.719496][ T5831] usb 7-1: SerialNumber: syz [ 206.721785][ T5831] hub 7-1:1.0: bad descriptor, ignoring hub [ 206.721797][ T5831] hub 7-1:1.0: probe with driver hub failed with error -5 [ 206.927738][ T5831] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 207.188642][T11104] loop6: detected capacity change from 0 to 2640 [ 207.322013][ T9470] Buffer I/O error on dev loop6, logical block 0, async page read [ 207.322563][ T9470] Buffer I/O error on dev loop6, logical block 0, async page read [ 207.322924][ T9470] Buffer I/O error on dev loop6, logical block 0, async page read [ 207.323288][ T9470] Buffer I/O error on dev loop6, logical block 0, async page read [ 207.323851][ T9470] Buffer I/O error on dev loop6, logical block 0, async page read [ 207.396415][T11115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.949'. [ 207.413660][T11048] usb 7-1: reset high-speed USB device number 8 using dummy_hcd [ 207.431641][T11048] usb 7-1: device reset changed ep0 maxpacket size! [ 207.443500][ T25] usb 7-1: USB disconnect, device number 8 [ 207.450675][ T25] usblp0: removed [ 207.594303][T11133] netlink: 20 bytes leftover after parsing attributes in process `syz.1.942'. [ 207.597896][ T25] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 207.755550][ T63] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 207.774972][ T25] usb 7-1: Using ep0 maxpacket: 16 [ 207.786951][ T25] usb 7-1: unable to get BOS descriptor or descriptor too short [ 207.786991][ T25] usb 7-1: New USB device found, idVendor=04e6, idProduct=0009, bcdDevice= 2.00 [ 207.787995][ T25] usb 7-1: config 1 has an invalid interface number: 81 but max is 0 [ 207.788013][ T25] usb 7-1: config 1 has no interface number 0 [ 207.788034][ T25] usb 7-1: config 1 interface 81 has no altsetting 0 [ 207.790801][ T25] usb 7-1: string descriptor 0 read error: -22 [ 207.790892][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.802415][ T25] usb-storage 7-1:1.81: USB Mass Storage device detected [ 207.909862][T11147] syzkaller0: entered promiscuous mode [ 207.909875][T11147] syzkaller0: entered allmulticast mode [ 207.999614][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.928'. [ 208.007115][ T5831] usb 7-1: USB disconnect, device number 9 [ 208.424500][T11181] fuse: Bad value for 'fd' [ 208.428272][T11181] FAULT_INJECTION: forcing a failure. [ 208.428272][T11181] name failslab, interval 1, probability 0, space 0, times 0 [ 208.428290][T11181] CPU: 3 UID: 0 PID: 11181 Comm: syz.3.951 Not tainted syzkaller #0 PREEMPT(full) [ 208.428303][T11181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 208.428310][T11181] Call Trace: [ 208.428314][T11181] [ 208.428318][T11181] dump_stack_lvl+0x100/0x190 [ 208.428336][T11181] should_fail_ex.cold+0x5/0xa [ 208.428350][T11181] should_failslab+0xc2/0x120 [ 208.428365][T11181] kmem_cache_alloc_noprof+0x92/0x6a0 [ 208.428378][T11181] ? alloc_empty_file+0x5b/0x1c0 [ 208.428395][T11181] alloc_empty_file+0x5b/0x1c0 [ 208.428410][T11181] path_openat+0xdb/0x2440 [ 208.428422][T11181] ? lock_acquire+0x1d1/0x380 [ 208.428437][T11181] ? __might_fault+0xc5/0x140 [ 208.428454][T11181] ? __pfx_path_openat+0x10/0x10 [ 208.428466][T11181] ? kasan_save_stack+0x3f/0x50 [ 208.428478][T11181] ? kasan_save_stack+0x30/0x50 [ 208.428490][T11181] ? kasan_save_track+0x14/0x30 [ 208.428502][T11181] ? __kasan_slab_alloc+0x89/0x90 [ 208.428514][T11181] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 208.428526][T11181] ? do_getname+0x35/0x390 [ 208.428540][T11181] ? acct_on+0x93/0xa00 [ 208.428551][T11181] ? __ia32_sys_acct+0x80/0x1e0 [ 208.428565][T11181] do_file_open+0x20e/0x430 [ 208.428579][T11181] ? __pfx_do_file_open+0x10/0x10 [ 208.428602][T11181] ? __might_fault+0xc5/0x140 [ 208.428618][T11181] ? find_held_lock+0x2b/0x80 [ 208.428629][T11181] ? __might_fault+0xc5/0x140 [ 208.428645][T11181] ? __might_fault+0xc5/0x140 [ 208.428663][T11181] file_open_name+0x1c3/0x3e0 [ 208.428680][T11181] ? __pfx_file_open_name+0x10/0x10 [ 208.428698][T11181] ? do_getname+0x191/0x390 [ 208.428715][T11181] acct_on+0xa6/0xa00 [ 208.428728][T11181] ? __pfx_acct_on+0x10/0x10 [ 208.428740][T11181] ? bpf_lsm_capable+0x9/0x10 [ 208.428759][T11181] __ia32_sys_acct+0x80/0x1e0 [ 208.428771][T11181] ? lockdep_hardirqs_on+0x7d/0x110 [ 208.428787][T11181] __do_fast_syscall_32+0x13a/0x8b0 [ 208.428803][T11181] ? lockdep_hardirqs_on+0x7d/0x110 [ 208.428820][T11181] do_fast_syscall_32+0x32/0x70 [ 208.428837][T11181] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 208.428851][T11181] RIP: 0023:0xf6feefec [ 208.428863][T11181] Code: Unable to access opcode bytes at 0xf6feefc2. [ 208.428868][T11181] RSP: 002b:00000000f53bc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000033 [ 208.428879][T11181] RAX: ffffffffffffffda RBX: 0000000080000140 RCX: 0000000000000000 [ 208.428886][T11181] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 208.428892][T11181] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 208.428898][T11181] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 208.428904][T11181] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 208.428918][T11181] [ 208.787445][T11189] netlink: 113 bytes leftover after parsing attributes in process `syz.2.954'. [ 208.822101][T11191] fuse: Bad value for 'fd' [ 209.207337][T11221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.964'. [ 209.303908][T11233] xt_cgroup: no path or classid specified [ 209.307361][T11233] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 209.474041][T11252] netlink: 113 bytes leftover after parsing attributes in process `syz.1.976'. [ 209.521276][T11259] fuse: Bad value for 'fd' [ 209.526074][T11255] fuse: Bad value for 'fd' [ 209.526256][T11258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.624098][T11262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.979'. [ 209.962427][T11282] netlink: Unknown conntrack attr (0) [ 209.963610][T11282] netlink: 'syz.1.985': attribute type 2 has an invalid length. [ 210.051519][T11290] gadgetfs: bound to dummy_udc driver [ 210.110039][T11292] __nla_validate_parse: 1 callbacks suppressed [ 210.110054][T11292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.989'. [ 210.294967][ T8051] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 210.295209][ C1] gadgetfs: connected [ 210.297136][ T8051] gadgetfs: disconnected [ 210.445750][T11327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.995'. [ 210.465107][ C1] gadgetfs: connected [ 210.466756][ T8051] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 210.467004][ T8051] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 210.467023][ T8051] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.469936][ C1] gadgetfs: configuration #1 [ 210.512832][ T5744] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 210.529899][T11343] syzkaller0: entered promiscuous mode [ 210.529913][T11343] syzkaller0: entered allmulticast mode [ 210.534080][T11339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.998'. [ 210.592105][T11353] fuse: Bad value for 'fd' [ 210.836454][T11370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1007'. [ 210.906135][ T25] gadgetfs: suspended from state 3 [ 210.914040][ T25] gadgetfs: disconnected [ 210.921516][ T5730] ================================================================== [ 210.921524][ T5730] BUG: KASAN: slab-use-after-free in __mutex_lock+0x15c5/0x1bd0 [ 210.921545][ T5730] Read of size 8 at addr ffff888025ddd858 by task syz-executor/5730 [ 210.921554][ T5730] [ 210.921559][ T5730] CPU: 2 UID: 0 PID: 5730 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 210.921572][ T5730] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 210.921579][ T5730] Call Trace: [ 210.921582][ T5730] [ 210.921586][ T5730] dump_stack_lvl+0x100/0x190 [ 210.921601][ T5730] print_report+0x13d/0x4b0 [ 210.921617][ T5730] ? __virt_addr_valid+0x239/0x430 [ 210.921633][ T5730] ? __mutex_lock+0x15c5/0x1bd0 [ 210.921648][ T5730] kasan_report+0xdf/0x1c0 [ 210.921663][ T5730] ? __mutex_lock+0x15c5/0x1bd0 [ 210.921680][ T5730] __mutex_lock+0x15c5/0x1bd0 [ 210.921695][ T5730] ? ep_open+0x4c/0x2c0 [ 210.921706][ T5730] ? hook_file_open+0x248/0x8e0 [ 210.921724][ T5730] ? __pfx___mutex_lock+0x10/0x10 [ 210.921742][ T5730] ? __pfx_apparmor_file_open+0x10/0x10 [ 210.921760][ T5730] ? ep_open+0x4c/0x2c0 [ 210.921769][ T5730] ep_open+0x4c/0x2c0 [ 210.921780][ T5730] do_dentry_open+0x6ab/0x14d0 [ 210.921791][ T5730] ? __pfx_ep_open+0x10/0x10 [ 210.921803][ T5730] vfs_open+0x82/0x3f0 [ 210.921817][ T5730] path_openat+0x19fa/0x2440 [ 210.921831][ T5730] ? __pfx_path_openat+0x10/0x10 [ 210.921845][ T5730] do_file_open+0x20e/0x430 [ 210.921858][ T5730] ? __pfx_do_file_open+0x10/0x10 [ 210.921874][ T5730] ? _raw_spin_unlock+0x28/0x50 [ 210.921887][ T5730] ? alloc_fd+0x471/0x7a0 [ 210.921901][ T5730] do_sys_openat2+0x10f/0x1e0 [ 210.921915][ T5730] ? __pfx_do_sys_openat2+0x10/0x10 [ 210.921931][ T5730] ? kasan_quarantine_put+0x104/0x240 [ 210.921944][ T5730] __ia32_compat_sys_openat+0x12d/0x210 [ 210.921959][ T5730] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 210.921978][ T5730] do_int80_emulation+0x166/0x650 [ 210.921995][ T5730] asm_int80_emulation+0x1a/0x20 [ 210.922006][ T5730] RIP: 0023:0xf71975ab [ 210.922014][ T5730] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 210.922024][ T5730] RSP: 002b:00000000fffd9e7c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 210.922041][ T5730] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000fffd9fc0 [ 210.922048][ T5730] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 210.922054][ T5730] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 210.922060][ T5730] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 210.922067][ T5730] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 210.922076][ T5730] [ 210.922080][ T5730] [ 210.922082][ T5730] Allocated by task 11290: [ 210.922088][ T5730] kasan_save_stack+0x30/0x50 [ 210.922099][ T5730] kasan_save_track+0x14/0x30 [ 210.922110][ T5730] __kasan_kmalloc+0xaa/0xb0 [ 210.922121][ T5730] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 210.922136][ T5730] gadgetfs_bind+0x582/0x890 [ 210.922145][ T5730] gadget_bind_driver+0x28c/0xbf0 [ 210.922157][ T5730] really_probe+0x241/0xa60 [ 210.922170][ T5730] __driver_probe_device+0x210/0x460 [ 210.922183][ T5730] driver_probe_device+0x4a/0x140 [ 210.922195][ T5730] __driver_attach+0x21f/0x5b0 [ 210.922208][ T5730] bus_for_each_dev+0x13e/0x1d0 [ 210.922217][ T5730] bus_add_driver+0x305/0x5b0 [ 210.922227][ T5730] driver_register+0x1e2/0x360 [ 210.922241][ T5730] usb_gadget_register_driver_owner+0x132/0x210 [ 210.922254][ T5730] dev_config+0xdce/0x1610 [ 210.922263][ T5730] vfs_write+0x2aa/0x1050 [ 210.922271][ T5730] ksys_write+0x12a/0x250 [ 210.922281][ T5730] __do_fast_syscall_32+0x13a/0x8b0 [ 210.922296][ T5730] do_fast_syscall_32+0x32/0x70 [ 210.922311][ T5730] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 210.922323][ T5730] [ 210.922325][ T5730] Freed by task 25: [ 210.922330][ T5730] kasan_save_stack+0x30/0x50 [ 210.922341][ T5730] kasan_save_track+0x14/0x30 [ 210.922352][ T5730] kasan_save_free_info+0x3b/0x70 [ 210.922367][ T5730] __kasan_slab_free+0x5f/0x80 [ 210.922378][ T5730] kfree+0x22b/0x6d0 [ 210.922392][ T5730] put_ep+0x117/0x150 [ 210.922400][ T5730] destroy_ep_files+0x163/0x420 [ 210.922408][ T5730] gadgetfs_unbind+0x139/0x260 [ 210.922417][ T5730] gadget_unbind_driver+0x20c/0x4f0 [ 210.922430][ T5730] device_remove+0xcb/0x180 [ 210.922441][ T5730] device_release_driver_internal+0x44e/0x620 [ 210.922455][ T5730] driver_detach+0xd8/0x1b0 [ 210.922468][ T5730] bus_remove_driver+0x13b/0x2e0 [ 210.922479][ T5730] driver_unregister+0x76/0xb0 [ 210.922493][ T5730] usb_gadget_unregister_driver+0x49/0x70 [ 210.922505][ T5730] dev_release+0x132/0x1b0 [ 210.922513][ T5730] __fput+0x3ff/0xb50 [ 210.922524][ T5730] delayed_fput+0x72/0x90 [ 210.922536][ T5730] process_one_work+0xac7/0x1b10 [ 210.922548][ T5730] worker_thread+0x5ef/0xe50 [ 210.922559][ T5730] kthread+0x373/0x450 [ 210.922569][ T5730] ret_from_fork+0x730/0xd60 [ 210.922584][ T5730] ret_from_fork_asm+0x1a/0x30 [ 210.922593][ T5730] [ 210.922595][ T5730] The buggy address belongs to the object at ffff888025ddd800 [ 210.922595][ T5730] which belongs to the cache kmalloc-512 of size 512 [ 210.922603][ T5730] The buggy address is located 88 bytes inside of [ 210.922603][ T5730] freed 512-byte region [ffff888025ddd800, ffff888025ddda00) [ 210.922612][ T5730] [ 210.922615][ T5730] The buggy address belongs to the physical page: [ 210.922619][ T5730] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25ddc [ 210.922628][ T5730] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 210.922636][ T5730] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 210.922646][ T5730] page_type: f5(slab) [ 210.922655][ T5730] raw: 00fff00000000040 ffff88801c042c80 dead000000000100 dead000000000122 [ 210.922664][ T5730] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 210.922673][ T5730] head: 00fff00000000040 ffff88801c042c80 dead000000000100 dead000000000122 [ 210.922681][ T5730] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 210.922690][ T5730] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 210.922699][ T5730] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 210.922704][ T5730] page dumped because: kasan: bad access detected [ 210.922709][ T5730] page_owner tracks the page as allocated [ 210.922713][ T5730] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 9591547881 [ 210.922729][ T5730] post_alloc_hook+0xfd/0x120 [ 210.922743][ T5730] get_page_from_freelist+0x110d/0x35d0 [ 210.922752][ T5730] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 210.922762][ T5730] new_slab+0xa9/0x6e0 [ 210.922769][ T5730] refill_objects+0xe3/0x410 [ 210.922778][ T5730] __pcs_replace_empty_main+0x35e/0x650 [ 210.922793][ T5730] __kmalloc_flags_noprof+0x6a9/0x8e0 [ 210.922808][ T5730] do_kmem_cache_create+0x6fc/0x7a0 [ 210.922820][ T5730] __kmem_cache_create_args+0x1e3/0x430 [ 210.922834][ T5730] nf_conncount_modinit+0x48/0xd0 [ 210.922848][ T5730] do_one_initcall+0x11c/0x6f0 [ 210.922863][ T5730] kernel_init_freeable+0x6ea/0x7b0 [ 210.922876][ T5730] kernel_init+0x21/0x1e0 [ 210.922886][ T5730] ret_from_fork+0x730/0xd60 [ 210.922900][ T5730] ret_from_fork_asm+0x1a/0x30 [ 210.922909][ T5730] page last free pid 25 tgid 25 ts 8767158989 stack trace: [ 210.922915][ T5730] free_pages_prepare+0x586/0xe00 [ 210.922929][ T5730] __free_contig_range_common+0x14f/0x250 [ 210.922958][ T5730] free_pages_bulk+0x12a/0x200 [ 210.922967][ T5730] vm_area_free_pages+0xb2/0x2a0 [ 210.922977][ T5730] vfree+0xf7/0x6d0 [ 210.922988][ T5730] delayed_vfree_work+0x56/0x80 [ 210.923000][ T5730] process_one_work+0xac7/0x1b10 [ 210.923012][ T5730] worker_thread+0x5ef/0xe50 [ 210.923023][ T5730] kthread+0x373/0x450 [ 210.923032][ T5730] ret_from_fork+0x730/0xd60 [ 210.923050][ T5730] ret_from_fork_asm+0x1a/0x30 [ 210.923058][ T5730] [ 210.923061][ T5730] Memory state around the buggy address: [ 210.923065][ T5730] ffff888025ddd700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 210.923072][ T5730] ffff888025ddd780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 210.923079][ T5730] >ffff888025ddd800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 210.923084][ T5730] ^ [ 210.923090][ T5730] ffff888025ddd880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 210.923097][ T5730] ffff888025ddd900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 210.923102][ T5730] ================================================================== [ 210.923108][ T5730] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 211.186286][ T5730] CPU: 2 UID: 0 PID: 5730 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 211.189179][ T5730] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 211.192270][ T5730] Call Trace: [ 211.193374][ T5730] [ 211.194333][ T5730] dump_stack_lvl+0x100/0x190 [ 211.196196][ T5730] vpanic+0x553/0x970 [ 211.197457][ T5730] ? __pfx_vpanic+0x10/0x10 [ 211.198935][ T5730] ? __pfx_vprintk_emit+0x10/0x10 [ 211.200549][ T5730] ? __mutex_lock+0x15c5/0x1bd0 [ 211.202079][ T5730] panic+0xd1/0xe0 [ 211.203275][ T5730] ? __pfx_panic+0x10/0x10 [ 211.204684][ T5730] ? end_report.part.0+0x23/0x90 [ 211.206234][ T5730] ? rcu_is_watching+0x13/0xc0 [ 211.207741][ T5730] check_panic_on_warn.cold+0x19/0x34 [ 211.209436][ T5730] end_report.part.0+0x3a/0x90 [ 211.210938][ T5730] kasan_report.cold+0xe/0x18 [ 211.212462][ T5730] ? __mutex_lock+0x15c5/0x1bd0 [ 211.213992][ T5730] __mutex_lock+0x15c5/0x1bd0 [ 211.215490][ T5730] ? ep_open+0x4c/0x2c0 [ 211.216807][ T5730] ? hook_file_open+0x248/0x8e0 [ 211.218373][ T5730] ? __pfx___mutex_lock+0x10/0x10 [ 211.219979][ T5730] ? __pfx_apparmor_file_open+0x10/0x10 [ 211.221713][ T5730] ? ep_open+0x4c/0x2c0 [ 211.223033][ T5730] ep_open+0x4c/0x2c0 [ 211.224303][ T5730] do_dentry_open+0x6ab/0x14d0 [ 211.225831][ T5730] ? __pfx_ep_open+0x10/0x10 [ 211.227336][ T5730] vfs_open+0x82/0x3f0 [ 211.228662][ T5730] path_openat+0x19fa/0x2440 [ 211.230116][ T5730] ? __pfx_path_openat+0x10/0x10 [ 211.231670][ T5730] do_file_open+0x20e/0x430 [ 211.233094][ T5730] ? __pfx_do_file_open+0x10/0x10 [ 211.234673][ T5730] ? _raw_spin_unlock+0x28/0x50 [ 211.236221][ T5730] ? alloc_fd+0x471/0x7a0 [ 211.237590][ T5730] do_sys_openat2+0x10f/0x1e0 [ 211.239253][ T5730] ? __pfx_do_sys_openat2+0x10/0x10 [ 211.240919][ T5730] ? kasan_quarantine_put+0x104/0x240 [ 211.242610][ T5730] __ia32_compat_sys_openat+0x12d/0x210 [ 211.244369][ T5730] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 211.246272][ T5730] do_int80_emulation+0x166/0x650 [ 211.247964][ T5730] asm_int80_emulation+0x1a/0x20 [ 211.249519][ T5730] RIP: 0023:0xf71975ab [ 211.250796][ T5730] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 211.256725][ T5730] RSP: 002b:00000000fffd9e7c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 211.259342][ T5730] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000fffd9fc0 [ 211.261748][ T5730] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 211.264126][ T5730] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 211.266528][ T5730] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 211.268912][ T5730] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 211.271323][ T5730] [ 211.272824][ T5730] Kernel Offset: disabled [ 211.274129][ T5730] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:27:50 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffff88801e6ad470 RCX=ffffc90003f1f834 RDX=ffff88801e6ad474 RSI=ffffffff8e3cb4bf RDI=ffff88801e6ad474 RBP=0000000000000c6b RSP=ffffc90003f1f850 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=ffff88801e6ad470 RIP=ffffffff81e70d2c RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096960000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080c6a000 CR3=000000004d4dd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003800000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000002 RCX=0000000000000000 RDX=ffff88801d38cb00 RSI=ffffffff81feab9e RDI=ffff88801d38cb00 RBP=ffff88802b443b20 RSP=ffffc900006178a0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed1003a71c13 R13=0000000000000003 R14=ffffed1005688765 R15=0000000000000001 RIP=ffffffff81feaba0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096a60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7f455c0 CR3=000000004d6ff000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000054 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85aeb445 RDI=ffffffff9bc571e0 RBP=ffffffff9bc571a0 RSP=ffffc90004b3f000 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000033373554 R12=0000000000000000 R13=0000000000000054 R14=0000000000000000 R15=ffffc90004b3f318 RIP=ffffffff85aeb46f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096b60000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000583be20c CR3=000000004fe96000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000004e0ad5 RBX=ffff88801cbf8000 RCX=ffffffff8bce7185 RDX=0000000000000001 RSI=ffffffff8e3f18bd RDI=ffffffff8c622c80 RBP=ffffed100397f000 RSP=ffffc9000049fe00 R8 =0000000000000001 R9 =ffffed10056a67bd R10=ffff88802b533deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000093fc4 R15=dffffc0000000000 RIP=ffffffff8bce56bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096c60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000032e23ffc CR3=0000000013fb2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000e7e70600 Opmask01=0000000000000fff Opmask02=000000001f3fefff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005578f6352f10 00005578f6352f10 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005578f634b900 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6d401f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6d401f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000ff0000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6d40152c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000007465676461 00006364755f796d 6d75643d454d414e 5f4344555f425355 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000049585a595c 00005e59485f4450 50485900454d414e 5f4344555f425355 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005578f6341430 00005578f6324270 0000000000000021 0000000000000030 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 273a6166703a756b 733a302e30312d35 33712d6370727663 3a3174633a554d45 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a5f393030 322c394843492b35 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 33515f4350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000