last executing test programs: 1m34.943065805s ago: executing program 3 (id=2191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x400c744d, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000fc0)={'syzkaller0\x00', 0xca58c30f81b6079f}) openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x68, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "00172233f60ad0b992422bc1ccddeeff13596dbe548e3414b3da8002d1d36b2c9fcfea65"}}]}]}, 0x68}}, 0x0) 1m34.864497058s ago: executing program 3 (id=2192): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="020a0103070000002cbd7000fddbdf2105001a007f00000100000000000000000000000000ffff2700108aaa56f7369ba8"], 0x38}}, 0x40004) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./cifs\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)='pvfs2\x00', 0x0, &(0x7f0000000500)='source=//127.0.0.1/test,username=root,password=root,port=12345,handletimeout=1\x00') r2 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x8e) write$P9_RLERRORu(r2, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000600), 0x7, 0x82c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x3, &(0x7f0000000700)=ANY=[], &(0x7f0000000740)='GPL\x00', 0x2, 0xba, &(0x7f0000000780)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000880)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000008c0)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000900)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000940)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000009c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000a40), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000a80)=0x2) recvmmsg(r4, &(0x7f0000000ac0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000b00)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1e, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) mount(&(0x7f0000000b80)=@sr0, &(0x7f0000000bc0)='./cgroup\x00', &(0x7f0000000c00)='hpfs\x00', 0x214003, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000c40), 0x121341, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000c80)=0xd) ioctl$TCFLSH(r6, 0x540b, 0x2) sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000d00)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000d40)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000dc0)}, {&(0x7f0000000e00)="e48866b3d16d938bd07b77b25752d2b1a37ecb69ff1ce4030fc9aebf39a38aff183b02f3c1e2e224ea83b138dcc0b29aed39bf6f7a236c6be2e2c1a07e692414f96ec1c9651ccbae9e948daa6ef800b04ca1afe6c086ca44701efdf0f845017b7b3b1b8bd090ddf3f328519821bc06976664d965dfe444128760e9e627772cbaff960cb0ffff4f9b20cabd2c6364053446", 0x91}, {&(0x7f0000000ec0)="ca941da0d5c3ebf6d8d3d3fce137cb99c8c9cc1e0cc1442e546dc11cebff6453a9097878f8f327bd506fb7b5d747d0856a31362aee44989f0da884087439441b3510ebe9473ae97d6fa0fdfd9575e3a244f5a5f62825f61bb56b08f7fac211863fa08b5f8730270bed9ad27cdc5ef5c85769df225a65adf6142691c582a4b48f21aa7280c3d20caade30713125b75191594d4a539bd0f5a86197adb75933bda049661d652c77ed8672a020e15eb7c057a59d", 0xb2}, {&(0x7f0000000f80)="5a0bd11fa215dda8304d16860967c55ad84e337cdaef87bca6d7586e643e42131682205ba928292c8446ce90ecddf69b2dcb07a635ea0d243d65c95074986ee33838b05085be843b120f87f283196a996062a521a11d5a606167bc83c0a413146e6e", 0x62}, {&(0x7f0000001000)="7e3e3696b9d346b6d9a8d6aa68cb5cdea0394180889e73e603f7c04182b93ca7deb4dc73eef13c7ccf97434c8d4f04e7f6d18877ce8a929f", 0x38}, {0x0}, {&(0x7f0000001040)}, {0x0}], 0x8, &(0x7f0000001080)=ANY=[], 0x168}}], 0x2, 0x20008000) 1m33.979321846s ago: executing program 3 (id=2202): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x8ad01, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025641d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000140)=@gcm_128={{0x304}, "65bd3b676fec0750", "db895fc09c80bfbccb24cb32e613da94", "856386e8", "2084c18bed76662b"}, 0x28) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc01c5868, &(0x7f00000002c0)={r0, &(0x7f00000001c0)='/dev/comedi3\x00', 0x401, &(0x7f0000000200)={@_ha_fsid={[0x0, 0x6]}, {0x5, 0x3, 0x8000}}, 0xf, 0x0, 0x0}) bind$tipc(r3, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./security\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./security\x00', &(0x7f0000000500)='securityfs\x00', 0x800, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./security/tomoyo/domain_policy\x00', 0x0, 0x0) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000580)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000005c0)='.\x00', &(0x7f0000000600), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r5) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000ac0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000f00)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000225bd7000fcdbdf252b00000008000300", @ANYRES32=r9, @ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x4004044}, 0xc4) sendmsg$NFT_BATCH(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000f00)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x2400c810}, 0x24000840) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x7c, 0x24, 0x605, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x800}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x7d}, @TCA_CAKE_TARGET={0x8, 0x8, 0xd39c}, @TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x101}, @TCA_CAKE_MPU={0x8, 0xe, 0x22}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_ATM={0x8}, @TCA_CAKE_ACK_FILTER={0x8}]}}]}, 0x7c}}, 0x10000094) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000006c0)={'veth0_to_team\x00', 0x0}) (async) r14 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r14, 0x4b72, &(0x7f0000000440)={0x0, 0x1, 0x5, 0x10, 0x200, &(0x7f0000000b00)="000000000000000000000000000000000000000000000000000000000000000400"}) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, 0x0, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x28}}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x800, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r13, {0xfff1}, {0xf, 0xf}, {0x3, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x28004004}, 0x90) 1m33.840356506s ago: executing program 3 (id=2203): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0x8000) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtfilter={0x68, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x3c, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth1_to_bond\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x68}}, 0x24040084) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300), 0x40, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000380)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x200) r3 = accept4$inet6(r0, &(0x7f00000006c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000700)=0x1c, 0x40800) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000740)='hsr0\x00', 0x10) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x280402, 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0) write(r4, &(0x7f0000000100)='alps', 0x4) 1m33.794989377s ago: executing program 3 (id=2204): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x7, &(0x7f0000000000)) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000008cc0)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000008d00)=0x1, 0x4) bind$inet6(r0, &(0x7f0000008d40)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f0000008d80)={0xa, 0x4e22, 0x0, @remote}, 0x1c) shutdown(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000009080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x18, 0xffd}}}}}}}, 0x0) 1m33.612439713s ago: executing program 3 (id=2208): r0 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x1, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000300)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000340)='fd', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) fchdir(r5) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r6) open$dir(&(0x7f0000000400)='./file0\x00', 0x0, 0x81) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000040)=""/54) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043ef50d"], 0xf8) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000100)={0x0, 0xfef8, &(0x7f0000000140)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="fc0000007600190c00000000000000d3d82c7fc091c20033000d80"], 0xfc}], 0x1, 0x0, 0x0, 0x8000040}, 0x4040) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000001c0)=0x2) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000200)=0x3) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x4008000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYBLOB="8b5d65ee98697f1dd9a3df3fa4f0c1083e3c66000000c06cd92288d2e97bf14b5292845781794dae560dbc491681cfacec449928faacad3cd3aa394d2eb67aceacbf855974081662efd3c2ba6b0a5bd2425e92961a0e2a1f15c31e13a19d8b11f6", @ANYRES16=0x0, @ANYBLOB="6ba425bd7000fbdbdf2501000000050004000100000006001a004e230000050021000100000008001800ac1414bb06000300070000000500220000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000240)="001122334455babbccddeeff8100df350806", 0x12, 0x20000010, &(0x7f0000000280)={0x11, 0x300, r1, 0x0}, 0x14) 1m33.456723563s ago: executing program 32 (id=2208): r0 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x1, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000300)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000340)='fd', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) fchdir(r5) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r6) open$dir(&(0x7f0000000400)='./file0\x00', 0x0, 0x81) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000040)=""/54) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043ef50d"], 0xf8) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000100)={0x0, 0xfef8, &(0x7f0000000140)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="fc0000007600190c00000000000000d3d82c7fc091c20033000d80"], 0xfc}], 0x1, 0x0, 0x0, 0x8000040}, 0x4040) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000001c0)=0x2) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000200)=0x3) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x4008000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYBLOB="8b5d65ee98697f1dd9a3df3fa4f0c1083e3c66000000c06cd92288d2e97bf14b5292845781794dae560dbc491681cfacec449928faacad3cd3aa394d2eb67aceacbf855974081662efd3c2ba6b0a5bd2425e92961a0e2a1f15c31e13a19d8b11f6", @ANYRES16=0x0, @ANYBLOB="6ba425bd7000fbdbdf2501000000050004000100000006001a004e230000050021000100000008001800ac1414bb06000300070000000500220000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000240)="001122334455babbccddeeff8100df350806", 0x12, 0x20000010, &(0x7f0000000280)={0x11, 0x300, r1, 0x0}, 0x14) 5.453560968s ago: executing program 0 (id=2717): io_uring_setup(0x6613, 0x0) modify_ldt$write2(0x11, &(0x7f0000000080)={0x1d30, 0x0, 0x4000, 0x1}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x10, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x74, r2, 0x1, 0x70bd27, 0x0, {}, [@WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x6, @loopback, 0x4b}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.274317105s ago: executing program 0 (id=2720): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1bb) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000004c0)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0x80000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@clone={0x0, 0x418, 0x0, 0x80, 'clone\x00', {@rnull={'/dev/syzrnull', 0x0}, 0x20, @rnull={'/dev/syzrnull', 0x0}, 0x20, @ram_num={'1:', 0x1}, 0x20, '8', ' 0 2 hydration_threshold 4'}}]}) r1 = syz_open_dev$dri(&(0x7f0000000c00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000c40)={0x0, &(0x7f0000000c80)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x3, 0x581400) ioctl$USBDEVFS_SUBMITURB(r3, 0x802c550a, &(0x7f0000000180)=@urb_type_control={0x2, {0x9, 0x1}, 0x4, 0x2, &(0x7f0000000040)={0x80, 0x9, 0x366}, 0x8, 0x2, 0x8, 0x0, 0x1, 0x8, &(0x7f0000000100)="66cd257d1493010c9a5004b02ff28a7f9e2635e6bb9a3be819610a2370f39b86df68946746b3b388572685aa896a6b31f55c8cc6ae0ff25d18ae641d1cfaaa2eb74cb777cc103db6b2f6c2195e7a05843af344bfb70e6bc945810ed6328f33b2b84a7da4a3993bd67d51ed34a895ecf9f966"}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r2, 0x0}) mkdir(&(0x7f0000000680)='./ms\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./ms\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0) r5 = open(&(0x7f0000000740)='./ms/fs/ocfs2/cluster_stack\x00', 0x1, 0x0) write(r5, &(0x7f0000000780)="997b", 0x2) r6 = openat$binderfs_log(0xffffff9c, &(0x7f00000001c0)='./binderfs/binder_logs/stats\x00', 0x0, 0x0) close_range(r3, r1, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x20, 0x1411, 0x1, 0x70bd2d, 0x20000, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x20}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000d40)={r4, 0x2, 0x3, 0x0, &(0x7f0000000d80)}) 5.166812016s ago: executing program 0 (id=2722): r0 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000080)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000240), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_RECEIVE(r4, 0xc0386106, &(0x7f0000000280)={0x2, 0xd024, 0x3, 0x5, 0x6, 0x4, "8ab5ca07577578576e16fa621f61809d", 0x3, 0x8, 0x5, 0x6, 0x2, 0x1, 0x1}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xd) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x3) socket$inet(0x2, 0x6, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x7) r5 = socket(0x1e, 0x805, 0x0) connect$tipc(r5, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x1, 0xa}, 0x4}}, 0x10) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x1e) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x6) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000200)) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000540)={0x6, "2a706672c53752888bd93143d15222879ee2f962f9b454852d8869179f724e890df60abf6d845a6fcd0077ae7a5309aa352ae62457edd9038681fc7484636258", {0x8000000000000000, 0xb}}) 4.504213367s ago: executing program 2 (id=2727): r0 = socket(0x1e, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) inotify_init() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000440)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) connect$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r2 = syz_usb_connect(0x0, 0x371, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = syz_ublk_setup_io_uring(0x7501, &(0x7f0000000480)={0x0, 0xba29, 0x2, 0x2, 0x29c}, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) r4 = syz_ublk_setup_io_uring(0x1e, &(0x7f00000005c0)={0x0, 0x1be7, 0x8, 0x2, 0xac, 0x0, r3}, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000700)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000780)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f00000007c0)) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000800)={0x0, 0x1209000, 0x800}, 0x20) syz_usb_connect(0x3, 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007050102000200070581020002000705"], 0x0) r8 = socket(0x8, 0x5, 0x5) setsockopt$inet_mreqsrc(r8, 0x0, 0x66, &(0x7f0000002b40)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102}, 0xc) 3.564489713s ago: executing program 1 (id=2732): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x24040) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x8}, @ptr]}, {0x0, [0x2e, 0x5f, 0x61, 0x61, 0x0, 0x30, 0xc8110402d49b9cdc, 0x30]}}, 0x0, 0x3a}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="87"], &(0x7f0000000340)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)=[{0x0, 0x2, 0x8, 0x6}], 0x10, 0x10001}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r1, 0x40104d07, &(0x7f0000000400)) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800b5168225652314736cbd2400f64c48a3c88dd864a85224be78b627307e2becf3f76fd418d17f3a4c8a9bd064264a83f11f484496b63d85b5a68791ea51e8f10092c30031daebd8ef700fa47d4e4c7028c6c75ba8f686852f196b07b8db51f77cfb3cb8e1ee42c043f372ae5e8d518a0bf730e27f4d44217727dca557127d9e0864f84714d3c1855b119971ce667011705ae13b775e64a4c52c114489b079f2062a1fe3dee854c1893096ae8ce75b7f", @ANYRES16=0x0, @ANYBLOB="040128bd7000fcdbdf25690000000600d400010000000500d200000000000a000600ffffffffffff00000500d30000000000"], 0x38}}, 0x80) openat$btrfs_control(0xffffff9c, &(0x7f0000000400), 0x20000, 0x0) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}}, 0x800) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 3.563536387s ago: executing program 1 (id=2734): r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}}) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x300, 0x1, 0x1, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffe]}) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x14b102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000001c0), 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000240), 0x0) close(r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000700)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e973, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x600) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') socket(0x10, 0x3, 0x0) pipe(0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_ublk_setup_io_uring(0x735d, &(0x7f0000000500)={0x0, 0x8eb4, 0x1000, 0x3, 0xa1}, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) 3.380579997s ago: executing program 4 (id=2735): r0 = socket(0x28, 0x1, 0x0) connect$packet(r0, &(0x7f0000000340)={0x28, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) openat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xd, 0x4, &(0x7f0000000700)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xd4}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000000740)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000880)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x40000000, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x2, 0x18, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x9, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}]}, 0xa0}}, 0x52) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000000780)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msync(&(0x7f0000303000/0x4000)=nil, 0x4000, 0x4) r3 = fsopen(&(0x7f0000000480)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000980)='\x00@\xf1f\x9e#l \xa8\xfe\xbb\x18F\b\r\xc0(\xcff|2\x81\xba\xfeA\xa4!\xcb\xaa[\xbbn\t\x0e\xfd)\x974T\xfc\xba\x82P\x11\xd9\x97\xa1\xe7\x9b\x9e\xacq\x99\xe4\xe5EH\x84xn\x88\x88^6d\x90\xd3R\xb7\xbc\xd7\x94\x82\xd2\x14\x18T\xce}:\xc6t\xff\xed!_-\xcd\xa5\t\xc2\xeb\xc8\x1cA\xb4tW\r\x9c\xec\t$\xa5\xf4\"g>\xb8\xf3\xab\x12\x8a\xc4\xa1 \xf5\xe2\x18\xd4m\xe3\x92\x89E\x7f #,\x8dzk\x13\xd0\x17\xc0\xbdC\xfd\xd6\xf2v\xd6B\xab\x01\xc0(w2\xdaf3\xff\x8ei\xfehj\x9f\xac\x9f\xf5\x1c{\x8f\x1ei\xc9\x03\t5\xd238\xbe\x85\xe6XD\x04\x8fq\xca\xbaO\x16\x92\x18\xcd\xf5;i\xb0\xb4mtT\xcc\xaf\xb6?T\xc9\xb1\xb1>\xd2\xa0W\xcfN\xdb\xedK\xa9\x1b1r\x00\x00\x00\x004\xa0\xcb)\x0ej|l\xd0\xb4\b]\xe2\xc1\xe2\x18\x06O\x1f\x1e\x1d\xb5+\f\x7fs.A\xd7\"9&\xb1\xf6\xba\xd5\xbf6\xaf\xfb\xad\xdb5\xbd>\xb8\x17\xc2\x95^\xbe\x9c<\xfc\v\xfe\x8b\xd62v\x97\x8aW\xef0\v\xd3\x9b\x80\xdfk\xde\x9c\xfd_^\x0e\xefN\x14o', &(0x7f0000000ac0)='\x00', 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x804) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r5 = socket(0x15, 0x5, 0x0) setsockopt$inet_pktinfo(r5, 0x0, 0x8, 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 3.161778197s ago: executing program 2 (id=2736): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x1001001}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010006000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca5b500028003a0000000000000100100200001267"], 0x0) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca4f400038e00000000000000001001002000012670000000001001002010010"], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f0000000080)={@val, @val={0x0, 0x4, 0x0, 0x3, 0xc, 0x3}, @ipv6=@esp={0x5, 0x6, "0691c2", 0xe, 0x32, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], {0x4d3, 0x5, @basic={0x0, 0x0, 0xfffa}}}}}, 0x44) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='usbip-vudc.0', 0xc) write(r3, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000440)={0x28, 0x5, r4, 0x0, &(0x7f0000343000/0x1000)=nil, 0x1000, 0x81}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000840)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, &(0x7f0000000880)='syzkaller\x00', 0x5}, 0x94) 2.390819657s ago: executing program 1 (id=2737): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') r1 = socket(0x10, 0x3, 0x0) userfaultfd(0x801) syz_emit_vhci(&(0x7f0000002180)=ANY=[@ANYBLOB="040ec3ca1c0c"], 0x7) syz_ublk_setup_queues(r0, 0x0, 0x0, &(0x7f00000027c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5d33, 0x5369d1105eae876e, 0x2, 0x6, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbc44, 0x0, 0x0, 0x1bd, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfe54, 0x20, 0x0, 0x349, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x565d, 0x8, 0x1, 0x32, 0x0, r0}, 0xffffffffffffffff}], 0x4, &(0x7f0000003a40)={0x2e, 0x43d6790fe0263eb1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, '\x00', {0x0, 0x5a1, 0x0, &(0x7f0000002a40)=@buf_max_buf="17838b9399e5cec38c4c128faef4017b2755580f7fe5e69decf6eb4cd0a699be696c08b48cfddc5d5c92f999dac85d3d865e89aa3e331c9509c410e4b35f70dbea14193aa0a5a6068bb511da9d09194584fb2d10357fdbd31d9f8609a6441745a152c504e05c8876ca5faf61b8ed2cfd934803990458e87f23c7718c828424d890af05d334151f859d9ec265ad7891f0f128ebc55c442f002c9da00fc4af2a25e7f7d134434c08e13ed3cbecb49541fd6aa2d8ff98e4f7761d57182a105e41ed54a4856590ebdfd5668bf78aeaeecf99bb13a6e13dac014886f8de5d0f22e988ab038ca1e7d6148b282bb76fb762f7a02f5f7c80ce14f051283f8060e5792674eea1bbc2afa528c280613d68081cd752483ffc131c9fd2dea6a2f570990a7b92d35a780ae85f471d2efe615c6cb69e88ffc5960aeaa463a07df9f9b2c92aa1dceb8a65fabaab23f13c6b694cbbb91a558682d5a01c88c5b87089ce7291933b9b1535816fe5002d0105e4e88a317facb2d2244533321d55dd4d8f0994a879fa494f58633c492825fbeef67ab81c4404980f5e0de8ae9ac02890cee6caff981f2c7c9a9089dbb941abe943df1f009071f31d775aed1c532669caa73d039a5e5b6b6828b616e3a87e298192eeaa02cdfe7ae29f149674cfb14fa046e811c8564b906ebf5de309009ffac0ddfe13b63037f34ad478250a28fd550a49380cb4e8cd3bbde077fcd1331fd5d274ae7b9bddba890801e118234df2a5e18634d27801ccfcf89c12565a3b41e430f93b1357ccb52a8756d065d16d6e57781d45c47f7bac496eaffc6c9c6e9d3a50ab6c05d03c742d642450c9f9087f0f08ba241d35289632d911166e86eb4c510582187c66920f62f06d450054cb9d1af7f030b831cb3e161edad9d1300e7ab16f4628e35c06b780a7d902a17065bd2ec0feda2d188d20eeac2998ad8e54a14bdea2a983d419dda327aaaac509b68d5e4a6f4d866317d61345e27c3a49a5caf1c97a08f6f0c75beeb36bc2ba6ecc27a1f0f21e712e27a58e2ae77248ac94554eed62ab958959473db95a84b9283900cc9861edc2c2e1551feb1b09bb72130a3b29d536eda2f5e638de96e010e0c9aa3d2ceb9ebfd9dccb0e2e8e66710302225831d9111ec0489b88109e7e50035b83c7dc0f564a364055612e13f8b73ce5f99783308dfd27771cdba9ea30ca808dc0c57ad00c517ef7b063ce1fe6006e22ca007145232c390c7bdf71d625330e59caf3f4faf3b286e125e2bc69782e5f9ce8cc18594c9d6ecf533edbb5e5c37693aff8ab68f9f10dfee2a20b0dd3bc4d9457fa992a4b95e633e2a67181cab536530d11d5ac153a170fb4f3d9a9198fc637b7924332fa7e0610caa8378b15ae589f821780d20eb16fea10ab4616a80be393c816976aab3bb532c0b5ec37d020e36cbde61dd42cab2ea886c4d749e4607369e4ea107780ed5334d473964609250f987cd5e266d8d14cfd614f6194acc4b85ef22bcf1b96a18dd857adad4224db41b452c29f1aead9750cd80a476d818750a25644a5da220d7b6d349f36a63903df393b03e1bb3d41e5f5b3dabc20e702fda062933a294ca72e3980b864af380a4e61c7ac86a5189c2e0609737b842c7f6e4f3dfaec300e4a7f3c0bac398cce499bcef361ea5e1ecc181b18c1eed721823213ce00a3176dca2e822b46c65cd7cdc5cca35fb5bd4781be7d65bcb888f050a182a51294ee287bcc2671a5601ea96e5b6351af8274eb2b494426e883105d45bdd250f15ea9b56bb7266bb88449b81971a1c188157298c3c8d6216cdf85e45f7585b89b89c65801c40b4bae6e820fed1701c82f5a5dfde4052a471a55128052cad9894550eb5cc998a7eb15ba234f1a90e0ffe31eee8cc4c9326682951f8bd06f960340254baf7333bd499165cc27a9c1516feea5929de5eed08c20bb3f61ab16ea7564d918a9df37cc2d91709c31c8cca7dd8f7ed8e92584fa47ae46cb213b0d70baf88697c4d8e4ca8e1911f9d42fdaf117190a437b448ad49d39c032440b2f94667692785b464335f7c1ac1ea2a20ff2d948d0b068ecc1dfe5fa66ad5c46ef90cc15a5d9ea818e395cd692ddbbffaa6b759a0d88a0ae5cf1092e0ed94c090a44306908cf115afa9c83029e68d3d3d96ccbfb5a589bc26a99c976c6580505adc89b5ab260087ef6ab7d93eea93b1bb382978d479e006f1079fe24578811d524cf930b6254dc03f4cfd27ea56bc0d8f14cf10a185e9cccb4a953322b632e32ad58f7974dc92942f789e853b966406e3c2c7d201452f6de1bb98120db492d9b12a53b7f652680f119c3432366c465714493bf58cab2e9f5dc991b8e261c61ea26bed3acab147a76fedca7f5f16ba662f05f335a1270713ae5bdd4d687928125d23035bdf42d50f6b2be74d4e0f93523446a984732cfb9413bf60fb4e29321a042728514711d58972541974aaa9eb7aba7b73d53babd75198797acd85bbf5c2a4fe86661ca1bd220eb689e43bbdd23e8d7fea51ac8279b2a75135e71d9bfeb06e7a76c6e12c822c94496e08fd39d25cad251285118fae2c6fb5b67351bdffadc9d58952b7c6f19cd96821e5f4301f66d39757e167f4e8025481bb8568f02b17dab423e50b3cdca53f21f62d87be47ca0d36fe10c0ae68df11918f6c7d99ec5b5f3f5c707e76c53bbea6768f0a2ea36449cdad495dc630a851b60dd9935e7172f4bced80f43277b829dc8aed6b17536f1ca26a2f29a38d943a9645e3c157c3b15f9f49f58a5c2e4a4f82e4f39a2af3c4277411edb4f92123fc63fde2f1342a54b0ebace7160dcaef10d68877f51145bed481f0203ed5a43dc916df0de15cbdac51b62b0c3eb7f965ae315b1bed130ee371b670270a545605df589a25e75ffe8527d3d753792236dde5f6cd50a907c61fbf8c0ef3d1e7bb5e3a82a90463d30e3155b9e66cd2a037b70005832fa12d7dea44812f2a2b41d1e76bf9fb02d398f0a01b169df87e590a87ac2cc1d56bf63d58aea763e98a84e9034edbb96283080ea2a686fca936d1264849c96ace47014b978388a820ea5e7dc6334e88cc078b4c05b1330e637eab967ff54eedf8305f6bf087c3cd8f16ee0f32f2cf1fad939e0a8e44ac2bef0bcc47ad0cc91b818a355ea77427614b4ab9ba1005e794e2a83cf4a4fe8b3c08401cf832c020a6245f479b3e9dfcd1299234ad28b8a28f6ae9bb2fe82ac1bcbad1867d141b93963e149bb2dca244fbcc3345cba7b17b8ec39515355c0685124f69ef53b121b695d8257aa232dbc1585a8064c64a8d56e20b89db11ca36d7dd5615a7713db2540743ae5f5db8bcc98f1218ba01c0307ac308dba6f012d8cae74bdbe863d09df5de26c0a5c78e1005684a8ae81bb1d8e203ef716aa69bd3156e55161ca18d5cacd4b69c6564bbc7c90c0e28d4fd960df04cbc8c36bf157d1cdb6ff7ebfb472e65248cfc16f21f9d1914765856adfb01a0d446e86b6746b4bbb8d8cbe3934e64f8ec976beb6807c532bcec8d649b593e9c25991b6680ade6c0a7efc21fe568b68c76af115ba14e62abd499de80c559e8de0a4972c0ba8feb7b7dd56c19ecc6f5438ffa823d2a3c9a94e0e66e5f2aa7aa51776785d85d126bec4a861861801b2a967f28ee88d96cd02872c7388b0350251fa9971c4fcf631e78a86e584b53e72115dee71ccf99f64c27081c2bb9d53a548161f8905bfbaf7ed7c5bdda121faff18b96a02bda8a61d948e1f1a021ee3329381bb586bf3aef51f758e16cb1b601a89642bce7377a5617d219404cd16aec1ff5b148999a96ba75be25eebe609bfd9b812ffde9fa2103a6ac4706a1c9d3673129780815fcb71d263b1192df62de5a17c386403d25c415ee28a5435db4e6d21a2e5b7f9f6a8e1e9ec1dbe3cdb3bcd522a96a7caa670e14269ef1924e3fd628b74f487e2a6d515271710f433564f0baa8c6c63a98eec14253b90a84c37b4cef8604f123888ccb6ed8b673eca2a60c3770b5e2f19cd48fc139dd37953fd2719602cf892755e32dc7e80c20b2e430bdd370db3408dea78e6d5fffa24a9305641c89b070b8a23ca7b4b808e1d9a298dde0cdeacf86944338adf46aa3f8f395b9d12b705f2bb5613690f6eb985bd103e30ff9cf00413028e216a0aa41d956330c43589aa1cc880901b13df5382ee7be0f1d4017395fa7e7435383f4d04e98b020cc785e99fb94ea1d09ce9df812ef159a715d1f5038bded7ad7129e759c7aeb14b74c2ba2f7aae3b1972b5c7dbb500f32438efee4f7d5042645d7aad004c8cb49bad56f65e6b3598c7b21020ee97e4986f48debcc34852c7cfe7b95e757a9e350026b7d1dbea6002575fe0c91c67856b9b1d8729c5d0ef094909185a301514e0f4ac3a64efe681d827691d1bcf9a5154b2812796eaa72f7219063bca60f43a98a96a17b14b6c9992779e8ddd51e548fcc696019ab02f5cc69325998ef5038cd4078424542455ee165a48a4ef0cc5a83b0e4779aa93da49ece06b969a2c0e6e454182fa3661c80ff9c008f5908aa24ba1a2d593771be9c21ff4de8361153e8bcf853aea21fd9bb9396b23b59b2aa50b86022580f0eb5d62f5be652b08f9844dd48c3a978c4d6e7e8ccccce7b8fe25e30ecbd5d8ed89a3f2549d979349cca8ccafb423930477e927bce9bf40d898e6564c8d54bf56d5fd0d45d23277818b0b341a0c82df5e3e2214c39a3398d28b6ba784d77c5e1bd5ae46a1613aea34fff8b6f38d3e033e23bc79d1f23527d7960b50e1321e42e12e9656631a91593640b397b4df2675af79907d459a311730fdb744464236d77b5bd958adb8b32e362a889a17f526e514d339fb13b41f8cd85820644f4c12e2546ef19eeb2af71c1d4309edc19b3a400b1ff20d266b612ea2c970194b7c4f363ac44b41f6cebf03193abbf88d6a3edd9e023eb43e6a746da1fb3ecb69dc64e6e28a42cf4418b2cdf52b6301a898ba2a73ac4171cc042c1eb1c609c37dd4292a9b9f50fd9ff7d671044e6255a743557ff5b609330d677dea16384789bd83b69729fff65e5cf4290c44c123e96213133d5f0f239edee2bb11f8af7c64db30dd77e3e91cf9c135c41bf29a391df3f89a378e9583ea5f131702c5eaffebda2c7d2c52bb73ffdd2e6ce2272423c0ec8f8815a04d642e1e152bb248ce244c07fcbde339f8cc584c2d538f8caa9ced446df907b265bbdcb00d987c4b9eaff335347c50abe5c242441dcc79bded6c0058fc8677d23aefcac6554713ecb8955d9f43c3d12ab34f65272da72b8f960408c3b5940181a75ddeb9945c9c54fe83b7be236cd88dcd5f054863040362a48813d2ed00b90b387858298dbda2dabbd49e0fef1264be4df62e51389ac74bbf344e0500ce5f8c64af49bda8ec67fca79a03f87cd6cd9ade792828eceadeff54c3170ff86ed794c5b92fc97faac436eacdaaec87940429bd72195d430ec40a7dfd51f116c76ac55168a9c68e1c7d1a177d48e8c8d188c03288d787f6a760ce6eb6aea0fec081a43be32fe99d6f457a0e7a6f4e404edfea9e5ba901508cac3d53033e5989dc1b215b0c90f280c5251bf85220c4c1cc15dc61ac5c3deaf7cd7b4454a3807338bb73675e94357a44a410c93e4e33773f68a6689052e457ae7e539f4f493dc5b8724bbb3095ff5844d72946da4b4bfa8c105c5bff0a976cc392c7dd989aade50880abc7c972ba67efdc5b8209d85fe5d05427fdd7638221a9dae5e3a8953a4a301e84b05b1c99b3673d90bbd980cb54360923d8a5a5187dac06a1b7a0276e365a75cfd992"}}, &(0x7f0000003ac0)) mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x200001e, 0x80010, r2, 0x0) sendmsg$nl_generic(r1, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002140)=ANY=[@ANYBLOB="200000001600410a"], 0x20}}, 0x8000) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002240)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000002340)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000024c0)={'erspan0\x00', &(0x7f0000003d00)={'syztnl1\x00', 0x0, 0x40, 0x40, 0xffff, 0x80000001, {{0x4c, 0x4, 0x0, 0x5, 0x130, 0x68, 0x4, 0x7, 0x4, 0x0, @private=0xa010100, @broadcast, {[@timestamp_addr={0x44, 0x24, 0x25, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x1b}, 0x93}, {@multicast2, 0xc}, {@remote, 0x6}, {@private=0xa010102, 0x8}]}, @cipso={0x86, 0x2e, 0x3, [{0x0, 0x12, "d8b40c54ac585c6e25aa4836bfe8aae1"}, {0x0, 0xb, "7689284e28642a42c9"}, {0x5, 0xb, "f76edaac8f4ee171ea"}]}, @lsrr={0x83, 0x13, 0x8c, [@remote, @multicast2, @local, @private=0xa010101]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0x20, [@multicast2, @remote, @rand_addr=0x64010101, @private=0xa010100, @empty, @multicast2]}, @cipso={0x86, 0x23, 0x4, [{0x1, 0xb, "36e524f96c713bb1a1"}, {0x6, 0x6, "e16d42c2"}, {0x7, 0xc, "017e59dc60a168cde1c4"}]}, @ssrr={0x89, 0x1b, 0x94, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0x29}, @dev={0xac, 0x14, 0x14, 0x26}, @loopback]}, @cipso={0x86, 0x4a, 0x0, [{0x1, 0x11, "40a165f1fec6f84eb57f53ce1e98db"}, {0x6, 0xf, "17eaf24c1bef751188c4050f46"}, {0x2, 0xc, '\x00'/10}, {0x7, 0x3, '\''}, {0x6, 0x4, "7f65"}, {0x6, 0x11, "6206f61341f252508f7d37180ed885"}]}, @lsrr={0x83, 0xf, 0xb7, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @noop]}}}}}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000025c0), 0x169140, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000002600)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000002640)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x80000100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x8, 0x8, 0x4, 0x0, 0x8000], 0x8080000, 0x3c5200}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000002700)=[@text16={0x10, 0x0}], 0x1, 0x57, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000002580)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x28, r5, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x44010) 2.370036516s ago: executing program 0 (id=2738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x48, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0xfffffffffffffe1c, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000080)={0x0, 0xffffffffffffffc5, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x810) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000280)=0x5, 0x4) mremap(&(0x7f0000ff5000/0x4000)=nil, 0x7fffdf008002, 0x7fffdf008000, 0x0, &(0x7f0000ffc000/0x2000)=nil) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='mounts\x00') sendfile(r4, r5, 0x0, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r7) getsockname$packet(r7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x44) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0x58, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x5}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x58}}, 0x0) sendto$packet(r6, &(0x7f0000000680)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f00000006c0)={0x11, 0x86dd, r8, 0x1, 0x4, 0x6, @local}, 0x14) fcntl$dupfd(r6, 0x0, r0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'dvmrp1\x00', 0x1}) ioctl$TUNSETOFFLOAD(r10, 0x400454d0, 0xa930bb9f3fd061f5) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc40) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000000b06011000000040000000000679d53a2d779cab0fea39384a446e10b4fd533aabdcfe801800148014000240fc0000000d00000000000000000000011800018014000240fe6d02d2db00000f00000000000000360950931f5fbfcac1c96b18f9642b88c22a2d89311290b79f054a84c5949bb33b9369505fc7ef7c802cf1bc1fe814bdbddd", @ANYRES64=r1], 0x5c}}, 0x4800) 2.367986146s ago: executing program 4 (id=2739): listen(0xffffffffffffffff, 0x20) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0x4, &(0x7f0000000300)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x6}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40080c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x80800}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000340)={0x1, 0x3b, "057d1f627ba13da75d804aefb142fc0b0d32c009cfb8802c0fdd43a47ed2635e12f57bb7f876a79e876c623b0803248659ac91b09f39580d5bdd3a"}, &(0x7f00000003c0)=0x43) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) msgget$private(0x0, 0x1) syz_io_uring_setup(0x34b8, 0x0, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000180)) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000800)="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", 0x2000, &(0x7f00000050c0)={&(0x7f0000002800)={0x50, 0xffffffffffffffda, 0x5, {0x7, 0x2d, 0xfffffff9, 0x200, 0x80, 0x100, 0x1, 0xe, 0x0, 0x0, 0x4, 0x71}}, &(0x7f0000002880)={0x18, 0x0, 0x8000000000000000, {0x8}}, &(0x7f00000028c0)={0x18, 0xfffffffffffffffe, 0x2, {0x2}}, &(0x7f0000002900)={0x18, 0x0, 0x8001, {0xfffffffb}}, &(0x7f0000002940)={0x18, 0x0, 0xb3c7, {0xe}}, &(0x7f00000049c0)={0x28, 0x0, 0xdaa, {{0x5, 0x35c0000000000000}}}, &(0x7f0000004a00)={0x60, 0x0, 0x1, {{0x6, 0x3, 0x0, 0x7, 0x2, 0x0, 0x10}}}, 0x0, &(0x7f0000004ac0)={0x13, 0x0, 0x8, {'-.\x00'}}, &(0x7f0000004b00)={0x20, 0x0, 0xffffffffffffffff, {0x0, 0x8}}, &(0x7f0000004b40)={0x78, 0x0, 0x3, {0x2, 0x9, 0x0, {0x2, 0x2, 0x7ff, 0x4, 0x4, 0xbc1, 0x4, 0x8, 0x8cfa, 0x4000, 0x5, 0x0, 0xee00, 0x1, 0x8}}}, &(0x7f0000004c40)={0x90, 0x0, 0x10, {0x0, 0x2, 0xf, 0x6, 0xbaea, 0x870e, {0x2, 0x6, 0x5, 0x6, 0x59d, 0x101, 0x7, 0x6, 0x450, 0x8000, 0x1, 0x0, 0x0, 0x1, 0x8}}}, &(0x7f0000004d00)={0x58, 0x0, 0xe27, [{0x2, 0x1, 0x1, 0x29c, '('}, {0x2, 0xbf9, 0xb, 0x8, '/dev/i2c-#\x00'}]}, &(0x7f0000009340)={0x330, 0x0, 0x0, [{{0x2, 0x2, 0x6, 0x3, 0x1, 0xffffff85, {0x6, 0xecc1, 0x3c000000000000, 0x6, 0x1, 0x88f4, 0x7, 0xffffffff, 0x4, 0x4000, 0x6, 0xee01, 0x0, 0x1, 0x1}}, {0x6, 0x400, 0x3, 0x2, 'bbr'}}, {{0x0, 0x3, 0x1, 0x0, 0xffffffff, 0x7ff, {0x0, 0x2, 0xfffffffffffffffd, 0x9, 0x6, 0x24, 0x2, 0xffffff00, 0x9, 0xc000, 0x0, 0xee00, 0x0, 0xfffffffc, 0x6}}, {0x2, 0x400, 0x3, 0x1, 'bbr'}}, {{0x2, 0x0, 0x3, 0x8, 0xfff, 0x6, {0x4, 0x800, 0x9, 0x8, 0x200, 0x6, 0x7fff, 0x100, 0x3, 0x4000, 0x7d3, 0x0, 0x0, 0x2}}, {0x1, 0xeef3, 0x3, 0x7, 'bbr'}}, {{0x5, 0x2, 0x4, 0x8, 0x0, 0xfffffe00, {0x1, 0x7b3c, 0x9, 0x9, 0x3, 0xa, 0x3, 0x40000000, 0x100, 0x4000, 0x73579e01, 0x0, 0xee01, 0x2, 0x4a5}}, {0x2, 0x7fffffffffffffff, 0x0, 0x5}}, {{0x2, 0x0, 0x6, 0x2, 0x1, 0x1, {0x0, 0x2, 0xd, 0x5, 0xb, 0xd, 0xe, 0x3987ecf5, 0x0, 0x4000, 0x1, 0x0, 0x0, 0x7f, 0x4}}, {0x2, 0x390, 0xb, 0x7fff, '/dev/i2c-#\x00'}}]}, 0x0, &(0x7f0000004f40)={0x20, 0x0, 0x1e57, {0x8000, 0x0, 0x2, 0x10001}}, &(0x7f0000004f80)={0x130, 0x0, 0x3366, {0x401, 0x5, 0x0, '\x00', {0x10000, 0x0, 0xc3f7, 0xc99f, 0x0, 0x0, 0x4000, '\x00', 0x3767, 0x80, 0xd801, 0x8, {0xa, 0x1ff}, {0x5, 0x3}, {0xfffffffffffffffc, 0x8}, {0x5, 0x1}, 0x0, 0x3d, 0x6, 0xc30000}}}}) openat$cdrom(0xffffff9c, 0x0, 0x301180, 0x0) 2.224112905s ago: executing program 2 (id=2740): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) io_setup(0x3ff, &(0x7f0000000200)) sendmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) write(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000580)=[{&(0x7f00000005c0)='|', 0x1}], 0x1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000640), 0xffffff98) splice(r1, 0x0, r3, 0x0, 0x80000000, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000680)={0x123, 0x0, 0x0, 0x0, 0x4}, 0x30, 0x0) landlock_restrict_self(r4, 0x9) mount(0x0, 0x0, &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000280)=0x1000000) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000300)="94", 0xf000}, {0x0}], 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000340), 0x28041, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[], 0x2c}}, 0x0) syz_io_uring_setup(0xefe, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x3a7}, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) 2.144395833s ago: executing program 0 (id=2741): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) openat$uinput(0xffffffffffffff9c, &(0x7f00000009c0), 0x802, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000a00)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a40)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000a80), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000ac0), 0x2, 0x141102) writev(r1, &(0x7f0000000b00)=[{&(0x7f0000000b40)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000000b80), 0x88302, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000bc0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./trace\x00', &(0x7f0000000c40)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./trace/current_tracer\x00', 0x1, 0x0) write(r2, &(0x7f0000000cc0)='blk', 0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f0000000d00)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000000d40)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) close(r1) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@ip_ttl={{0x10, 0x110}}], 0x10}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) shutdown(r4, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000001480)={0x0, 0x0, "922b40d92698706c3f201d2039a86f4fdd33d1523954586c3296fd1d1d68592ccebc1b908a8770a1118def6bf08451fff7f074a79775ad6fd32d934f0eb8be344062451bf7312d7b63b52332035d8a7c737787db36d3c2fcf4ed233a7e278502466837ccaa1dda27772cb67dc198a6cbf406670eaac497c2a2161191b829b9dd1561bd7af580db4eb1c4457bde15a2f097fd89ab488baac6082fbe5b421030d0665903c91da8b731191aabf8a47854e437ca65beea920a15c61c27e0625aa14e1478b8691c20662a48d06350729fc98e40cbc955239f22b3c7b11678ffacb849669b02da44c4c15b62fa07cfc7255df609c591a1a5d6eeb8f2e5401c124b9d1d", "fef2e4516dbaee0eddd3d20df31ab370f83acbf4d9612dd6e1e684ce440bf0881f896d6af3bf180fb818ce8a1a8fa23699013630a5cdcb7212b781364919a91f74f95693f9d27138de0c759bf7104da5572693c785dc5bef83f583ce8458e2697cc0f58a85a5516ba9f0205ed6c5b236e84c875903f563994da3f464a86aa63b54f61fc99a5ff22240c2bc546a0200e95aaad9a67391626088e9bbff0ffac81d0877b22c7c7f82638915131ddfca3c8ef29b8b587d81f0f30139fcb5a83322dcc09a34b39da371b7048cd4748827eaa24caf7c9cbbe46d4a9c2c412a0ae775be222bda5a75ef48d31bd849b54ca099f60f9cac652c2690e5bcbd585326a66226d27afa35eb30a1a10409821cd1245816cc0cdf1cf85f05de062ea04ba9491e939a6ac8868f0914a847695fee2608d98b7ddece1bfdb08cfd75e4b045abe129896f593c3a7ee2ea71bafc810c714459295fffc0418034b4f7b3c8350c2d225127ccef97ff07a5f97c292c64d3acb82a34a3d01861bd1ba36e89124a4d2c93e142c06fbd296b91e4ce89d1f4f45c98df4dd3c9a48f9dc8f24230f980f094cd481ce08bd7540928b49563e67438728682a454db3aaf206aa3bce1b09a1663480109390f76b2cfaa386eb599dfc7aaae9a31868531f656b4b5026f2d45b289e9e46598cd8bca4e7f2ae828b1cf32c108702106add6a063a5ada3162c08191ba6a36314b854dd7f46d1888934113c8af00c201165850ffb085881035eaad03049dcc133ed730964c8c25651a5f72e8c741373b73a8c7c4e40208da7f422a855c10bb4cf41a0297df8b75bc59b42a64f7073cb2f4648f42d64230783069a9fe32b93571c44512dfb6f4291ca85d62926e193496298e47161347bdb62adfaa9df9c4049bd103b0c20d52a5b87589c64dccfca7a44f6a062f73604f6860b073e0e06b75347295c9d610f01d04ea6947801e173a04273535c316418388ae7b4f89055f0fe644966bf5471d64cad020e71db167eea56c0697aa733438512aafe883250e9ee27a64fcc5549d7f6c52b81b0b58ad33f0f7173fe5bb1dfb2d2e3b1de2c8a257999b9da5220e50937b82949e8e3583496fe9f10d25f703ad3c286e9b96faccdcdba451823b36dbf5c0ed8d232f71bec2971af8a2eeed1135e8392cf01150233369f9194026b97143b65f0a96e49efb71a517ba7cc4f0edd73181eee694db1974545297b3425ce06271005236bc33b425f64fb60498c014e48c06bd17f7244752db32b1f747a76ddc345c29c20b2b927be288c2b38bcadd3a040379d474506583ad480311f45e2a8bef307187882672f1753076bddd21606b49983b2c29b52093f8fd9735a022be04165efbb60b1ba8993cf7dab23dbf8df605ff7503b05bd593f5914ead40b8c02cd57079e5b21119ebdb7cc35ec95488b08ef461c167dfda6b3cbe6c67d2710474398461b2465ae2e7955d368fabdc3a2eae8533fad31e5626da67551e07c97dff06da24d94680ade5452ec3b6fd768702e8a538a5c1cdc8085f6fc79d8ad18b93b1052c5910a86243ae47531f8a7193a2a686e0ac515ec52cbd3a5592613219667a7295a795959d1a8aaca39773c7d500986bad653b59ffd754cd704c4124f589feeb7995ef486b82c6740a86eb49a0384b7676af2e2bd6df7ffc8b5a9307308993b82deecb8b8d187801d755e8369e92cc58da6fba415be4b5ba435674c14a8d13a70acd9a42e9c6bd7744ad58f7e0643ef60989afdf10447a30a8acbf9055367b8fb5b2d0acf389d36fa77e20a0f8388d95f45ac61d865e5e7146a97fb9619d9ae83bf1ef7f09de8271e43f7e23f49d12a4d3fac7955ad93c3bb93bd6b93104fedf6c51bc3b0d0b92e0feff913c01df19b6b2a7fe451f806faa2b991b8af5e355a0c033fe6ef1c8ff76afbd58a8dca8c1fc131f11b2fffbdf3bec852deb050f354b257ee1e4983516be377b8964df459ed91e3ca2626278bedc3eeece4fcda5ee259edce6fa2c96e24d705f39625aedc32beb9ae6027bc57bdfc421405c9d6697561d5b4e19ad8bf72a69405b80ee720b72aeb2b9d4ffe17b1fb519a2d8a90fa31e8f86a37e6752246bbedc2689a5d683c0bf01f1e195c4f96f7e8c54b6c424b058c814a5324af2cd4cf434679cda6939e5543a13362090c1e6719bcc4b2ce7690f1d7c81491f0b9ed52f13cae024bb35d61465a70002f2dc29b784523c381aec1e5aef06703e87d116edf6eb64bf46f463d32cad81cef29cd19e3fb86168e74f83ac74b91820fafd2308e4eda44b74d7c7722813d8ca3e776bee722e5d1d063d23be696a04aa954915cb98515809b3847935f88d480b729c6bcc3f450753e62fb3a254bd4047b79782833c654552b64b26cb50aabf028bf6b9eafb30b5061be2ff74fc3358462a1cdeff5ea2d3ff33fd78026eba13466ab64cccda8274e758e4a12a345856ff7a9e1ea738e187e9317b5083cae09345cc2fa4b800011c13a4b20d669e4a6d745c4903f659d5f4ff1fab3707e6308c11caff4897973ba8166e2167c42fb5a04ea892994c69d25aede930337ed7cded2dc4b5d22b93e5057d385230a3bea890c6c07a20d7007c42a06700f5a80abe16b4a8c879b3ad9740ab2ac6ba26b3c9910ba262444fbed0b099e67d33ee72924f667f6c43cc78ae5f31e65d13b951a71db75cb05b9b6ca612fa3fab111e85fec4ede6d10241a251926cf892f0caf2338a439e638b6b6d7b46e67dacd26ba099dcd0a751c31baeb75b38a8571b6ac9cfac7801f2a66733a40d6dc808060e96bf33442555f9541d39b7e3348f12f6e44342485d18edc8463f61ca862202dddca6cacfae56cd0d6578af2dd7570a2d6ab50d2a38099003e1625bf9d6c0ada84ca0c632f03c0d2536a6636b8665b892460fde0808f55898f3182a2a21d0c02a8df4b581c9b857b2ff327b6a9107cfca1246353f523064be522d9aec01090132a5a03e65c03fe8ad2bc7406760cfd90a5d3d091971e5ccae2b3a61b9d5102af449e9fa31dd98e3d01c0a0da7f2f59ab06fbba14b05448b678768d31a77bc71796061ba10838677effd98de2de64e05f014f62d5cbefdbef93d0700d9516c761d7874028ce07ff1bb23ced43e35f1495714b8cac7ddda5ab8094302c0107fd9437ea299daef6dd1288590b113aaebc66f68ab69d89d3b2181a575337b77adc51b742c5ec4d4c8d51d0d5d9347ea39d4579b2cee726720e9f962bacb5578fe226ac819c78920f1e49b34a66867ecc63599eba4e6e04fcf2b6bd80aa5a7590e68174c594638be55b2331b680f730ec30b0472d4f4301fd86f8094771bace5e18b8aaab58bf16f06e874bf6e313f9e1e6faf8d03149aaec426328320b6500297c7bf4ad95ec418ca8d63e9d340dfdb4ce44aa9ea3892d476e54da276f7f6e82664628e5cd96600d7701f4c9cd61b6cb8603011f1387a9ab45d885c3039453edbf600ae3baad61538a16c907da23ba01b9329e7198fb4ef24cfa09be468baab69efbbe9642f4a341196d3565874e92d24292aea8c59f69b4b094dcea88af0cebc0a4c5e3d8940a99f8cd3d337d23c0e7878b75f0e7fed2850244288544410e4bc9574f167fd95c42a4c88b0bde373bc8458fc3a6481d98bc759283f4214307fe2d4cc592ee91c46491348958ffdda267bf55c5a9ea19341ac2e08627d2285a511a0d7ab4da49286ecd5d5094394e303e01ee64fa7efc40aff0ad9d71b6818003bb6bc40433604c6bbf95ce8f68c4cb5cb2a1dbf28e167b97153707c03fd72a09b67624f6f7bf25b2c29d4801de188fea7e076a8b39c3ba66595c23ce778e7147dfb05d05056f8aa7351894f9ca79a0507d6434da7552cbbe1e6cc96f227875bcb0fdd13d14b6d5dc304dbbaa98c5bb0362a5f678abf249ebf792e3c3962fc959ead899ca49ced7d132af6d69cd6613ec4bc1f428b8a483e5898b9eae41133a87485f13b518b506d1a1b58116c827a122e13ba3dcc3fcb602ed245cbb37e03f385d7c79ec44f71376cefeeb8f055bf2c36424d67b2f7865767dac8bdd90b6587fb877988b953765c26c93b5605c50ccf79793bf489b00bc370e6488fd4991de1365ae700173110b5ff9a3f804f7354ee35d5a251372385c3f217c1578e9de54b2dd26676f561afcd7ba47ee88b86fc35abafea47339f8bdacabcce4b9bcac77a8a228b3c34b4fb329eda55307e2716f5741d7808e4eb05ccd0b5e4aa05fcba21dcc7211cac7b6de74945d09fe7c202d43005b9c74c742fd43310a742a290647214a8a8ac40f0b00c0edec5cb1244dfa4f5cecf8ac51f3791ca9b87371fd2153d24d55a4aed519f70dfc529379d2fb14f3bae7d1acb167a852ccab73c7a173de3f1e9fd2e5d0663dd06f238ae40ac9b281ca0b253f8baeabc40aabe9733e1147b2682a07af0f39125d43bae00800519de00a2d677f8968bd68079519f9a16a9c954fe7aa3e22f84360ff996f6734845924a22855b81e0bcd81f17c971947fe337b2f23ec14a4369cee73aad514568c451307a3cf51898b34beb7416ec1b112c1de6834b27ebd62678b09fc601e08ecea7897072331bf8bffa3d78b160a8862752ac306dcb4ee9b1b1c62daedb3642a2854bea7649fe0434df4ac9c1d48d5a729e3ba24519334edf5c0e0790c5242b9f0c629b416c388c972591d10bad43f9594d9ffb9f1fe1cdc9aaf353eb23eea9e72d13781301a01a1d8157ac5c2b6f147b7c5f18b24e6628644d89f87550b8c5c7740e415177dd81a52356253e62114d3239d5a64d56f0e637fde747814b6da52fd92735c53bf53921f9ce9e169211b3bd9e6401de38035903a5f1e88abe221438d7dd1f2c36e3ad8fb31845c55a64773bcb6a11c159ab032829c7fdc0b9c7539c298a0069e1b8c09ad199aff8766cbaf0cfd8b9f2e6489ee4ea1516da1cb127d0a5872277d4d7f799975ef92f9aaafe700502707089742cbeaf847cf900d3fd645d384e8194eec4bda3d987852d791b9dd057b2617babadc1a073c9a24d6b89902e4e15f988b8cf299a08dc433c8ffb96193efdc7861133bf260fe70189d45aeedd5b080483fae78a9a60e7fde110a8dbb3e43484bf8d0e0156c7384c43fd61f8bb8208effeb2860c975e314b17f12d47ec1cb6ed92689d8da3f21bf040a6e0e2380895310276288802896e7e912d82d254ae8180b28d94aa01bee7d5a3c1d302e93cd11c994e7dde2060a91504d55ff82ac1da3d894d478a86a540e415f70faf587c2c65ca1485bf68c4769504aaebdeb2ac3a7b5ae559f67f1d47a0888b7698f162bf21eb8cd465755366b674336ae125a3f1c659f46c3da990f5ef92e2e090ba3797cc026a3104cdb75dfe9d80c735275f671fdbd8589394ee86e8ca964d6cde4a94a78a045ee9ad2"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000002480)={0x0, r5, "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", "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"}) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00022abd7000ffdbdf250400882a1b815a47c91e00000300000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10000814) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}]}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f00000003c0)=@assoc_value={r8, 0x1bc}, 0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.55510245s ago: executing program 1 (id=2742): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001840), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001880)={'syzkaller0\x00', 0x2}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001900)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20004890) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001b40)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000001b80), 0x56) sendmsg$kcm(r3, &(0x7f0000001bc0)={&(0x7f0000001c00)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001cc0)="27030200e61114000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.473801997s ago: executing program 1 (id=2743): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x109842, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000080)=0x38800000, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x400000000000159, 0x40840) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$btrfs_control(0xffffff9c, 0x0, 0x108400, 0x0) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0xe000, 0x4, &(0x7f0000ff1000/0xe000)=nil) getsockname$packet(r3, 0x0, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2) bind$l2tp6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x20) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="0643381c90c95f0c932b639be58f07d71c53dfa482d502947b05d647b336402235c36606b1d6c3e926a7af5b2df0f933a69e6ca643839462b4d85238dea8d80df89a21476f5ebed60ef0c4bd12d1eed6efe136a127314b2b8b218ce4f92784b5a4ac17c04bd12cc2c372e4a2f603528a9860e256063943e0a0f26e62c5b039458eda605e553f45ecb12b55ee67e6aced27f89c57c4373203425d4fdb1c301a9a2dc223c59ce03fd9f691574319b062b38cb651b9ea9ca044f9d8a8aaaefc6df744bbf687aa60cdcb856373f066b0089fff95baf57400dca6014d79c02b912a", @ANYRES16=r5, @ANYBLOB="010528bf7000fcdbdf251200000018000180140002006272696467655f736c6176655f30000008000700080000000800090010000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004814) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000780)={0x28, r5, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmmsg$inet6(r1, &(0x7f0000000840)=[{{&(0x7f0000000880)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f0000000900), 0x10106, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c0000000406010800000000000000060a0000050500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) 1.274139741s ago: executing program 0 (id=2744): r0 = socket(0x1e, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) inotify_init() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000440)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) connect$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r2 = syz_usb_connect(0x0, 0x371, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = syz_ublk_setup_io_uring(0x7501, &(0x7f0000000480)={0x0, 0xba29, 0x2, 0x2, 0x29c}, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) r4 = syz_ublk_setup_io_uring(0x1e, &(0x7f00000005c0)={0x0, 0x1be7, 0x8, 0x2, 0xac, 0x0, r3}, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000700)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000780)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f00000007c0)) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000800)={0x0, 0x1209000, 0x800}, 0x20) syz_usb_connect(0x3, 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007050102000200070581020002000705"], 0x0) r8 = socket(0x8, 0x5, 0x5) setsockopt$inet_mreqsrc(r8, 0x0, 0x66, &(0x7f0000002b40)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102}, 0xc) 1.246099885s ago: executing program 4 (id=2745): openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x8382, 0x0) socket(0xa, 0x3, 0x3a) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000030601040000000000000000ec0000050500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 1.17919817s ago: executing program 2 (id=2746): mount(&(0x7f0000000080)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000140)='ext4\x00', 0x8000, 0x0) (fail_nth: 6) 1.044264523s ago: executing program 2 (id=2747): r0 = socket(0x28, 0x1, 0x0) connect$packet(r0, &(0x7f0000000340)={0x28, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) openat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xd, 0x4, &(0x7f0000000700)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xd4}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000000740)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000880)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x40000000, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x2, 0x18, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x9, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}]}, 0xa0}}, 0x52) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000000780)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msync(&(0x7f0000303000/0x4000)=nil, 0x4000, 0x4) r3 = fsopen(&(0x7f0000000480)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000980)='\x00@\xf1f\x9e#l \xa8\xfe\xbb\x18F\b\r\xc0(\xcff|2\x81\xba\xfeA\xa4!\xcb\xaa[\xbbn\t\x0e\xfd)\x974T\xfc\xba\x82P\x11\xd9\x97\xa1\xe7\x9b\x9e\xacq\x99\xe4\xe5EH\x84xn\x88\x88^6d\x90\xd3R\xb7\xbc\xd7\x94\x82\xd2\x14\x18T\xce}:\xc6t\xff\xed!_-\xcd\xa5\t\xc2\xeb\xc8\x1cA\xb4tW\r\x9c\xec\t$\xa5\xf4\"g>\xb8\xf3\xab\x12\x8a\xc4\xa1 \xf5\xe2\x18\xd4m\xe3\x92\x89E\x7f #,\x8dzk\x13\xd0\x17\xc0\xbdC\xfd\xd6\xf2v\xd6B\xab\x01\xc0(w2\xdaf3\xff\x8ei\xfehj\x9f\xac\x9f\xf5\x1c{\x8f\x1ei\xc9\x03\t5\xd238\xbe\x85\xe6XD\x04\x8fq\xca\xbaO\x16\x92\x18\xcd\xf5;i\xb0\xb4mtT\xcc\xaf\xb6?T\xc9\xb1\xb1>\xd2\xa0W\xcfN\xdb\xedK\xa9\x1b1r\x00\x00\x00\x004\xa0\xcb)\x0ej|l\xd0\xb4\b]\xe2\xc1\xe2\x18\x06O\x1f\x1e\x1d\xb5+\f\x7fs.A\xd7\"9&\xb1\xf6\xba\xd5\xbf6\xaf\xfb\xad\xdb5\xbd>\xb8\x17\xc2\x95^\xbe\x9c<\xfc\v\xfe\x8b\xd62v\x97\x8aW\xef0\v\xd3\x9b\x80\xdfk\xde\x9c\xfd_^\x0e\xefN\x14o', &(0x7f0000000ac0)='\x00', 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x804) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r5 = socket(0x15, 0x5, 0x0) setsockopt$inet_pktinfo(r5, 0x0, 0x8, 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 892.721594ms ago: executing program 4 (id=2748): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) openat$tun(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f00000003c0)='autofs\x00', 0x0) timer_create(0x0, &(0x7f0000000400)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000480)=0x0) open(&(0x7f00000004c0)='./file0\x00', 0x305001, 0x8) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000500)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000540)={0x4, 0x7, 0x40, {0x762, 0x8}, 0x8000, 0xffff}) r4 = openat$vimc2(0xffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000600)={0x4, 0xa, 0x100, "ad196bf5e77b3d62a6dc91c39df431c465483c5635fb946791d6f862959be5d9", 0x47425247}) timer_settime(r3, 0x1, &(0x7f0000000640)={{}, {0x0, 0x989680}}, 0x0) remap_file_pages(&(0x7f00001e7000/0x4000)=nil, 0x4000, 0x8, 0x10000, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000680)='\x00', &(0x7f00000006c0)='\x00', 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000700)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000740)=0x2, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000780), 0x4) bind$inet(r5, &(0x7f00000007c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f0000000d00)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$key(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={0x0}}, 0x0) recvmmsg(r5, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000e00)='fd', 0x0, r1) write$tun(r1, &(0x7f0000000e40)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x2) 683.262075ms ago: executing program 4 (id=2749): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x1001001}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010006000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca5b500028003a0000000000000100100200001267"], 0x0) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca4f400038e0000000000000000100100200001267000000000100100201001001"], 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f0000000080)={@val, @val={0x0, 0x4, 0x0, 0x3, 0xc, 0x3}, @ipv6=@esp={0x5, 0x6, "0691c2", 0xe, 0x32, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], {0x4d3, 0x5, @basic={0x0, 0x0, 0xfffa}}}}}, 0x44) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='usbip-vudc.0', 0xc) write(r3, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000440)={0x28, 0x5, r4, 0x0, &(0x7f0000343000/0x1000)=nil, 0x1000, 0x81}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000840)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, &(0x7f0000000880)='syzkaller\x00', 0x5}, 0x94) 675.446457ms ago: executing program 4 (id=2750): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x109842, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000080)=0x38800000, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x400000000000159, 0x40840) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$btrfs_control(0xffffff9c, 0x0, 0x108400, 0x0) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0xe000, 0x4, &(0x7f0000ff1000/0xe000)=nil) getsockname$packet(r3, 0x0, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2) bind$l2tp6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x20) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xb, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x60880, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="0643381c90c95f0c932b639be58f07d71c53dfa482d502947b05d647b336402235c36606b1d6c3e926a7af5b2df0f933a69e6ca643839462b4d85238dea8d80df89a21476f5ebed60ef0c4bd12d1eed6efe136a127314b2b8b218ce4f92784b5a4ac17c04bd12cc2c372e4a2f603528a9860e256063943e0a0f26e62c5b039458eda605e553f45ecb12b55ee67e6aced27f89c57c4373203425d4fdb1c301a9a2dc223c59ce03fd9f691574319b062b38cb651b9ea9ca044f9d8a8aaaefc6df744bbf687aa60cdcb856373f066b0089fff95baf57400dca6014d79c02b912a", @ANYRES16=r5, @ANYBLOB="010528bf7000fcdbdf251200000018000180140002006272696467655f736c6176655f30000008000700080000000800090010000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004814) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000780)={0x28, r5, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmmsg$inet6(r1, &(0x7f0000000840)=[{{&(0x7f0000000880)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f0000000900), 0x10106, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c0000000406010800000000000000060a0000050500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) 218.726845ms ago: executing program 1 (id=2751): mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0) ioctl$SET_ARRAY_INFO(r0, 0x40480923, 0x0) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000300)={0x0, {0x1, 0x0}, 0x0, 0x6}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc001) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000340)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r0, 0x400c0930, 0x0) 0s ago: executing program 2 (id=2752): close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_open_dev$usbmon(&(0x7f0000000340), 0x2, 0x0) ppoll(&(0x7f00000003c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0) write(r5, &(0x7f0000000440)='1', 0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffffff6b000000"], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') kernel console output (not intermixed with test programs): ___sys_sendmsg+0xa99/0xc30 [ 331.948651][T13573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.948663][T13573] ? __pfx_____sys_sendmsg+0x10/0x10 [ 331.948684][T13573] ___sys_sendmsg+0x190/0x1e0 [ 331.948700][T13573] ? __pfx____sys_sendmsg+0x10/0x10 [ 331.948722][T13573] ? find_held_lock+0x2b/0x80 [ 331.948744][T13573] __sys_sendmsg+0x160/0x210 [ 331.948755][T13573] ? __pfx___sys_sendmsg+0x10/0x10 [ 331.948774][T13573] __do_fast_syscall_32+0x14b/0x8c0 [ 331.948790][T13573] ? lockdep_hardirqs_on+0x7d/0x110 [ 331.948807][T13573] do_fast_syscall_32+0x32/0x70 [ 331.948824][T13573] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 331.948839][T13573] RIP: 0023:0xf7f47fbc [ 331.948848][T13573] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 331.948859][T13573] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 331.948871][T13573] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080006040 [ 331.948878][T13573] RDX: 0000000000040010 RSI: 0000000000000000 RDI: 0000000000000000 [ 331.948885][T13573] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 331.948892][T13573] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 331.948898][T13573] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 331.948913][T13573] [ 331.980276][T13576] tipc: Enabling of bearer rejected, already enabled [ 332.027596][ T5880] bridge_slave_1: left allmulticast mode [ 332.027620][ T5880] bridge_slave_1: left promiscuous mode [ 332.027842][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.031271][ T5880] bridge_slave_0: left allmulticast mode [ 332.031292][ T5880] bridge_slave_0: left promiscuous mode [ 332.031463][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.051384][ T5880] dvmrp6: left allmulticast mode [ 332.255099][ T5150] Bluetooth: hci2: command tx timeout [ 332.390876][T13594] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 332.444422][ T5880] bond1 (unregistering): Released all slaves [ 332.450402][ T5880] bond2 (unregistering): Released all slaves [ 332.455884][ T5880] bond3 (unregistering): Released all slaves [ 332.461780][ T5880] bond0 (unregistering): Released all slaves [ 332.490952][T13599] tipc: Enabling of bearer rejected, already enabled [ 332.506506][ T5880] tipc: Disabling bearer [ 332.509184][ T5880] tipc: Left network mode [ 332.789570][ T5801] Bluetooth: hci3: unexpected event for opcode 0x0c1c [ 332.815755][ T5503] 8021q: adding VLAN 0 to HW filter on device eth5 [ 333.031305][T13627] tipc: Started in network mode [ 333.031325][T13627] tipc: Node identity 1001001, cluster identity 4711 [ 333.031335][T13627] tipc: Node number set to 16781313 [ 333.032350][T13627] tipc: Enabled bearer , priority 0 [ 333.145662][T13532] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 333.150616][T13532] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 333.151294][T13532] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 333.158844][T13532] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 333.160167][T13532] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 333.164638][T13532] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 333.171706][T13532] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 333.215445][ T5801] Bluetooth: hci4: command tx timeout [ 333.224917][T13532] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 333.607617][ T5880] hsr_slave_0: left promiscuous mode [ 333.608612][ T5880] hsr_slave_1: left promiscuous mode [ 333.609351][ T5880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.609404][ T5880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.612895][ T5880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.612913][ T5880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.662454][ T5880] veth1_macvtap: left promiscuous mode [ 333.662499][ T5880] veth0_macvtap: left promiscuous mode [ 333.662629][ T5880] veth0_vlan: left promiscuous mode [ 334.072810][ T5880] team0 (unregistering): Port device team_slave_1 removed [ 334.073172][ T5865] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 334.100428][ T5880] team0 (unregistering): Port device team_slave_0 removed [ 334.233200][ T5865] usb 6-1: Using ep0 maxpacket: 32 [ 334.233957][ T5865] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 334.235689][ T5865] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 334.235711][ T5865] usb 6-1: config 0 has no interface number 0 [ 334.239345][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.239366][ T5865] usb 6-1: Product: syz [ 334.239378][ T5865] usb 6-1: Manufacturer: syz [ 334.239392][ T5865] usb 6-1: SerialNumber: syz [ 334.249141][ T5865] usb 6-1: config 0 descriptor?? [ 334.252772][ T5865] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 334.252794][ T5865] usb 6-1: selecting invalid altsetting 1 [ 334.252807][ T5865] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 334.262717][ T5865] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 334.262955][ T5865] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 334.262991][ T5865] usb 6-1: media controller created [ 334.265396][T13532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.290509][ T5865] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 334.310793][T13532] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.316573][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.316657][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.329650][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.329734][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.335420][ T5801] Bluetooth: hci2: command tx timeout [ 334.437281][T13532] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.672533][T13663] e1000e 0000:00:02.0 eth1: removed PHC [ 335.174302][T13674] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2392'. [ 335.236945][ T5801] Bluetooth: hci0: Malformed Event: 0x2f [ 335.303160][ T5801] Bluetooth: hci4: command tx timeout [ 335.373515][ T5865] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 335.373634][ T5865] zl10353_read_register: readreg error (reg=127, ret==-110) [ 336.413176][ T5801] Bluetooth: hci2: command tx timeout [ 338.117177][T13663] e1000e 0000:00:02.0 eth1: Hardware Error [ 338.493183][ T5801] Bluetooth: hci2: command tx timeout [ 341.051330][T13663] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 341.091784][ T5880] IPVS: stop unused estimator thread 0... [ 341.177601][T13682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2393'. [ 341.266727][ T5865] usb 6-1: USB disconnect, device number 27 [ 341.348533][T13532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.406826][T13532] veth0_vlan: entered promiscuous mode [ 341.415466][T13532] veth1_vlan: entered promiscuous mode [ 341.471402][T13703] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 341.486881][T13532] veth0_macvtap: entered promiscuous mode [ 341.489622][T13532] veth1_macvtap: entered promiscuous mode [ 341.501331][T13532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.512747][T13532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.543740][T12507] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.593481][ T7672] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.593522][ T7672] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.593554][ T7672] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.674538][ T6581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.674553][ T6581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.700782][ T6581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.700795][ T6581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.878301][T13728] netlink: 'syz.2.2366': attribute type 10 has an invalid length. [ 341.881963][T13728] batman_adv: batadv0: Adding interface: vlan0 [ 341.881979][T13728] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.882006][T13728] batman_adv: batadv0: Interface activated: vlan0 [ 342.169140][T13731] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 342.195641][T13731] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 342.195786][T13731] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 342.195963][T13731] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 342.196389][T13731] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 342.201759][T13731] pci 0000:00:01.0: Adding to iommu group 1 [ 342.207646][T13731] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 342.207658][T13731] pci 0000:00:01.0: vgaarb: bridge control possible [ 342.207666][T13731] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 342.208921][T13731] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 342.214443][T13731] pci 0000:00:02.0: BAR 0 [mem 0xe2be0000-0xe2bfffff] [ 342.214511][T13731] pci 0000:00:02.0: BAR 1 [mem 0x81060000-0x8107ffff] [ 342.214581][T13731] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f] [ 342.214635][T13731] pci 0000:00:02.0: BAR 3 [mem 0x81080000-0x81083fff] [ 342.214819][T13731] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 342.215108][T13731] pci 0000:00:02.0: enabling Extended Tags [ 342.271974][T13731] pci 0000:00:02.0: Adding to iommu group 2 [ 342.326678][T13731] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 342.326905][T13731] pci 0000:00:02.0: ROM [mem 0x81000000-0x8103ffff pref]: assigned [ 342.326928][T13731] pci 0000:00:02.0: BAR 0 [mem 0x81040000-0x8105ffff]: assigned [ 342.330938][T13731] pci 0000:00:02.0: BAR 1 [mem 0x81060000-0x8107ffff]: assigned [ 342.331060][T13731] pci 0000:00:02.0: BAR 3 [mem 0x81080000-0x81083fff]: assigned [ 342.331160][T13731] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 342.331273][T13731] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 342.332797][T13731] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 342.391114][T13731] [drm] Found bochs VGA, ID 0xb0c5. [ 342.391126][T13731] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 342.431241][T13731] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 342.765948][T13731] Console: switching to colour frame buffer device 160x50 [ 342.815497][T13731] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 342.938952][ T5150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 342.941516][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 342.942525][ T5150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 342.952413][ T5150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 342.958000][ T5150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 343.145309][ T9937] tipc: Disabling bearer [ 343.207101][T13731] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 343.338166][T13731] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 343.351802][T12507] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.448377][T13753] rxe_eth0 speed is unknown, defaulting to 1000 [ 343.518056][T12507] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.610668][T13731] e1000e 0000:00:02.0 eth1: (PCI Express:2.5GT/s:Width x1) 52:54:00:12:34:56 [ 343.610699][T13731] e1000e 0000:00:02.0 eth1: Intel(R) PRO/1000 Network Connection [ 343.610929][T13731] e1000e 0000:00:02.0 eth1: MAC: 3, PHY: 8, PBA No: 000000-000 [ 343.649867][T12507] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.687261][T13753] virt_wifi0 speed is unknown, defaulting to 1000 [ 343.764954][T12507] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.813370][ T9] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 343.848108][T13778] fuse: Unknown parameter 'rwotmode' [ 343.977155][ T9] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 343.980234][ T9] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 343.980260][ T9] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 343.980271][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 343.982513][ T9] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 343.982525][ T9] usb 7-1: Product: syz [ 343.982533][ T9] usb 7-1: Manufacturer: syz [ 343.982541][ T9] usb 7-1: SerialNumber: syz [ 343.994311][ T9] usb 7-1: config 0 descriptor?? [ 344.008976][ T9] hub 7-1:0.0: bad descriptor, ignoring hub [ 344.008991][ T9] hub 7-1:0.0: probe with driver hub failed with error -5 [ 344.018121][ T9] usb 7-1: selecting invalid altsetting 0 [ 344.223190][ T5503] 8021q: adding VLAN 0 to HW filter on device eth1 [ 344.325791][T12507] dvmrp0: left allmulticast mode [ 344.556708][T13753] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.556837][T13753] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.556957][T13753] bridge_slave_0: entered allmulticast mode [ 344.558406][T13753] bridge_slave_0: entered promiscuous mode [ 344.564097][T13753] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.564217][T13753] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.564315][T13753] bridge_slave_1: entered allmulticast mode [ 344.566927][T13753] bridge_slave_1: entered promiscuous mode [ 344.580562][ T6009] usb 7-1: USB disconnect, device number 32 [ 344.700829][ T5901] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 344.707932][T13753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.708023][T12507] tipc: Disabling bearer [ 344.708170][T12507] tipc: Left network mode [ 344.725473][T13753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.760805][T12507] IPVS: stopping master sync thread 6823 ... [ 344.797928][T13753] team0: Port device team_slave_0 added [ 344.800276][T13753] team0: Port device team_slave_1 added [ 344.840134][T13753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.840152][T13753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.840173][T13753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.858892][T13753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.858910][T13753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.858933][T13753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.883867][ T5503] 8021q: adding VLAN 0 to HW filter on device eth3 [ 344.956721][T13753] hsr_slave_0: entered promiscuous mode [ 344.959936][T13753] hsr_slave_1: entered promiscuous mode [ 345.054192][ T5801] Bluetooth: hci1: command tx timeout [ 345.320988][ T5503] 8021q: adding VLAN 0 to HW filter on device eth4 [ 345.720609][T12507] hsr_slave_0: left promiscuous mode [ 345.721332][T12507] hsr_slave_1: left promiscuous mode [ 346.720020][T13829] loop5: detected capacity change from 0 to 7 [ 346.728250][T13829] Dev loop5: unable to read RDB block 7 [ 346.728273][T13829] loop5: unable to read partition table [ 346.728383][T13829] loop5: partition table beyond EOD, truncated [ 346.728415][T13829] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 346.814757][T13840] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2417'. [ 346.901781][T12507] IPVS: stop unused estimator thread 0... [ 347.126892][T13753] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 347.131729][T13753] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 347.132140][T13753] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 347.133319][ T5801] Bluetooth: hci1: command tx timeout [ 347.145086][T13753] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 347.155988][T13753] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 347.169218][T13753] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 347.169749][T13753] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 347.171798][T13753] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 347.245364][T13753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.252953][T13753] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.258113][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.258195][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.266706][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.266756][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.694427][ T6643] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 347.770325][T13753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.847832][ T6643] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 347.851074][ T6643] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.851116][ T6643] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 347.851133][ T6643] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 347.851164][ T6643] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.111010][ T6643] cxacru_cm: 62 callbacks suppressed [ 348.111035][ T6643] cxacru 6-1:1.0: invalid response length to cm 0x90: 51 [ 348.111069][ T6643] cxacru 6-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 348.111269][ T6643] cxacru 6-1:1.0: probe with driver cxacru failed with error -22 [ 348.289182][T13753] veth0_vlan: entered promiscuous mode [ 348.345670][T13753] veth1_vlan: entered promiscuous mode [ 348.443388][ T6643] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 348.457242][ T5834] usb 6-1: USB disconnect, device number 28 [ 348.482536][T13753] veth0_macvtap: entered promiscuous mode [ 348.568170][T13753] veth1_macvtap: entered promiscuous mode [ 348.594465][ T6643] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 348.595247][ T6643] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.595270][ T6643] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 348.595282][ T6643] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 348.596749][ T6643] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 348.596762][ T6643] usb 7-1: Product: syz [ 348.596770][ T6643] usb 7-1: Manufacturer: syz [ 348.600435][T13895] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 348.601450][ T6643] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected [ 348.642404][ T6643] usb 7-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 348.675635][T13753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.719438][T13753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.793669][T12507] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.793749][T12507] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.793870][T12507] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.793916][T12507] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.822381][T13895] input: syz0 as /devices/virtual/input/input40 [ 348.923134][ T5865] usb 7-1: USB disconnect, device number 33 [ 348.925179][ T5865] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 348.925466][ T5865] garmin_gps 7-1:1.0: device disconnected [ 349.061283][ T6583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.061297][ T6583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.082737][ T6580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.082757][ T6580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.091481][T13910] fuse: Unknown parameter 'user_id00000000000000000000' [ 349.213482][ T5801] Bluetooth: hci1: command tx timeout [ 349.270385][T13924] bridge0: port 3(netdevsim0) entered blocking state [ 349.270428][T13924] bridge0: port 3(netdevsim0) entered disabled state [ 349.270523][T13924] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 349.271790][T13924] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 349.272068][T13924] bridge0: port 3(netdevsim0) entered blocking state [ 349.272152][T13924] bridge0: port 3(netdevsim0) entered forwarding state [ 351.293254][ T5801] Bluetooth: hci1: command tx timeout [ 353.440726][T13942] tipc: Enabling of bearer rejected, already enabled [ 354.061788][T13958] fuse: Bad value for 'fd' [ 354.138228][T13960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2435'. [ 354.138805][T13960] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2435'. [ 354.223993][T13965] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 354.497163][T13973] fuse: Bad value for 'fd' [ 354.754547][T13969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2437'. [ 356.087365][T13991] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 356.201414][T13984] tmpfs: Bad value for 'mpol' [ 356.243015][T14000] fuse: Bad value for 'fd' [ 356.888942][T13985] socket: no more sockets [ 357.132854][T14013] random: crng reseeded on system resumption [ 357.162525][T14015] tipc: Started in network mode [ 357.162543][T14015] tipc: Node identity 1001001, cluster identity 4711 [ 357.162555][T14015] tipc: Node number set to 16781313 [ 357.163650][T14015] tipc: Enabled bearer , priority 0 [ 358.210261][T14022] FAULT_INJECTION: forcing a failure. [ 358.210261][T14022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.210297][T14022] CPU: 2 UID: 0 PID: 14022 Comm: syz.4.2451 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 358.210328][T14022] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 358.210336][T14022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 358.210347][T14022] Call Trace: [ 358.210354][T14022] [ 358.210363][T14022] dump_stack_lvl+0x100/0x190 [ 358.210438][T14022] should_fail_ex.cold+0x5/0xa [ 358.210478][T14022] _copy_from_user+0x2e/0xd0 [ 358.210516][T14022] compat_ipv6_set_mcast_msfilter+0x4ca/0x5a0 [ 358.210559][T14022] ? __pfx_compat_ipv6_set_mcast_msfilter+0x10/0x10 [ 358.210587][T14022] ? __lock_acquire+0x5c0/0x1f40 [ 358.210661][T14022] ? __lock_acquire+0x5c0/0x1f40 [ 358.210694][T14022] ? lock_acquire+0x1d1/0x380 [ 358.210722][T14022] ? do_raw_spin_lock+0x128/0x260 [ 358.210744][T14022] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 358.210773][T14022] ? __local_bh_enable_ip+0xa5/0x120 [ 358.210802][T14022] ? lockdep_hardirqs_on+0x7d/0x110 [ 358.210845][T14022] do_ipv6_setsockopt+0x27c0/0x3a00 [ 358.210875][T14022] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 358.210906][T14022] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 358.210955][T14022] ? lock_acquire+0x1d1/0x380 [ 358.210987][T14022] ? get_pid_task+0x2a/0x250 [ 358.211025][T14022] ? find_held_lock+0x2b/0x80 [ 358.211048][T14022] ? get_pid_task+0xfc/0x250 [ 358.211068][T14022] ? get_pid_task+0xfc/0x250 [ 358.211097][T14022] ? __lock_acquire+0x5c0/0x1f40 [ 358.211141][T14022] ? ipv6_setsockopt+0xcb/0x170 [ 358.211167][T14022] ipv6_setsockopt+0xcb/0x170 [ 358.211196][T14022] udpv6_setsockopt+0x64/0xb0 [ 358.211216][T14022] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 358.211256][T14022] do_sock_setsockopt+0xf3/0x1d0 [ 358.211283][T14022] __sys_setsockopt+0x119/0x190 [ 358.211319][T14022] __ia32_sys_setsockopt+0xbc/0x160 [ 358.211348][T14022] ? __might_fault+0x111/0x140 [ 358.211397][T14022] __do_fast_syscall_32+0x14b/0x8c0 [ 358.211425][T14022] ? lockdep_hardirqs_on+0x7d/0x110 [ 358.211453][T14022] do_fast_syscall_32+0x32/0x70 [ 358.211482][T14022] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 358.211508][T14022] RIP: 0023:0xf73defbc [ 358.211525][T14022] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 358.211544][T14022] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 358.211563][T14022] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 358.211576][T14022] RDX: 0000000000000030 RSI: 0000000080000140 RDI: 000000000000008c [ 358.211588][T14022] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 358.211599][T14022] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 358.211611][T14022] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 358.211637][T14022] [ 358.253839][T14024] hsr0: entered allmulticast mode [ 358.253854][T14024] hsr_slave_0: entered allmulticast mode [ 358.253864][T14024] hsr_slave_1: entered allmulticast mode [ 358.277229][ T5801] Bluetooth: hci1: Malformed LE Event: 0x0d [ 358.279907][T14023] hsr0: left allmulticast mode [ 358.279926][T14023] hsr_slave_0: left allmulticast mode [ 358.279942][T14023] hsr_slave_1: left allmulticast mode [ 358.888394][T14044] fuse: Bad value for 'fd' [ 358.894835][ T5901] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 359.073886][ T5901] usb 9-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 359.075301][ T5901] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.075341][ T5901] usb 9-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 359.075361][ T5901] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 359.075488][ T5901] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.088032][T14060] tipc: Started in network mode [ 359.088045][T14060] tipc: Node identity 1001001, cluster identity 4711 [ 359.088052][T14060] tipc: Node number set to 16781313 [ 359.088762][T14060] tipc: Enabled bearer , priority 0 [ 359.295910][ T5901] cxacru 9-1:1.0: invalid response length to cm 0x90: 51 [ 359.295946][ T5901] cxacru 9-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 359.296086][ T5901] cxacru 9-1:1.0: probe with driver cxacru failed with error -22 [ 359.331752][T14064] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2461'. [ 359.540841][ T5901] usb 9-1: USB disconnect, device number 3 [ 359.614196][T14072] netlink: 'syz.1.2463': attribute type 1 has an invalid length. [ 359.632357][T14072] 8021q: adding VLAN 0 to HW filter on device bond1 [ 359.638896][T14072] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2463'. [ 359.893147][ T6643] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 360.045835][ T6643] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 360.046708][ T6643] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.046730][ T6643] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 360.048374][ T6643] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.048387][ T6643] usb 6-1: Product: syz [ 360.048394][ T6643] usb 6-1: Manufacturer: syz [ 360.048402][ T6643] usb 6-1: SerialNumber: syz [ 360.311202][T14082] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2467'. [ 360.360139][T14077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2466'. [ 360.424263][T14089] proc: Unknown parameter 'trans' [ 360.465306][ T6643] usb 6-1: USB disconnect, device number 29 [ 360.508750][T14087] pim6reg: entered allmulticast mode [ 360.913520][T14098] pim6reg: entered allmulticast mode [ 360.968268][T14098] pim6reg: left allmulticast mode [ 361.131805][T14100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2470'. [ 361.185244][T14101] FAULT_INJECTION: forcing a failure. [ 361.185244][T14101] name failslab, interval 1, probability 5, space 0, times 0 [ 361.185289][T14101] CPU: 0 UID: 0 PID: 14101 Comm: syz.4.2470 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 361.185315][T14101] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 361.185322][T14101] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 361.185355][T14101] Call Trace: [ 361.185362][T14101] [ 361.185370][T14101] dump_stack_lvl+0x100/0x190 [ 361.185398][T14101] should_fail_ex.cold+0x5/0xa [ 361.185423][T14101] should_failslab+0xc2/0x120 [ 361.185462][T14101] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 361.185485][T14101] ? __d_alloc+0x34/0xad0 [ 361.185524][T14101] __d_alloc+0x34/0xad0 [ 361.185551][T14101] d_alloc_pseudo+0x1c/0xc0 [ 361.185570][T14101] alloc_file_pseudo+0x118/0x290 [ 361.185607][T14101] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 361.185633][T14101] ? alloc_fd+0x471/0x7a0 [ 361.185663][T14101] sock_alloc_file+0x50/0x210 [ 361.185683][T14101] __sys_socket+0x1c0/0x260 [ 361.185707][T14101] ? __pfx___sys_socket+0x10/0x10 [ 361.185730][T14101] ? __might_fault+0xc5/0x140 [ 361.185759][T14101] __ia32_sys_socket+0x72/0xb0 [ 361.185783][T14101] __do_fast_syscall_32+0x14b/0x8c0 [ 361.185808][T14101] ? lockdep_hardirqs_on+0x7d/0x110 [ 361.185834][T14101] do_fast_syscall_32+0x32/0x70 [ 361.185859][T14101] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 361.185880][T14101] RIP: 0023:0xf73defbc [ 361.185895][T14101] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 361.185913][T14101] RSP: 002b:00000000f535150c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 361.185932][T14101] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000005 [ 361.185943][T14101] RDX: 0000000000000084 RSI: 0000000000000000 RDI: 0000000000000000 [ 361.185953][T14101] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 361.185960][T14101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.185971][T14101] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 361.185992][T14101] [ 361.527798][T14100] hsr_slave_1 (unregistering): left promiscuous mode [ 361.549714][T14103] pim6reg: left allmulticast mode [ 361.957815][T14115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2469'. [ 362.098148][T14115] hsr_slave_1 (unregistering): left promiscuous mode [ 362.556684][ T5834] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 362.651766][T14122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2477'. [ 362.703189][ T5834] usb 9-1: Using ep0 maxpacket: 32 [ 362.706412][ T5834] usb 9-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 362.708390][ T5834] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 362.710591][ T5834] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.710611][ T5834] usb 9-1: Product: syz [ 362.710625][ T5834] usb 9-1: Manufacturer: syz [ 362.710639][ T5834] usb 9-1: SerialNumber: syz [ 362.715460][T14124] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 363.083968][T14141] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2481'. [ 363.097476][T14124] FAULT_INJECTION: forcing a failure. [ 363.097476][T14124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.097508][T14124] CPU: 1 UID: 0 PID: 14124 Comm: syz.4.2478 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 363.097537][T14124] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 363.097559][T14124] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 363.097571][T14124] Call Trace: [ 363.097578][T14124] [ 363.097586][T14124] dump_stack_lvl+0x100/0x190 [ 363.097618][T14124] should_fail_ex.cold+0x5/0xa [ 363.097645][T14124] _copy_from_user+0x2e/0xd0 [ 363.097672][T14124] do_handle_open+0x507/0xf10 [ 363.097715][T14124] ? __pfx_do_handle_open+0x10/0x10 [ 363.097739][T14124] ? lock_acquire+0x1d1/0x380 [ 363.097767][T14124] ? find_held_lock+0x2b/0x80 [ 363.097788][T14124] ? __might_fault+0xc5/0x140 [ 363.097816][T14124] ? __might_fault+0xc5/0x140 [ 363.097848][T14124] ? __do_fast_syscall_32+0x14b/0x8c0 [ 363.097877][T14124] __do_fast_syscall_32+0x14b/0x8c0 [ 363.097909][T14124] do_fast_syscall_32+0x32/0x70 [ 363.097938][T14124] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 363.097961][T14124] RIP: 0023:0xf73defbc [ 363.097977][T14124] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 363.097995][T14124] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000156 [ 363.098015][T14124] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000680 [ 363.098028][T14124] RDX: 0000000000121101 RSI: 0000000000000000 RDI: 0000000000000000 [ 363.098040][T14124] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 363.098052][T14124] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 363.098063][T14124] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 363.098096][T14124] [ 363.100580][T14141] FAULT_INJECTION: forcing a failure. [ 363.100580][T14141] name failslab, interval 1, probability 5, space 0, times 0 [ 363.100599][T14141] CPU: 2 UID: 0 PID: 14141 Comm: syz.1.2481 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 363.100615][T14141] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 363.100620][T14141] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 363.100626][T14141] Call Trace: [ 363.100630][T14141] [ 363.100635][T14141] dump_stack_lvl+0x100/0x190 [ 363.100652][T14141] should_fail_ex.cold+0x5/0xa [ 363.100668][T14141] should_failslab+0xc2/0x120 [ 363.100684][T14141] __kmalloc_cache_noprof+0x91/0x6d0 [ 363.100696][T14141] ? rdma_resolve_ip+0x63/0x6b0 [ 363.100726][T14141] rdma_resolve_ip+0x63/0x6b0 [ 363.100738][T14141] ? __pfx_addr_handler+0x10/0x10 [ 363.100754][T14141] rdma_resolve_addr+0x357/0x20e0 [ 363.100771][T14141] ? irqentry_exit+0x202/0xab0 [ 363.100790][T14141] ? __pfx_rdma_resolve_addr+0x10/0x10 [ 363.100811][T14141] ? ucma_resolve_ip+0x161/0x220 [ 363.100824][T14141] ucma_resolve_ip+0x161/0x220 [ 363.100836][T14141] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 363.100853][T14141] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 363.100865][T14141] ucma_write+0x1f6/0x330 [ 363.100876][T14141] ? __pfx_ucma_write+0x10/0x10 [ 363.100887][T14141] ? bpf_lsm_file_permission+0x9/0x10 [ 363.100921][T14141] ? security_file_permission+0x76/0x210 [ 363.100938][T14141] ? rw_verify_area+0xce/0x6d0 [ 363.100953][T14141] vfs_write+0x2aa/0x1050 [ 363.100967][T14141] ? __pfx_ucma_write+0x10/0x10 [ 363.100977][T14141] ? lock_acquire+0x1d1/0x380 [ 363.100994][T14141] ? __fget_files+0x34/0x3d0 [ 363.101010][T14141] ? __pfx_vfs_write+0x10/0x10 [ 363.101022][T14141] ? find_held_lock+0x2b/0x80 [ 363.101035][T14141] ? __fget_files+0x215/0x3d0 [ 363.101049][T14141] ? __fget_files+0x215/0x3d0 [ 363.101067][T14141] ? __fget_files+0x21f/0x3d0 [ 363.101085][T14141] ksys_write+0x1f8/0x250 [ 363.101099][T14141] ? __pfx_ksys_write+0x10/0x10 [ 363.101117][T14141] __do_fast_syscall_32+0x14b/0x8c0 [ 363.101133][T14141] ? lockdep_hardirqs_on+0x7d/0x110 [ 363.101150][T14141] do_fast_syscall_32+0x32/0x70 [ 363.101167][T14141] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 363.101182][T14141] RIP: 0023:0xf7f47fbc [ 363.101191][T14141] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 363.101202][T14141] RSP: 002b:00000000f53b450c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 363.101212][T14141] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 0000000080000100 [ 363.101220][T14141] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 363.101226][T14141] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 363.101233][T14141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.101239][T14141] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 363.101254][T14141] [ 363.113512][ T5834] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 363.144370][ T5834] usb 9-1: USB disconnect, device number 4 [ 363.295484][T14035] udevd[14035]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 363.316035][T14145] fuse: Unknown parameter '0x0000000000000006' [ 363.557512][T14151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2484'. [ 363.843707][T14156] FAULT_INJECTION: forcing a failure. [ 363.843707][T14156] name failslab, interval 1, probability 5, space 0, times 0 [ 363.843740][T14156] CPU: 3 UID: 0 PID: 14156 Comm: syz.4.2487 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 363.843766][T14156] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 363.843774][T14156] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 363.843784][T14156] Call Trace: [ 363.843791][T14156] [ 363.843799][T14156] dump_stack_lvl+0x100/0x190 [ 363.843830][T14156] should_fail_ex.cold+0x5/0xa [ 363.843854][T14156] should_failslab+0xc2/0x120 [ 363.843879][T14156] __kmalloc_cache_noprof+0x91/0x6d0 [ 363.843898][T14156] ? sctp_add_bind_addr+0xae/0x3e0 [ 363.843934][T14156] sctp_add_bind_addr+0xae/0x3e0 [ 363.843953][T14156] sctp_copy_local_addr_list+0x349/0x550 [ 363.843990][T14156] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 363.844013][T14156] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 363.844039][T14156] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 363.844071][T14156] sctp_bind_addr_copy+0xe0/0x530 [ 363.844098][T14156] sctp_connect_new_asoc+0x1c9/0x770 [ 363.844127][T14156] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 363.844153][T14156] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 363.844177][T14156] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 363.844205][T14156] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 363.844227][T14156] sctp_sendmsg+0x1743/0x22e0 [ 363.844261][T14156] ? __pfx_sctp_sendmsg+0x10/0x10 [ 363.844290][T14156] ? __lock_acquire+0x5c0/0x1f40 [ 363.844322][T14156] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 363.844359][T14156] ? aa_sock_msg_perm+0x11e/0x200 [ 363.844384][T14156] ? __pfx_sctp_sendmsg+0x10/0x10 [ 363.844412][T14156] inet_sendmsg+0x11c/0x140 [ 363.844443][T14156] ____sys_sendmsg+0xa23/0xc30 [ 363.844466][T14156] ? __pfx_inet_sendmsg+0x10/0x10 [ 363.844486][T14156] ? __pfx_____sys_sendmsg+0x10/0x10 [ 363.844522][T14156] ___sys_sendmsg+0x190/0x1e0 [ 363.844547][T14156] ? __pfx____sys_sendmsg+0x10/0x10 [ 363.844581][T14156] ? find_held_lock+0x2b/0x80 [ 363.844613][T14156] __sys_sendmsg+0x160/0x210 [ 363.844629][T14156] ? __pfx___sys_sendmsg+0x10/0x10 [ 363.844657][T14156] __do_fast_syscall_32+0x14b/0x8c0 [ 363.844680][T14156] ? lockdep_hardirqs_on+0x7d/0x110 [ 363.844704][T14156] do_fast_syscall_32+0x32/0x70 [ 363.844732][T14156] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 363.844754][T14156] RIP: 0023:0xf73defbc [ 363.844770][T14156] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 363.844788][T14156] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 363.844806][T14156] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 363.844818][T14156] RDX: 0000000004000891 RSI: 0000000000000000 RDI: 0000000000000000 [ 363.844830][T14156] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 363.844841][T14156] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 363.844852][T14156] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 363.844879][T14156] [ 363.847194][T14159] Bluetooth: MGMT ver 1.23 [ 364.257192][T14171] FAULT_INJECTION: forcing a failure. [ 364.257192][T14171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.257222][T14171] CPU: 2 UID: 0 PID: 14171 Comm: syz.1.2493 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 364.257247][T14171] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 364.257254][T14171] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 364.257265][T14171] Call Trace: [ 364.257271][T14171] [ 364.257279][T14171] dump_stack_lvl+0x100/0x190 [ 364.257307][T14171] should_fail_ex.cold+0x5/0xa [ 364.257355][T14171] _copy_to_user+0x32/0xd0 [ 364.257379][T14171] drm_ioctl+0x608/0xc60 [ 364.257418][T14171] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 364.257441][T14171] ? __pfx_drm_ioctl+0x10/0x10 [ 364.257477][T14171] drm_compat_ioctl+0x386/0x4c0 [ 364.257512][T14171] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 364.257534][T14171] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 364.257563][T14171] __do_fast_syscall_32+0x14b/0x8c0 [ 364.257588][T14171] ? lockdep_hardirqs_on+0x7d/0x110 [ 364.257612][T14171] do_fast_syscall_32+0x32/0x70 [ 364.257637][T14171] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 364.257659][T14171] RIP: 0023:0xf7f47fbc [ 364.257674][T14171] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 364.257690][T14171] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 364.257708][T14171] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c03864bc [ 364.257719][T14171] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 364.257730][T14171] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 364.257739][T14171] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 364.257750][T14171] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 364.257772][T14171] [ 364.825197][T14182] FAULT_INJECTION: forcing a failure. [ 364.825197][T14182] name failslab, interval 1, probability 5, space 0, times 0 [ 364.825346][T14182] CPU: 2 UID: 0 PID: 14182 Comm: syz.4.2497 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 364.825375][T14182] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 364.825382][T14182] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 364.825393][T14182] Call Trace: [ 364.825400][T14182] [ 364.825407][T14182] dump_stack_lvl+0x100/0x190 [ 364.825437][T14182] should_fail_ex.cold+0x5/0xa [ 364.825463][T14182] should_failslab+0xc2/0x120 [ 364.825489][T14182] __kmalloc_noprof+0xfc/0x840 [ 364.825512][T14182] ? tomoyo_encode2+0xfb/0x3c0 [ 364.825543][T14182] tomoyo_encode2+0xfb/0x3c0 [ 364.825574][T14182] tomoyo_encode+0x29/0x50 [ 364.825606][T14182] tomoyo_mount_acl+0x14c/0x8b0 [ 364.825630][T14182] ? is_bpf_text_address+0x8a/0x1a0 [ 364.825667][T14182] ? is_bpf_text_address+0x8a/0x1a0 [ 364.825689][T14182] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 364.825729][T14182] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 364.825755][T14182] ? kernel_text_address+0x8d/0x100 [ 364.825781][T14182] ? unwind_get_return_address+0x59/0xa0 [ 364.825806][T14182] ? arch_stack_walk+0xa6/0xf0 [ 364.825831][T14182] ? __lock_acquire+0x5c0/0x1f40 [ 364.825871][T14182] ? tomoyo_mount_permission+0x1f6/0x460 [ 364.825901][T14182] ? tomoyo_domain+0xb2/0x150 [ 364.825920][T14182] ? tomoyo_profile+0x47/0x60 [ 364.825941][T14182] tomoyo_mount_permission+0x214/0x460 [ 364.825967][T14182] ? tomoyo_mount_permission+0x1f6/0x460 [ 364.825995][T14182] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 364.826037][T14182] security_sb_mount+0xdd/0x270 [ 364.826062][T14182] path_mount+0x158/0x2850 [ 364.826096][T14182] ? __pfx_path_mount+0x10/0x10 [ 364.826122][T14182] ? lockdep_hardirqs_on+0x7d/0x110 [ 364.826152][T14182] ? putname+0xb1/0x110 [ 364.826177][T14182] ? kmem_cache_free+0x127/0x6c0 [ 364.826206][T14182] ? __ia32_sys_mount+0x292/0x310 [ 364.826222][T14182] __ia32_sys_mount+0x292/0x310 [ 364.826241][T14182] ? __pfx___ia32_sys_mount+0x10/0x10 [ 364.826267][T14182] __do_fast_syscall_32+0x14b/0x8c0 [ 364.826293][T14182] ? lockdep_hardirqs_on+0x7d/0x110 [ 364.826320][T14182] do_fast_syscall_32+0x32/0x70 [ 364.826347][T14182] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 364.826369][T14182] RIP: 0023:0xf73defbc [ 364.826384][T14182] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 364.826401][T14182] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 364.826422][T14182] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000080 [ 364.826433][T14182] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000080000100 [ 364.826446][T14182] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 364.826458][T14182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.826470][T14182] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 364.826494][T14182] [ 364.881081][T14185] FAULT_INJECTION: forcing a failure. [ 364.881081][T14185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.881102][T14185] CPU: 1 UID: 0 PID: 14185 Comm: syz.4.2499 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 364.881118][T14185] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 364.881123][T14185] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 364.881130][T14185] Call Trace: [ 364.881134][T14185] [ 364.881139][T14185] dump_stack_lvl+0x100/0x190 [ 364.881158][T14185] should_fail_ex.cold+0x5/0xa [ 364.881174][T14185] _copy_to_user+0x32/0xd0 [ 364.881191][T14185] simple_read_from_buffer+0xcb/0x170 [ 364.881209][T14185] proc_fail_nth_read+0x1af/0x230 [ 364.881241][T14185] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 364.881258][T14185] ? rw_verify_area+0xce/0x6d0 [ 364.881270][T14185] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 364.881287][T14185] vfs_read+0x1e4/0xb40 [ 364.881301][T14185] ? lock_acquire+0x1d1/0x380 [ 364.881337][T14185] ? __fget_files+0x34/0x3d0 [ 364.881353][T14185] ? __pfx_vfs_read+0x10/0x10 [ 364.881366][T14185] ? find_held_lock+0x2b/0x80 [ 364.881380][T14185] ? __fget_files+0x215/0x3d0 [ 364.881397][T14185] ? __fget_files+0x21f/0x3d0 [ 364.881416][T14185] ksys_read+0x12a/0x250 [ 364.881434][T14185] ? __pfx_ksys_read+0x10/0x10 [ 364.881452][T14185] do_int80_emulation+0x166/0x650 [ 364.881472][T14185] asm_int80_emulation+0x1a/0x20 [ 364.881484][T14185] RIP: 0023:0xf71377ab [ 364.881493][T14185] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 364.881505][T14185] RSP: 002b:00000000f53f64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 364.881517][T14185] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f53f65d0 [ 364.881524][T14185] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 364.881531][T14185] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 364.881537][T14185] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 364.881544][T14185] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 364.881559][T14185] [ 364.888668][T14163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2490'. [ 365.001916][T14187] FAULT_INJECTION: forcing a failure. [ 365.001916][T14187] name failslab, interval 1, probability 5, space 0, times 0 [ 365.001947][T14187] CPU: 2 UID: 0 PID: 14187 Comm: syz.0.2498 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 365.001972][T14187] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 365.001979][T14187] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 365.001990][T14187] Call Trace: [ 365.001996][T14187] [ 365.002005][T14187] dump_stack_lvl+0x100/0x190 [ 365.002034][T14187] should_fail_ex.cold+0x5/0xa [ 365.002059][T14187] should_failslab+0xc2/0x120 [ 365.002084][T14187] kmem_cache_alloc_noprof+0x92/0x6a0 [ 365.002106][T14187] ? vm_area_alloc+0x1f/0x160 [ 365.002135][T14187] vm_area_alloc+0x1f/0x160 [ 365.002159][T14187] __mmap_region+0x1148/0x34d0 [ 365.002183][T14187] ? __pfx___mmap_region+0x10/0x10 [ 365.002217][T14187] ? __pfx___might_resched+0x10/0x10 [ 365.002245][T14187] ? find_held_lock+0x2b/0x80 [ 365.002266][T14187] ? process_measurement+0x4c8/0x2350 [ 365.002291][T14187] ? process_measurement+0x4c8/0x2350 [ 365.002314][T14187] ? down_write+0x141/0x1f0 [ 365.002388][T14187] ? lock_acquire+0x1d1/0x380 [ 365.002413][T14187] ? unwind_next_frame+0xbd/0x2090 [ 365.002473][T14187] ? _parse_integer_limit+0x1ac/0x220 [ 365.002496][T14187] mmap_region+0x5a8/0x6d0 [ 365.002518][T14187] ? __pfx_mmap_region+0x10/0x10 [ 365.002539][T14187] ? shmem_mapping+0xd/0x50 [ 365.002568][T14187] ? __pfx_memfd_check_seals_mmap+0x10/0x10 [ 365.002594][T14187] ? bpf_lsm_mmap_addr+0x9/0x30 [ 365.002616][T14187] ? security_mmap_addr+0x71/0x1e0 [ 365.002643][T14187] ? __get_unmapped_area+0x255/0x3e0 [ 365.002670][T14187] do_mmap+0x12c7/0x1c30 [ 365.002698][T14187] ? lock_acquire+0x1d1/0x380 [ 365.002725][T14187] ? __pfx_do_mmap+0x10/0x10 [ 365.002749][T14187] ? __pfx___might_resched+0x10/0x10 [ 365.002772][T14187] ? bpf_lsm_current_getlsmprop_subj+0x9/0x10 [ 365.002798][T14187] ? security_current_getlsmprop_subj+0x6e/0x130 [ 365.002825][T14187] ? __pfx_down_write_killable+0x10/0x10 [ 365.002859][T14187] vm_mmap_pgoff+0x28d/0x470 [ 365.002884][T14187] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 365.002902][T14187] ? __fget_files+0x215/0x3d0 [ 365.002932][T14187] ? __fget_files+0x21f/0x3d0 [ 365.002975][T14187] ksys_mmap_pgoff+0x3cb/0x610 [ 365.002999][T14187] ? find_held_lock+0x2b/0x80 [ 365.003021][T14187] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 365.003051][T14187] __do_fast_syscall_32+0x14b/0x8c0 [ 365.003101][T14187] ? lockdep_hardirqs_on+0x7d/0x110 [ 365.003130][T14187] do_fast_syscall_32+0x32/0x70 [ 365.003158][T14187] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 365.003181][T14187] RIP: 0023:0xf73defbc [ 365.003197][T14187] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 365.003215][T14187] RSP: 002b:00000000f53c450c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 365.003233][T14187] RAX: ffffffffffffffda RBX: 0000000080ffc000 RCX: 0000000000003000 [ 365.003245][T14187] RDX: 0000000001000000 RSI: 0000000000000011 RDI: 0000000000000006 [ 365.003256][T14187] RBP: 0000000033255000 R08: 0000000000000000 R09: 0000000000000000 [ 365.003266][T14187] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 365.003275][T14187] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 365.003299][T14187] [ 365.337762][T14195] tipc: Enabling of bearer rejected, already enabled [ 365.545884][T14199] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 365.595315][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 365.744275][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 365.745476][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 365.746711][ T9] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 365.746749][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 365.746775][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 365.746798][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 365.746821][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 365.746844][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 365.746878][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.972938][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 365.972980][ T9] usbtmc 5-1:16.0: can't read capabilities [ 366.328580][T14204] fuse: Unknown parameter '0x0000000000000006' [ 366.761294][T14217] pim6reg: entered allmulticast mode [ 366.833525][ T6009] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 366.878625][T14215] pim6reg: left allmulticast mode [ 366.958308][T14215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2508'. [ 366.996428][ T6009] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 367.025375][ T6009] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.025588][ T6009] usb 7-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 367.025679][ T6009] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 367.026001][ T6009] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.065433][T14215] hsr_slave_1 (unregistering): left promiscuous mode [ 367.401411][ T6009] cxacru 7-1:1.0: invalid response length to cm 0x90: 51 [ 367.401443][ T6009] cxacru 7-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 367.401590][ T6009] cxacru 7-1:1.0: probe with driver cxacru failed with error -22 [ 367.667628][ T6009] usb 7-1: USB disconnect, device number 34 [ 367.895711][T14225] FAULT_INJECTION: forcing a failure. [ 367.895711][T14225] name failslab, interval 1, probability 5, space 0, times 0 [ 367.895867][T14225] CPU: 2 UID: 0 PID: 14225 Comm: syz.4.2512 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 367.895896][T14225] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 367.895904][T14225] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 367.895915][T14225] Call Trace: [ 367.895921][T14225] [ 367.895929][T14225] dump_stack_lvl+0x100/0x190 [ 367.895959][T14225] should_fail_ex.cold+0x5/0xa [ 367.895984][T14225] should_failslab+0xc2/0x120 [ 367.896010][T14225] __kmalloc_cache_noprof+0x91/0x6d0 [ 367.896030][T14225] ? proc_pid_stack+0xa6/0x2b0 [ 367.896058][T14225] proc_pid_stack+0xa6/0x2b0 [ 367.896085][T14225] proc_single_show+0x124/0x1f0 [ 367.896111][T14225] traverse.part.0.constprop.0+0x107/0x650 [ 367.896143][T14225] seq_read_iter+0x93f/0x1270 [ 367.896178][T14225] seq_read+0x344/0x4d0 [ 367.896202][T14225] ? __pfx_seq_read+0x10/0x10 [ 367.896224][T14225] ? get_pid_task+0xfc/0x250 [ 367.896257][T14225] ? rw_verify_area+0xce/0x6d0 [ 367.896277][T14225] ? __pfx_seq_read+0x10/0x10 [ 367.896300][T14225] vfs_read+0x1e4/0xb40 [ 367.896323][T14225] ? lock_acquire+0x1d1/0x380 [ 367.896349][T14225] ? __fget_files+0x34/0x3d0 [ 367.896373][T14225] ? __pfx_vfs_read+0x10/0x10 [ 367.896393][T14225] ? find_held_lock+0x2b/0x80 [ 367.896413][T14225] ? __fget_files+0x215/0x3d0 [ 367.896436][T14225] ? __fget_files+0x215/0x3d0 [ 367.896465][T14225] ? __fget_files+0x21f/0x3d0 [ 367.896497][T14225] ksys_pread64+0x161/0x1a0 [ 367.896519][T14225] ? __pfx_ksys_pread64+0x10/0x10 [ 367.896549][T14225] __do_fast_syscall_32+0x14b/0x8c0 [ 367.896576][T14225] ? lockdep_hardirqs_on+0x7d/0x110 [ 367.896604][T14225] do_fast_syscall_32+0x32/0x70 [ 367.896630][T14225] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 367.896654][T14225] RIP: 0023:0xf73defbc [ 367.896670][T14225] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 367.896687][T14225] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 00000000000000b4 [ 367.896706][T14225] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000580 [ 367.896718][T14225] RDX: 000000000000000f RSI: 0000000000000004 RDI: 0000000000000000 [ 367.896728][T14225] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 367.896739][T14225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.896749][T14225] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 367.896774][T14225] [ 368.024564][ T57] usb 5-1: USB disconnect, device number 31 [ 368.081816][T14232] tipc: Enabling of bearer rejected, already enabled [ 368.273588][T14242] fuse: Unknown parameter '0x0000000000000006' [ 368.410612][T14244] tipc: Enabling of bearer rejected, already enabled [ 368.559831][T14248] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2522'. [ 368.619771][T14255] FAULT_INJECTION: forcing a failure. [ 368.619771][T14255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.619793][T14255] CPU: 3 UID: 0 PID: 14255 Comm: syz.4.2523 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 368.619810][T14255] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 368.619815][T14255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 368.619822][T14255] Call Trace: [ 368.619827][T14255] [ 368.619831][T14255] dump_stack_lvl+0x100/0x190 [ 368.619850][T14255] should_fail_ex.cold+0x5/0xa [ 368.619872][T14255] _copy_from_iter+0x1f4/0x1690 [ 368.619898][T14255] ? __asan_memset+0x23/0x50 [ 368.619916][T14255] ? __alloc_skb+0x4e9/0x710 [ 368.619942][T14255] ? __pfx__copy_from_iter+0x10/0x10 [ 368.619964][T14255] ? __pfx___alloc_skb+0x10/0x10 [ 368.619988][T14255] ? write_profile+0xe0/0x150 [ 368.620011][T14255] ? skb_page_frag_refill+0x309/0x4b0 [ 368.620036][T14255] ? sk_page_frag_refill+0x6c/0x340 [ 368.620067][T14255] tcp_sendmsg_locked+0xde1/0x42d0 [ 368.620102][T14255] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 368.620121][T14255] ? lock_acquire+0x1d1/0x380 [ 368.620148][T14255] ? do_raw_spin_lock+0x128/0x260 [ 368.620162][T14255] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 368.620177][T14255] ? __local_bh_enable_ip+0xa5/0x120 [ 368.620196][T14255] tcp_sendmsg+0x2e/0x50 [ 368.620207][T14255] ? __pfx_tcp_sendmsg+0x10/0x10 [ 368.620220][T14255] inet_sendmsg+0xb9/0x140 [ 368.620233][T14255] sock_write_iter+0x4fd/0x5d0 [ 368.620247][T14255] ? __pfx_inet_sendmsg+0x10/0x10 [ 368.620258][T14255] ? __pfx_sock_write_iter+0x10/0x10 [ 368.620275][T14255] ? bpf_lsm_file_permission+0x9/0x10 [ 368.620290][T14255] ? security_file_permission+0x76/0x210 [ 368.620307][T14255] ? rw_verify_area+0xce/0x6d0 [ 368.620321][T14255] vfs_write+0x6af/0x1050 [ 368.620335][T14255] ? __pfx_sock_write_iter+0x10/0x10 [ 368.620350][T14255] ? __pfx_vfs_write+0x10/0x10 [ 368.620363][T14255] ? find_held_lock+0x2b/0x80 [ 368.620385][T14255] ksys_write+0x1f8/0x250 [ 368.620399][T14255] ? __pfx_ksys_write+0x10/0x10 [ 368.620417][T14255] __do_fast_syscall_32+0x14b/0x8c0 [ 368.620434][T14255] ? lockdep_hardirqs_on+0x7d/0x110 [ 368.620457][T14255] do_fast_syscall_32+0x32/0x70 [ 368.620479][T14255] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 368.620498][T14255] RIP: 0023:0xf73defbc [ 368.620512][T14255] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 368.620527][T14255] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 368.620544][T14255] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000300 [ 368.620557][T14255] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 368.620568][T14255] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 368.620578][T14255] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 368.620590][T14255] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 368.620615][T14255] [ 368.701324][T14259] tipc: Enabling of bearer rejected, already enabled [ 369.015744][T14268] fuse: Unknown parameter 'fd0x0000000000000006' [ 369.194144][ T64] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 369.344138][ T64] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 369.345255][ T64] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.345315][ T64] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 369.345336][ T64] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 369.345372][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.551993][ T64] cxacru 5-1:1.0: invalid response length to cm 0x90: 51 [ 369.552017][ T64] cxacru 5-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 369.552097][ T64] cxacru 5-1:1.0: probe with driver cxacru failed with error -22 [ 369.754722][ T6009] usb 5-1: USB disconnect, device number 32 [ 370.319617][T14283] FAULT_INJECTION: forcing a failure. [ 370.319617][T14283] name failslab, interval 1, probability 5, space 0, times 0 [ 370.319641][T14283] CPU: 2 UID: 0 PID: 14283 Comm: syz.0.2532 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 370.319658][T14283] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 370.319663][T14283] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 370.319670][T14283] Call Trace: [ 370.319674][T14283] [ 370.319678][T14283] dump_stack_lvl+0x100/0x190 [ 370.319697][T14283] should_fail_ex.cold+0x5/0xa [ 370.319712][T14283] should_failslab+0xc2/0x120 [ 370.319729][T14283] kmem_cache_alloc_noprof+0x92/0x6a0 [ 370.319743][T14283] ? security_file_alloc+0x34/0x2c0 [ 370.319762][T14283] security_file_alloc+0x34/0x2c0 [ 370.319778][T14283] init_file+0x95/0x480 [ 370.319795][T14283] alloc_empty_file+0x79/0x1c0 [ 370.319813][T14283] path_openat+0xd6/0x23f0 [ 370.319831][T14283] ? __pfx_path_openat+0x10/0x10 [ 370.319851][T14283] do_file_open+0x20e/0x430 [ 370.319867][T14283] ? __pfx_do_file_open+0x10/0x10 [ 370.319893][T14283] ? alloc_fd+0x471/0x7a0 [ 370.319910][T14283] ? do_getname+0x191/0x390 [ 370.319922][T14283] do_sys_openat2+0x163/0x1d0 [ 370.319933][T14283] ? __pfx_do_sys_openat2+0x10/0x10 [ 370.319946][T14283] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 370.319966][T14283] __ia32_compat_sys_open+0xfe/0x1c0 [ 370.319978][T14283] ? __pfx___ia32_compat_sys_open+0x10/0x10 [ 370.319995][T14283] __do_fast_syscall_32+0x14b/0x8c0 [ 370.320012][T14283] ? lockdep_hardirqs_on+0x7d/0x110 [ 370.320028][T14283] do_fast_syscall_32+0x32/0x70 [ 370.320045][T14283] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 370.320062][T14283] RIP: 0023:0xf73defbc [ 370.320071][T14283] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 370.320082][T14283] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000005 [ 370.320093][T14283] RAX: ffffffffffffffda RBX: 0000000080000740 RCX: 00000000001a1b42 [ 370.320100][T14283] RDX: 0000000000000104 RSI: 0000000000000000 RDI: 0000000000000000 [ 370.320107][T14283] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 370.320113][T14283] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 370.320120][T14283] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 370.320133][T14283] [ 370.472592][T14289] tipc: Enabling of bearer rejected, already enabled [ 370.625309][T14291] fuse: Unknown parameter 'fd0x0000000000000006' [ 370.917341][T14304] FAULT_INJECTION: forcing a failure. [ 370.917341][T14304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.917367][T14304] CPU: 2 UID: 0 PID: 14304 Comm: syz.4.2540 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 370.917384][T14304] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 370.917389][T14304] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 370.917396][T14304] Call Trace: [ 370.917400][T14304] [ 370.917404][T14304] dump_stack_lvl+0x100/0x190 [ 370.917424][T14304] should_fail_ex.cold+0x5/0xa [ 370.917439][T14304] _copy_from_user+0x2e/0xd0 [ 370.917455][T14304] drm_mode_atomic_ioctl+0x6b1/0x2940 [ 370.917478][T14304] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 370.917491][T14304] ? __lock_acquire+0x5c0/0x1f40 [ 370.917517][T14304] ? drm_is_current_master+0x2c/0x40 [ 370.917530][T14304] ? drm_is_current_master+0x2c/0x40 [ 370.917545][T14304] ? do_raw_spin_unlock+0x145/0x1e0 [ 370.917559][T14304] drm_ioctl_kernel+0x1f3/0x3e0 [ 370.917571][T14304] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 370.917585][T14304] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 370.917601][T14304] drm_ioctl+0x5e6/0xc60 [ 370.917616][T14304] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 370.917630][T14304] ? __pfx_drm_ioctl+0x10/0x10 [ 370.917652][T14304] drm_compat_ioctl+0x386/0x4c0 [ 370.917669][T14304] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 370.917685][T14304] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 370.917700][T14304] __do_fast_syscall_32+0x14b/0x8c0 [ 370.917717][T14304] ? lockdep_hardirqs_on+0x7d/0x110 [ 370.917734][T14304] do_fast_syscall_32+0x32/0x70 [ 370.917751][T14304] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 370.917765][T14304] RIP: 0023:0xf73defbc [ 370.917775][T14304] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 370.917785][T14304] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 370.917797][T14304] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 00000000c03864bc [ 370.917804][T14304] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 370.917811][T14304] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 370.917817][T14304] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 370.917823][T14304] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 370.917838][T14304] [ 371.157631][T14311] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2542'. [ 371.848814][T14322] tipc: Enabling of bearer rejected, already enabled [ 372.093533][T13865] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 372.244018][T13865] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 372.245117][T13865] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.245154][T13865] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 372.245172][T13865] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 372.245206][T13865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.493856][T13865] cxacru 6-1:1.0: receive of cm 0x90 failed (-104) [ 374.493879][T13865] cxacru 6-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 374.493967][T13865] cxacru 6-1:1.0: probe with driver cxacru failed with error -22 [ 374.741136][ T41] usb 6-1: USB disconnect, device number 30 [ 374.792858][T14332] netlink: 'syz.1.2547': attribute type 11 has an invalid length. [ 374.820085][T14332] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 374.820109][T14332] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 375.028908][T14342] FAULT_INJECTION: forcing a failure. [ 375.028908][T14342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.028940][T14342] CPU: 3 UID: 0 PID: 14342 Comm: syz.4.2551 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 375.028968][T14342] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 375.028976][T14342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 375.028988][T14342] Call Trace: [ 375.028994][T14342] [ 375.029003][T14342] dump_stack_lvl+0x100/0x190 [ 375.029034][T14342] should_fail_ex.cold+0x5/0xa [ 375.029060][T14342] _copy_from_user+0x2e/0xd0 [ 375.029087][T14342] drm_mode_atomic_ioctl+0x6b1/0x2940 [ 375.029129][T14342] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 375.029150][T14342] ? __lock_acquire+0x5c0/0x1f40 [ 375.029195][T14342] ? drm_is_current_master+0x2c/0x40 [ 375.029216][T14342] ? drm_is_current_master+0x2c/0x40 [ 375.029241][T14342] ? do_raw_spin_unlock+0x145/0x1e0 [ 375.029265][T14342] drm_ioctl_kernel+0x1f3/0x3e0 [ 375.029315][T14342] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 375.029344][T14342] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 375.029373][T14342] drm_ioctl+0x5e6/0xc60 [ 375.029396][T14342] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 375.029418][T14342] ? __pfx_drm_ioctl+0x10/0x10 [ 375.029457][T14342] drm_compat_ioctl+0x386/0x4c0 [ 375.029485][T14342] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 375.029510][T14342] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 375.029537][T14342] __do_fast_syscall_32+0x14b/0x8c0 [ 375.029564][T14342] ? lockdep_hardirqs_on+0x7d/0x110 [ 375.029592][T14342] do_fast_syscall_32+0x32/0x70 [ 375.029619][T14342] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 375.029642][T14342] RIP: 0023:0xf73defbc [ 375.029658][T14342] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 375.029676][T14342] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 375.029695][T14342] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000c03864bc [ 375.029707][T14342] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 375.029718][T14342] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 375.029728][T14342] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 375.029739][T14342] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 375.029766][T14342] [ 375.883220][T14362] tipc: Enabling of bearer rejected, already enabled [ 376.133279][ T5834] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 376.149208][T14366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2559'. [ 376.428969][T14372] FAULT_INJECTION: forcing a failure. [ 376.428969][T14372] name failslab, interval 1, probability 5, space 0, times 0 [ 376.428991][T14372] CPU: 2 UID: 0 PID: 14372 Comm: syz.1.2560 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 376.429008][T14372] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 376.429013][T14372] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 376.429019][T14372] Call Trace: [ 376.429023][T14372] [ 376.429028][T14372] dump_stack_lvl+0x100/0x190 [ 376.429047][T14372] should_fail_ex.cold+0x5/0xa [ 376.429063][T14372] should_failslab+0xc2/0x120 [ 376.429080][T14372] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 376.429095][T14372] ? __alloc_skb+0x140/0x710 [ 376.429115][T14372] __alloc_skb+0x140/0x710 [ 376.429132][T14372] ? __alloc_skb+0x5b7/0x710 [ 376.429150][T14372] ? __pfx___alloc_skb+0x10/0x10 [ 376.429167][T14372] ? genl_rcv_msg+0x4be/0x800 [ 376.429198][T14372] netlink_ack+0x117/0xba0 [ 376.429214][T14372] netlink_rcv_skb+0x333/0x420 [ 376.429225][T14372] ? __pfx_genl_rcv_msg+0x10/0x10 [ 376.429240][T14372] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 376.429257][T14372] ? netlink_deliver_tap+0x1ae/0xb50 [ 376.429305][T14372] genl_rcv+0x28/0x40 [ 376.429318][T14372] netlink_unicast+0x668/0x950 [ 376.429332][T14372] ? __pfx_netlink_unicast+0x10/0x10 [ 376.429348][T14372] netlink_sendmsg+0x9ac/0x10c0 [ 376.429362][T14372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.429378][T14372] ? apparmor_socket_sendmsg+0x165/0x280 [ 376.429394][T14372] ? ____sys_sendmsg+0xa99/0xc30 [ 376.429412][T14372] ____sys_sendmsg+0xa99/0xc30 [ 376.429426][T14372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.429439][T14372] ? __pfx_____sys_sendmsg+0x10/0x10 [ 376.429460][T14372] ___sys_sendmsg+0x190/0x1e0 [ 376.429476][T14372] ? __pfx____sys_sendmsg+0x10/0x10 [ 376.429497][T14372] ? find_held_lock+0x2b/0x80 [ 376.429521][T14372] __sys_sendmsg+0x160/0x210 [ 376.429532][T14372] ? __pfx___sys_sendmsg+0x10/0x10 [ 376.429551][T14372] __do_fast_syscall_32+0x14b/0x8c0 [ 376.429568][T14372] ? lockdep_hardirqs_on+0x7d/0x110 [ 376.429585][T14372] do_fast_syscall_32+0x32/0x70 [ 376.429603][T14372] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 376.429617][T14372] RIP: 0023:0xf7f47fbc [ 376.429627][T14372] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 376.429639][T14372] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 376.429651][T14372] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800004c0 [ 376.429658][T14372] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 376.429664][T14372] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 376.429671][T14372] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 376.429677][T14372] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 376.429691][T14372] [ 376.576775][ T5834] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 376.643180][ T5834] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 376.643210][ T5834] usb 7-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 376.643221][ T5834] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 376.643242][ T5834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.803283][ T41] usb 6-1: new low-speed USB device number 31 using dummy_hcd [ 376.933203][ T41] usb 6-1: device descriptor read/64, error -71 [ 376.962133][ T5834] cxacru 7-1:1.0: send of cm 0x90 failed (-71) [ 376.962155][ T5834] cxacru 7-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 376.962234][ T5834] cxacru 7-1:1.0: probe with driver cxacru failed with error -22 [ 376.968492][ T5834] usb 7-1: USB disconnect, device number 35 [ 376.979293][T14376] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2562'. [ 377.173225][ T41] usb 6-1: new low-speed USB device number 32 using dummy_hcd [ 377.303155][ T41] usb 6-1: device descriptor read/64, error -71 [ 377.413391][ T41] usb usb6-port1: attempt power cycle [ 377.507767][T14379] gadgetfs: bound to dummy_udc driver [ 377.518014][T14379] FAULT_INJECTION: forcing a failure. [ 377.518014][T14379] name failslab, interval 1, probability 5, space 0, times 0 [ 377.518044][T14379] CPU: 3 UID: 0 PID: 14379 Comm: syz.2.2563 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 377.518068][T14379] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 377.518075][T14379] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 377.518085][T14379] Call Trace: [ 377.518092][T14379] [ 377.518100][T14379] dump_stack_lvl+0x100/0x190 [ 377.518127][T14379] should_fail_ex.cold+0x5/0xa [ 377.518151][T14379] should_failslab+0xc2/0x120 [ 377.518176][T14379] kmem_cache_alloc_noprof+0x92/0x6a0 [ 377.518196][T14379] ? mas_next_slot+0xc05/0x13a0 [ 377.518213][T14379] ? vm_area_dup+0x27/0x9d0 [ 377.518241][T14379] vm_area_dup+0x27/0x9d0 [ 377.518265][T14379] __split_vma+0x19c/0x1d70 [ 377.518287][T14379] ? __pfx___split_vma+0x10/0x10 [ 377.518311][T14379] ? mas_next_slot+0xc05/0x13a0 [ 377.518342][T14379] vms_gather_munmap_vmas+0x3a5/0x1720 [ 377.518365][T14379] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 377.518382][T14379] ? mtree_range_walk+0x72b/0xb70 [ 377.518415][T14379] ? mas_walk+0x260/0x310 [ 377.518443][T14379] __mmap_region+0x4c6/0x34d0 [ 377.518485][T14379] ? __pfx___mmap_region+0x10/0x10 [ 377.518509][T14379] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 377.518541][T14379] ? do_raw_spin_lock+0x128/0x260 [ 377.518570][T14379] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 377.518595][T14379] ? rcu_is_watching+0x13/0xc0 [ 377.518616][T14379] ? trace_hrtimer_start+0x77/0x220 [ 377.518639][T14379] ? hrtimer_start_range_ns_common+0x778/0x16f0 [ 377.518668][T14379] ? find_held_lock+0x2b/0x80 [ 377.518689][T14379] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 377.518755][T14379] mmap_region+0x3db/0x6d0 [ 377.518777][T14379] ? __pfx_mmap_region+0x10/0x10 [ 377.518795][T14379] ? shmem_get_unmapped_area+0x141/0x960 [ 377.518818][T14379] ? cap_mmap_addr+0x4b/0x120 [ 377.518837][T14379] ? bpf_lsm_mmap_addr+0x9/0x30 [ 377.518858][T14379] ? security_mmap_addr+0x71/0x1e0 [ 377.518882][T14379] ? __get_unmapped_area+0x255/0x3e0 [ 377.518908][T14379] do_mmap+0x12c7/0x1c30 [ 377.518934][T14379] ? lock_acquire+0x1d1/0x380 [ 377.518959][T14379] ? __pfx_do_mmap+0x10/0x10 [ 377.518982][T14379] ? futex_wait+0x11e/0x370 [ 377.519012][T14379] ? __pfx_down_write_killable+0x10/0x10 [ 377.519044][T14379] vm_mmap_pgoff+0x28d/0x470 [ 377.519068][T14379] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 377.519098][T14379] ksys_mmap_pgoff+0xe4/0x610 [ 377.519121][T14379] ? find_held_lock+0x2b/0x80 [ 377.519142][T14379] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 377.519171][T14379] __do_fast_syscall_32+0x14b/0x8c0 [ 377.519195][T14379] ? lockdep_hardirqs_on+0x7d/0x110 [ 377.519221][T14379] do_fast_syscall_32+0x32/0x70 [ 377.519247][T14379] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 377.519269][T14379] RIP: 0023:0xf7f65fbc [ 377.519283][T14379] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 377.519302][T14379] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 377.519326][T14379] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000b36000 [ 377.519340][T14379] RDX: 000000000000000e RSI: 0000000000008031 RDI: 00000000ffffffff [ 377.519351][T14379] RBP: 0000000000003000 R08: 0000000000000000 R09: 0000000000000000 [ 377.519363][T14379] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 377.519374][T14379] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 377.519399][T14379] [ 377.583198][ C3] sr 2:0:0:0: [sr0] tag#29 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 377.583232][ C3] sr 2:0:0:0: [sr0] tag#29 CDB: Release(6) [ 377.583243][ C3] sr 2:0:0:0: [sr0] tag#29 CDB[00]: 17 90 f1 f7 23 98 86 a4 ea 15 fb a0 bc da b7 54 [ 377.583254][ C3] sr 2:0:0:0: [sr0] tag#29 CDB[10]: 41 [ 377.773613][ T41] usb 6-1: new low-speed USB device number 33 using dummy_hcd [ 377.794084][ T41] usb 6-1: device descriptor read/8, error -71 [ 378.043160][ T41] usb 6-1: new low-speed USB device number 34 using dummy_hcd [ 378.063880][ T41] usb 6-1: device descriptor read/8, error -71 [ 378.173598][ T41] usb usb6-port1: unable to enumerate USB device [ 378.336297][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.405424][T14386] FAULT_INJECTION: forcing a failure. [ 378.405424][T14386] name fail_futex, interval 1, probability 0, space 0, times 0 [ 378.405471][T14386] CPU: 3 UID: 0 PID: 14386 Comm: syz.0.2566 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 378.405501][T14386] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 378.405509][T14386] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 378.405521][T14386] Call Trace: [ 378.405527][T14386] [ 378.405535][T14386] dump_stack_lvl+0x100/0x190 [ 378.405565][T14386] should_fail_ex.cold+0x5/0xa [ 378.405591][T14386] get_futex_key+0x1c9/0x13e0 [ 378.405618][T14386] ? __pfx_get_futex_key+0x10/0x10 [ 378.405645][T14386] futex_wait_setup+0x91/0x540 [ 378.405681][T14386] __futex_wait+0x19f/0x360 [ 378.405711][T14386] ? __pfx___futex_wait+0x10/0x10 [ 378.405737][T14386] ? __pfx_try_to_wake_up+0x10/0x10 [ 378.405765][T14386] ? futex_hash+0x311/0x400 [ 378.405789][T14386] ? __pfx_futex_wake_mark+0x10/0x10 [ 378.405820][T14386] ? find_held_lock+0x2b/0x80 [ 378.405844][T14386] ? futex_wake+0x4ea/0x5e0 [ 378.405877][T14386] futex_wait+0xe6/0x370 [ 378.405906][T14386] ? __pfx_futex_wait+0x10/0x10 [ 378.405940][T14386] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 378.405984][T14386] do_futex+0x265/0x440 [ 378.406009][T14386] ? __pfx_do_futex+0x10/0x10 [ 378.406031][T14386] ? __pfx_sr_block_ioctl+0x10/0x10 [ 378.406068][T14386] __ia32_sys_futex_time32+0x2f4/0x470 [ 378.406087][T14386] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 378.406104][T14386] ? __might_fault+0xc5/0x140 [ 378.406128][T14386] __do_fast_syscall_32+0x14b/0x8c0 [ 378.406148][T14386] do_fast_syscall_32+0x32/0x70 [ 378.406166][T14386] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 378.406181][T14386] RIP: 0023:0xf73defbc [ 378.406191][T14386] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 378.406201][T14386] RSP: 002b:00000000f53f65bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 378.406213][T14386] RAX: ffffffffffffffda RBX: 00000000f7404f88 RCX: 0000000000000080 [ 378.406220][T14386] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7404f8c [ 378.406227][T14386] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 378.406234][T14386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.406240][T14386] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 378.406254][T14386] [ 378.484751][T14390] tipc: Enabling of bearer rejected, already enabled [ 378.583659][T14393] fuse: Bad value for 'fd' [ 379.053226][ T41] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 379.204207][ T41] usb 7-1: not running at top speed; connect to a high speed hub [ 379.204251][ T41] usb 7-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 379.205156][ T41] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 379.205169][ T41] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 379.205178][ T41] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 379.205236][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.279696][T14408] openvswitch: netlink: EtherType 0 is less than min 600 [ 379.614124][ T6009] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 379.785350][ T6009] usb 9-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 379.791989][ T6009] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 379.792034][ T6009] usb 9-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 379.792050][ T6009] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 379.792130][ T6009] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.908633][T14416] kernel profiling enabled (shift: 63) [ 379.908646][T14416] profiling shift: 63 too large [ 379.918200][ T41] usb 7-1: string descriptor 0 read error: -71 [ 379.918261][ T41] uvcvideo 7-1:1.0: Found UVC 1.00 device (046d:0825) [ 379.918308][ T41] uvcvideo 7-1:1.0: No valid video chain found. [ 379.920909][ T41] usb 7-1: USB disconnect, device number 36 [ 380.009187][ T6009] cxacru 9-1:1.0: send of cm 0x90 failed (-71) [ 380.009210][ T6009] cxacru 9-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 380.009308][ T6009] cxacru 9-1:1.0: probe with driver cxacru failed with error -22 [ 380.010788][ T6009] usb 9-1: USB disconnect, device number 5 [ 380.486130][T14418] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 380.587787][T14423] rxe_eth0 speed is unknown, defaulting to 1000 [ 380.716743][T14423] virt_wifi0 speed is unknown, defaulting to 1000 [ 380.734174][T14421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2577'. [ 380.756492][T14427] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 380.780577][T14427] pci 0000:00:03.0: BAR 0 [io 0x2020-0x203f] [ 380.780701][T14427] pci 0000:00:03.0: BAR 1 [mem 0x81085000-0x81085fff] [ 380.780989][T14427] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref] [ 380.807739][T14427] pci 0000:00:03.0: Adding to iommu group 3 [ 380.817545][T14427] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned [ 380.819985][T14427] pci 0000:00:03.0: BAR 1 [mem 0x81085000-0x81085fff]: assigned [ 380.820118][T14427] pci 0000:00:03.0: BAR 0 [io 0x2020-0x203f]: assigned [ 381.033149][ T6009] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 381.088068][T14432] netlink: 'syz.0.2579': attribute type 6 has an invalid length. [ 381.183132][ T6009] usb 9-1: Using ep0 maxpacket: 32 [ 381.183644][ T6009] usb 9-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 381.189542][ T6009] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.189556][ T6009] usb 9-1: Product: syz [ 381.189564][ T6009] usb 9-1: Manufacturer: syz [ 381.189571][ T6009] usb 9-1: SerialNumber: syz [ 381.299497][T14443] rxe_eth0 speed is unknown, defaulting to 1000 [ 381.382553][T14443] virt_wifi0 speed is unknown, defaulting to 1000 [ 381.432241][ T6009] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 381.433662][ T6009] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 381.466975][ T6009] usb 9-1: USB disconnect, device number 6 [ 381.504875][T14137] udevd[14137]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 381.537659][T14450] Invalid ELF header magic: != ELF [ 381.626459][T14450] overlay: Unknown parameter '/' [ 382.088700][T14455] dlm: plock device version mismatch: kernel (1.2.0), user (1.2147483648.0) [ 382.347004][T14460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2588'. [ 382.760051][T14463] rxe_eth0 speed is unknown, defaulting to 1000 [ 382.870287][T14469] team0: Device xfrm0 is of different type [ 382.901474][T14463] virt_wifi0 speed is unknown, defaulting to 1000 [ 383.187589][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2593'. [ 383.913457][T14492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2597'. [ 386.063984][T14537] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2610'. [ 386.094813][ T5801] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 386.094933][ T5801] Bluetooth: hci0: Injecting HCI hardware error event [ 386.096279][ T5801] Bluetooth: hci0: hardware error 0x00 [ 386.180084][T14539] FAULT_INJECTION: forcing a failure. [ 386.180084][T14539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.180116][T14539] CPU: 3 UID: 0 PID: 14539 Comm: syz.2.2611 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 386.180140][T14539] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 386.180146][T14539] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 386.180153][T14539] Call Trace: [ 386.180157][T14539] [ 386.180162][T14539] dump_stack_lvl+0x100/0x190 [ 386.180181][T14539] should_fail_ex.cold+0x5/0xa [ 386.180197][T14539] _copy_to_user+0x32/0xd0 [ 386.180214][T14539] simple_read_from_buffer+0xcb/0x170 [ 386.180231][T14539] proc_fail_nth_read+0x1af/0x230 [ 386.180254][T14539] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 386.180272][T14539] ? rw_verify_area+0xce/0x6d0 [ 386.180284][T14539] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 386.180306][T14539] vfs_read+0x1e4/0xb40 [ 386.180328][T14539] ? lock_acquire+0x1d1/0x380 [ 386.180352][T14539] ? __fget_files+0x34/0x3d0 [ 386.180372][T14539] ? __pfx_vfs_read+0x10/0x10 [ 386.180384][T14539] ? find_held_lock+0x2b/0x80 [ 386.180399][T14539] ? __fget_files+0x215/0x3d0 [ 386.180428][T14539] ? __fget_files+0x21f/0x3d0 [ 386.180449][T14539] ksys_read+0x12a/0x250 [ 386.180462][T14539] ? __pfx_ksys_read+0x10/0x10 [ 386.180480][T14539] do_int80_emulation+0x166/0x650 [ 386.180500][T14539] asm_int80_emulation+0x1a/0x20 [ 386.180511][T14539] RIP: 0023:0xf71577ab [ 386.180521][T14539] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 386.180532][T14539] RSP: 002b:00000000f54164bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 386.180544][T14539] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54165d0 [ 386.180551][T14539] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 386.180557][T14539] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 386.180563][T14539] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 386.180570][T14539] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 386.180585][T14539] [ 386.314346][T14541] syzkaller1: entered promiscuous mode [ 386.314359][T14541] syzkaller1: entered allmulticast mode [ 386.650192][T14546] 9p: Bad value for 'rfdno' [ 386.656233][T14546] FAULT_INJECTION: forcing a failure. [ 386.656233][T14546] name failslab, interval 1, probability 5, space 0, times 0 [ 386.656253][T14546] CPU: 3 UID: 0 PID: 14546 Comm: syz.0.2613 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 386.656269][T14546] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 386.656274][T14546] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 386.656281][T14546] Call Trace: [ 386.656286][T14546] [ 386.656290][T14546] dump_stack_lvl+0x100/0x190 [ 386.656310][T14546] should_fail_ex.cold+0x5/0xa [ 386.656325][T14546] should_failslab+0xc2/0x120 [ 386.656342][T14546] __kmalloc_noprof+0xfc/0x840 [ 386.656355][T14546] ? rcu_is_watching+0x13/0xc0 [ 386.656369][T14546] ? tomoyo_realpath_from_path+0xb6/0x690 [ 386.656391][T14546] tomoyo_realpath_from_path+0xb6/0x690 [ 386.656412][T14546] tomoyo_path_number_perm+0x23c/0x580 [ 386.656426][T14546] ? tomoyo_path_number_perm+0x22e/0x580 [ 386.656442][T14546] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 386.656458][T14546] ? __lock_acquire+0x5c0/0x1f40 [ 386.656479][T14546] ? __lock_acquire+0x5c0/0x1f40 [ 386.656502][T14546] ? __fget_files+0x34/0x3d0 [ 386.656518][T14546] ? find_held_lock+0x2b/0x80 [ 386.656531][T14546] ? __fget_files+0x215/0x3d0 [ 386.656545][T14546] ? hook_file_ioctl_common+0x140/0x440 [ 386.656561][T14546] ? __fget_files+0x215/0x3d0 [ 386.656578][T14546] ? __fget_files+0x21f/0x3d0 [ 386.656596][T14546] security_file_ioctl_compat+0xd3/0x230 [ 386.656612][T14546] __ia32_compat_sys_ioctl+0xc2/0x360 [ 386.656627][T14546] __do_fast_syscall_32+0x14b/0x8c0 [ 386.656647][T14546] do_fast_syscall_32+0x32/0x70 [ 386.656665][T14546] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 386.656679][T14546] RIP: 0023:0xf73defbc [ 386.656688][T14546] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 386.656699][T14546] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 386.656711][T14546] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000005412 [ 386.656718][T14546] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 386.656724][T14546] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 386.656731][T14546] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 386.656737][T14546] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 386.656751][T14546] [ 386.656756][T14546] ERROR: Out of memory at tomoyo_realpath_from_path. [ 386.830402][T14535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2608'. [ 387.188363][T14555] fuse: Unknown parameter 'grou00000000000000000000' [ 387.220291][T14557] FAULT_INJECTION: forcing a failure. [ 387.220291][T14557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.220324][T14557] CPU: 2 UID: 0 PID: 14557 Comm: syz.4.2617 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 387.220349][T14557] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 387.220357][T14557] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 387.220369][T14557] Call Trace: [ 387.220375][T14557] [ 387.220382][T14557] dump_stack_lvl+0x100/0x190 [ 387.220409][T14557] should_fail_ex.cold+0x5/0xa [ 387.220433][T14557] _copy_from_user+0x2e/0xd0 [ 387.220452][T14557] get_compat_msghdr+0xb3/0x480 [ 387.220468][T14557] ? __pfx_get_compat_msghdr+0x10/0x10 [ 387.220485][T14557] ? __lock_acquire+0x5c0/0x1f40 [ 387.220506][T14557] ___sys_recvmsg+0x193/0x1a0 [ 387.220521][T14557] ? __pfx____sys_recvmsg+0x10/0x10 [ 387.220536][T14557] ? lock_acquire+0x1d1/0x380 [ 387.220563][T14557] do_recvmmsg+0x548/0x750 [ 387.220580][T14557] ? __pfx_do_recvmmsg+0x10/0x10 [ 387.220596][T14557] ? find_held_lock+0x2b/0x80 [ 387.220609][T14557] ? ksys_write+0x190/0x250 [ 387.220623][T14557] ? ksys_write+0x190/0x250 [ 387.220641][T14557] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 387.220661][T14557] __sys_recvmmsg+0x21f/0x270 [ 387.220673][T14557] ? __pfx___sys_recvmmsg+0x10/0x10 [ 387.220685][T14557] ? __might_fault+0xc5/0x140 [ 387.220703][T14557] ? __might_fault+0xc5/0x140 [ 387.220722][T14557] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 387.220739][T14557] ? __might_fault+0x111/0x140 [ 387.220756][T14557] __do_fast_syscall_32+0x14b/0x8c0 [ 387.220773][T14557] ? lockdep_hardirqs_on+0x7d/0x110 [ 387.220790][T14557] do_fast_syscall_32+0x32/0x70 [ 387.220807][T14557] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 387.220821][T14557] RIP: 0023:0xf73defbc [ 387.220831][T14557] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 387.220846][T14557] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 387.220859][T14557] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800037c0 [ 387.220866][T14557] RDX: 0000000000000001 RSI: 0000000002040000 RDI: 0000000000000000 [ 387.220872][T14557] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 387.220879][T14557] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 387.220885][T14557] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 387.220899][T14557] [ 387.748521][T14574] netlink: 'syz.0.2623': attribute type 2 has an invalid length. syzkaller syzkaller login: [ 388.173391][ T5801] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 388.538044][T14583] gadgetfs: bound to dummy_udc driver [ 388.542558][T14585] fuse: Unknown parameter 'grou00000000000000000000' [ 388.548088][T14583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2627'. [ 388.567963][T14583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2627'. [ 388.722096][T14597] FAULT_INJECTION: forcing a failure. [ 388.722096][T14597] name fail_futex, interval 1, probability 0, space 0, times 0 [ 388.722130][T14597] CPU: 3 UID: 0 PID: 14597 Comm: syz.4.2632 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 388.722157][T14597] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 388.722165][T14597] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 388.722176][T14597] Call Trace: [ 388.722183][T14597] [ 388.722192][T14597] dump_stack_lvl+0x100/0x190 [ 388.722221][T14597] should_fail_ex.cold+0x5/0xa [ 388.722247][T14597] get_futex_key+0x1c9/0x13e0 [ 388.722273][T14597] ? __pfx_get_futex_key+0x10/0x10 [ 388.722293][T14597] ? __mutex_unlock_slowpath+0x35d/0x930 [ 388.722327][T14597] futex_wake+0xf4/0x5e0 [ 388.722356][T14597] ? __pfx_futex_wake+0x10/0x10 [ 388.722387][T14597] ? detach_task_ctx_data+0x83/0x490 [ 388.722419][T14597] do_futex+0x2b2/0x440 [ 388.722443][T14597] ? __pfx_do_futex+0x10/0x10 [ 388.722464][T14597] ? __might_fault+0xc5/0x140 [ 388.722499][T14597] mm_exit_exec_release+0x256/0x2f0 [ 388.722531][T14597] do_exit+0x6d8/0x2a00 [ 388.722555][T14597] ? __pfx_do_exit+0x10/0x10 [ 388.722574][T14597] ? do_raw_spin_lock+0x128/0x260 [ 388.722612][T14597] ? find_held_lock+0x2b/0x80 [ 388.722634][T14597] ? get_signal+0x7db/0x21d0 [ 388.722663][T14597] do_group_exit+0xd5/0x2a0 [ 388.722685][T14597] get_signal+0x1ebd/0x21d0 [ 388.722721][T14597] ? __pfx_get_signal+0x10/0x10 [ 388.722749][T14597] ? do_futex+0x190/0x440 [ 388.722775][T14597] arch_do_signal_or_restart+0x91/0x7a0 [ 388.722802][T14597] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 388.722842][T14597] exit_to_user_mode_loop+0x139/0x700 [ 388.722863][T14597] ? rcu_is_watching+0x13/0xc0 [ 388.722889][T14597] __do_fast_syscall_32+0x5b0/0x8c0 [ 388.722920][T14597] do_fast_syscall_32+0x32/0x70 [ 388.722952][T14597] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 388.722975][T14597] RIP: 0023:0xf73defbc [ 388.722990][T14597] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 388.723007][T14597] RSP: 002b:00000000f53f65bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 388.723026][T14597] RAX: fffffffffffffe00 RBX: 00000000f7404f88 RCX: 0000000000000080 [ 388.723038][T14597] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7404f8c [ 388.723049][T14597] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 388.723075][T14597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.723086][T14597] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 388.723112][T14597] [ 388.843808][T14600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2633'. [ 388.887619][T14604] macsec1: entered allmulticast mode [ 388.887640][T14604] veth1_macvtap: entered allmulticast mode [ 388.889425][T14604] veth1_macvtap: left allmulticast mode [ 389.076876][T14612] netlink: 'syz.0.2638': attribute type 4 has an invalid length. [ 389.094164][ T5834] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 389.243150][ T5834] usb 7-1: Using ep0 maxpacket: 16 [ 389.243874][ T5834] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 389.246449][ T5834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.246462][ T5834] usb 7-1: Product: syz [ 389.246471][ T5834] usb 7-1: Manufacturer: syz [ 389.246482][ T5834] usb 7-1: SerialNumber: syz [ 389.453890][ T5834] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 389.455348][ T5834] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 389.455902][ T5834] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 389.456036][ T5834] usb 7-1: media controller created [ 389.461513][ T5834] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 389.463305][ T6009] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 389.509749][T14624] fuse: Unknown parameter 'group_i00000000000000000000' [ 389.624845][ T6009] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 389.625714][ T6009] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.625738][ T6009] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 389.625750][ T6009] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 389.625771][ T6009] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.685715][ T5834] zl10353_read_register: readreg error (reg=127, ret==-110) [ 389.704905][ T5834] dvb_usb_gl861 7-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 389.706274][ T5834] usb 7-1: USB disconnect, device number 37 [ 389.832583][ T6009] cxacru 5-1:1.0: send of cm 0x90 failed (-71) [ 389.832605][ T6009] cxacru 5-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 389.832686][ T6009] cxacru 5-1:1.0: probe with driver cxacru failed with error -22 [ 389.843668][ T6009] usb 5-1: USB disconnect, device number 33 [ 389.887265][T14632] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.890085][T14632] bridge_slave_0 (unregistering): left allmulticast mode [ 389.890102][T14632] bridge_slave_0 (unregistering): left promiscuous mode [ 389.890139][T14632] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.900333][T14635] tipc: Enabling of bearer rejected, already enabled [ 390.194252][T14645] fuse: Unknown parameter 'group_i00000000000000000000' [ 390.623244][ T5834] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 390.662306][T14654] FAULT_INJECTION: forcing a failure. [ 390.662306][T14654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.662330][T14654] CPU: 2 UID: 0 PID: 14654 Comm: syz.2.2654 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 390.662348][T14654] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 390.662353][T14654] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 390.662360][T14654] Call Trace: [ 390.662364][T14654] [ 390.662369][T14654] dump_stack_lvl+0x100/0x190 [ 390.662388][T14654] should_fail_ex.cold+0x5/0xa [ 390.662404][T14654] strncpy_from_user+0x3b/0x2d0 [ 390.662437][T14654] do_getname+0x78/0x390 [ 390.662451][T14654] __ia32_compat_sys_execveat+0xc4/0x130 [ 390.662472][T14654] __do_fast_syscall_32+0x14b/0x8c0 [ 390.662489][T14654] ? lockdep_hardirqs_on+0x7d/0x110 [ 390.662506][T14654] do_fast_syscall_32+0x32/0x70 [ 390.662524][T14654] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 390.662539][T14654] RIP: 0023:0xf7f65fbc [ 390.662548][T14654] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 390.662559][T14654] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000166 [ 390.662571][T14654] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080002340 [ 390.662578][T14654] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 390.662585][T14654] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 390.662591][T14654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.662598][T14654] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 390.662612][T14654] [ 390.709266][T14657] tipc: Enabling of bearer rejected, already enabled [ 390.793174][ T5834] usb 5-1: Using ep0 maxpacket: 32 [ 390.795007][ T5834] usb 5-1: unable to get BOS descriptor or descriptor too short [ 390.795032][ T5834] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 390.795851][ T5834] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 390.795865][ T5834] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 390.795876][ T5834] usb 5-1: config 14 has no interface number 0 [ 390.795885][ T5834] usb 5-1: config 14 has no interface number 1 [ 390.795912][ T5834] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 390.795925][ T5834] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 390.795940][ T5834] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 390.795955][ T5834] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 390.795971][ T5834] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 390.795986][ T5834] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 390.796000][ T5834] usb 5-1: config 14 interface 57 has no altsetting 0 [ 390.796010][ T5834] usb 5-1: config 14 interface 228 has no altsetting 0 [ 390.797678][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.797692][ T5834] usb 5-1: Product: syz [ 390.797700][ T5834] usb 5-1: Manufacturer: syz [ 390.797708][ T5834] usb 5-1: SerialNumber: syz [ 390.977286][T14665] fuse: Unknown parameter 'group_i00000000000000000000' [ 391.202571][ T5834] legousbtower 5-1:14.57: interrupt endpoints not found [ 391.404489][ T57] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 391.563778][ T57] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 391.564831][ T57] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.564912][ T57] usb 7-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 391.564929][ T57] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 391.564961][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.605125][ T5834] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178 [ 391.606373][ T5834] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 391.773151][ T57] cxacru 7-1:1.0: send of cm 0x90 failed (-71) [ 391.773174][ T57] cxacru 7-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 391.773275][ T57] cxacru 7-1:1.0: probe with driver cxacru failed with error -22 [ 391.775004][ T57] usb 7-1: USB disconnect, device number 38 [ 392.167583][T14692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.169804][T14692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.311835][T14698] fuse: Unknown parameter 'group_id00000000000000000000' [ 393.073198][ T5834] usb 7-1: new low-speed USB device number 39 using dummy_hcd [ 393.225677][ T5834] usb 7-1: unable to get BOS descriptor or descriptor too short [ 393.225720][ T5834] usb 7-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 393.226804][ T5834] usb 7-1: config 142 has an invalid interface number: 251 but max is 0 [ 393.226826][ T5834] usb 7-1: config 142 has no interface number 0 [ 393.226859][ T5834] usb 7-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 393.226883][ T5834] usb 7-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 393.226903][ T5834] usb 7-1: config 142 interface 251 has no altsetting 0 [ 393.229837][ T5834] usb 7-1: string descriptor 0 read error: -22 [ 393.229941][ T5834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.232818][T14711] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 393.236814][ T5834] cypress_m8 7-1:142.251: HID->COM RS232 Adapter converter detected [ 393.240091][ T5834] cyphidcom ttyUSB0: required endpoint is missing [ 393.339704][T14720] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2673'. [ 393.423969][T14721] bridge0: port 3(netdevsim0) entered blocking state [ 393.424470][T14721] bridge0: port 3(netdevsim0) entered disabled state [ 393.425250][T14721] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 393.430440][T14721] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 393.432958][T14721] bridge0: port 3(netdevsim0) entered blocking state [ 393.433001][T14721] bridge0: port 3(netdevsim0) entered forwarding state [ 393.450672][ T5834] usb 5-1: USB disconnect, device number 34 [ 393.479703][ T5834] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 393.545592][T14711] random: crng reseeded on system resumption [ 394.332965][T14735] tipc: Enabling of bearer rejected, already enabled [ 394.484518][ T6009] usb 7-1: USB disconnect, device number 39 [ 394.486324][ T6009] cypress_m8 7-1:142.251: device disconnected [ 394.616288][T14753] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2685'. [ 394.617007][T14754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2684'. [ 394.631605][T14754] 8021q: adding VLAN 0 to HW filter on device bond2 [ 394.641597][T14754] macvlan2: entered promiscuous mode [ 394.641609][T14754] macvlan2: entered allmulticast mode [ 394.642087][T14754] bond2: (slave macvlan2): Opening slave failed [ 394.743196][T14760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2687'. [ 394.939398][T14772] ceph: Path missing in source [ 394.994019][T14775] tipc: Enabling of bearer rejected, already enabled [ 396.157205][T14802] tmpfs: Bad value for 'mpol' [ 396.169301][T14804] gfs2: gfs2 mount does not exist [ 396.172816][T14804] netlink: 'syz.1.2702': attribute type 7 has an invalid length. [ 396.172840][T14804] netlink: 'syz.1.2702': attribute type 5 has an invalid length. [ 396.172849][T14804] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2702'. [ 396.611885][T13865] hid-generic 0003:0001:0001.001F: hidraw1: USB HID v0.01 Mouse [syz1] on syz0 [ 396.835289][T14814] fido_id[14814]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 396.962134][T14818] overlayfs: conflicting options: userxattr,metacopy=on [ 397.102705][T14831] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2712'. [ 397.141267][T14833] FAULT_INJECTION: forcing a failure. [ 397.141267][T14833] name failslab, interval 1, probability 5, space 0, times 0 [ 397.141301][T14833] CPU: 2 UID: 0 PID: 14833 Comm: syz.0.2709 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 397.141328][T14833] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 397.141336][T14833] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 397.141348][T14833] Call Trace: [ 397.141354][T14833] [ 397.141362][T14833] dump_stack_lvl+0x100/0x190 [ 397.141390][T14833] should_fail_ex.cold+0x5/0xa [ 397.141414][T14833] should_failslab+0xc2/0x120 [ 397.141440][T14833] __kmalloc_noprof+0xfc/0x840 [ 397.141463][T14833] ? tomoyo_encode2+0xfb/0x3c0 [ 397.141495][T14833] tomoyo_encode2+0xfb/0x3c0 [ 397.141524][T14833] tomoyo_encode+0x29/0x50 [ 397.141550][T14833] tomoyo_mount_acl+0x14c/0x8b0 [ 397.141571][T14833] ? is_bpf_text_address+0x8a/0x1a0 [ 397.141591][T14833] ? is_bpf_text_address+0x8a/0x1a0 [ 397.141613][T14833] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 397.141642][T14833] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 397.141667][T14833] ? kernel_text_address+0x8d/0x100 [ 397.141710][T14833] ? unwind_get_return_address+0x59/0xa0 [ 397.141735][T14833] ? arch_stack_walk+0xa6/0xf0 [ 397.141759][T14833] ? __lock_acquire+0x5c0/0x1f40 [ 397.141799][T14833] ? tomoyo_mount_permission+0x1f6/0x460 [ 397.141828][T14833] ? tomoyo_domain+0xb2/0x150 [ 397.141846][T14833] ? tomoyo_profile+0x47/0x60 [ 397.141867][T14833] tomoyo_mount_permission+0x214/0x460 [ 397.141898][T14833] ? tomoyo_mount_permission+0x1f6/0x460 [ 397.141926][T14833] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 397.141966][T14833] security_sb_mount+0xdd/0x270 [ 397.141988][T14833] path_mount+0x158/0x2850 [ 397.142017][T14833] ? __pfx_path_mount+0x10/0x10 [ 397.142042][T14833] ? lockdep_hardirqs_on+0x7d/0x110 [ 397.142072][T14833] ? putname+0xb1/0x110 [ 397.142096][T14833] ? kmem_cache_free+0x127/0x6c0 [ 397.142123][T14833] ? __ia32_sys_mount+0x292/0x310 [ 397.142140][T14833] __ia32_sys_mount+0x292/0x310 [ 397.142159][T14833] ? __pfx___ia32_sys_mount+0x10/0x10 [ 397.142180][T14833] ? __might_fault+0x111/0x140 [ 397.142212][T14833] __do_fast_syscall_32+0x14b/0x8c0 [ 397.142238][T14833] ? lockdep_hardirqs_on+0x7d/0x110 [ 397.142266][T14833] do_fast_syscall_32+0x32/0x70 [ 397.142293][T14833] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 397.142317][T14833] RIP: 0023:0xf73defbc [ 397.142333][T14833] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 397.142351][T14833] RSP: 002b:00000000f53d550c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 397.142369][T14833] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000100 [ 397.142382][T14833] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 397.142393][T14833] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 397.142404][T14833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.142415][T14833] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 397.142441][T14833] [ 397.507597][T14842] FAULT_INJECTION: forcing a failure. [ 397.507597][T14842] name failslab, interval 1, probability 5, space 0, times 0 [ 397.507629][T14842] CPU: 1 UID: 0 PID: 14842 Comm: syz.1.2715 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 397.507656][T14842] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 397.507664][T14842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 397.507676][T14842] Call Trace: [ 397.507684][T14842] [ 397.507691][T14842] dump_stack_lvl+0x100/0x190 [ 397.507719][T14842] should_fail_ex.cold+0x5/0xa [ 397.507743][T14842] should_failslab+0xc2/0x120 [ 397.507787][T14842] __kmalloc_noprof+0xfc/0x840 [ 397.507809][T14842] ? __pfx_dynamic_dname+0x10/0x10 [ 397.507831][T14842] ? tomoyo_encode2+0xfb/0x3c0 [ 397.507863][T14842] tomoyo_encode2+0xfb/0x3c0 [ 397.507893][T14842] tomoyo_encode+0x29/0x50 [ 397.507919][T14842] tomoyo_realpath_from_path+0x18c/0x690 [ 397.507953][T14842] tomoyo_path_number_perm+0x23c/0x580 [ 397.507976][T14842] ? tomoyo_path_number_perm+0x22e/0x580 [ 397.508003][T14842] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 397.508028][T14842] ? get_pid_task+0x106/0x250 [ 397.508057][T14842] ? __lock_acquire+0x5c0/0x1f40 [ 397.508098][T14842] ? __fget_files+0x34/0x3d0 [ 397.508122][T14842] ? find_held_lock+0x2b/0x80 [ 397.508142][T14842] ? __fget_files+0x215/0x3d0 [ 397.508164][T14842] ? hook_file_ioctl_common+0x140/0x440 [ 397.508188][T14842] ? __fget_files+0x215/0x3d0 [ 397.508214][T14842] ? __fget_files+0x21f/0x3d0 [ 397.508241][T14842] security_file_ioctl_compat+0xd3/0x230 [ 397.508268][T14842] __ia32_compat_sys_ioctl+0xc2/0x360 [ 397.508292][T14842] __do_fast_syscall_32+0x14b/0x8c0 [ 397.508319][T14842] ? lockdep_hardirqs_on+0x7d/0x110 [ 397.508346][T14842] do_fast_syscall_32+0x32/0x70 [ 397.508394][T14842] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 397.508416][T14842] RIP: 0023:0xf7f47fbc [ 397.508431][T14842] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 397.508449][T14842] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 397.508467][T14842] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 397.508478][T14842] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 397.508488][T14842] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 397.508498][T14842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.508509][T14842] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 397.508533][T14842] [ 397.508755][T14842] ERROR: Out of memory at tomoyo_realpath_from_path. [ 397.696348][T14847] scsi_nl_rcv_msg: discarding partial message [ 398.195307][T14856] device-mapper: table: 248:7: clone: Error opening metadata device (-ENOENT) [ 398.195330][T14856] device-mapper: ioctl: error adding target to table [ 398.256273][T14859] FAULT_INJECTION: forcing a failure. [ 398.256273][T14859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.256295][T14859] CPU: 0 UID: 0 PID: 14859 Comm: syz.4.2721 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 398.256312][T14859] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 398.256316][T14859] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 398.256323][T14859] Call Trace: [ 398.256327][T14859] [ 398.256332][T14859] dump_stack_lvl+0x100/0x190 [ 398.256351][T14859] should_fail_ex.cold+0x5/0xa [ 398.256366][T14859] _copy_from_iter+0x1f4/0x1690 [ 398.256383][T14859] ? __asan_memset+0x23/0x50 [ 398.256396][T14859] ? __pfx__copy_from_iter+0x10/0x10 [ 398.256411][T14859] ? __pfx___alloc_skb+0x10/0x10 [ 398.256435][T14859] netlink_sendmsg+0x8f5/0x10c0 [ 398.256449][T14859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.256464][T14859] ? apparmor_socket_sendmsg+0x165/0x280 [ 398.256481][T14859] ? ____sys_sendmsg+0xa99/0xc30 [ 398.256494][T14859] ____sys_sendmsg+0xa99/0xc30 [ 398.256507][T14859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.256520][T14859] ? __pfx_____sys_sendmsg+0x10/0x10 [ 398.256540][T14859] ___sys_sendmsg+0x190/0x1e0 [ 398.256555][T14859] ? __pfx____sys_sendmsg+0x10/0x10 [ 398.256576][T14859] ? find_held_lock+0x2b/0x80 [ 398.256599][T14859] __sys_sendmsg+0x160/0x210 [ 398.256610][T14859] ? __pfx___sys_sendmsg+0x10/0x10 [ 398.256629][T14859] __do_fast_syscall_32+0x14b/0x8c0 [ 398.256645][T14859] ? lockdep_hardirqs_on+0x7d/0x110 [ 398.256662][T14859] do_fast_syscall_32+0x32/0x70 [ 398.256679][T14859] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 398.256701][T14859] RIP: 0023:0xf73defbc [ 398.256711][T14859] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 398.256721][T14859] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 398.256734][T14859] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 398.256741][T14859] RDX: 0000000000004800 RSI: 0000000000000000 RDI: 0000000000000000 [ 398.256748][T14859] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 398.256754][T14859] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 398.256760][T14859] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 398.256774][T14859] [ 398.606019][T14870] fuse: Bad value for 'user_id' [ 398.606039][T14870] fuse: Bad value for 'user_id' [ 398.643320][ T858] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 398.680598][T14872] tipc: Enabling of bearer rejected, already enabled [ 398.794073][ T858] usb 9-1: Using ep0 maxpacket: 8 [ 398.797225][ T858] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 398.800526][ T858] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.890562][ T858] pvrusb2: Hardware description: Terratec Grabster AV400 [ 398.890582][ T858] pvrusb2: ********** [ 398.890588][ T858] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 398.890598][ T858] pvrusb2: Important functionality might not be entirely working. [ 398.890605][ T858] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 398.890614][ T858] pvrusb2: ********** [ 399.033617][ T2520] pvrusb2: Invalid write control endpoint [ 399.062433][ T2520] pvrusb2: Invalid write control endpoint [ 399.062447][ T2520] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 399.062455][ T2520] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 399.062461][ T2520] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 399.062468][ T2520] pvrusb2: Device being rendered inoperable [ 399.064649][ T2520] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 399.064685][ T2520] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 399.065336][ T2520] pvrusb2: Attached sub-driver cx25840 [ 399.065348][ T2520] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 399.065356][ T2520] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 399.183158][ T64] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 399.232914][ T858] usb 9-1: USB disconnect, device number 7 [ 399.333749][ T64] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 399.334627][ T64] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 399.334655][ T64] usb 7-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 399.334665][ T64] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 399.334694][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.544174][ T64] cxacru 7-1:1.0: send of cm 0x90 failed (-71) [ 399.544195][ T64] cxacru 7-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 399.544274][ T64] cxacru 7-1:1.0: probe with driver cxacru failed with error -22 [ 399.546724][ T64] usb 7-1: USB disconnect, device number 40 [ 399.748463][T14882] mac80211_hwsim hwsim14 syzkaller0: entered promiscuous mode [ 399.748481][T14882] mac80211_hwsim hwsim14 syzkaller0: entered allmulticast mode [ 399.749601][T14882] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2728'. [ 399.751231][T14882] tipc: Enabled bearer , priority 0 [ 399.827498][T14888] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 399.870086][T14894] fuse: Bad value for 'user_id' [ 399.870100][T14894] fuse: Bad value for 'user_id' [ 400.413200][ T5801] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 401.076840][T14904] tipc: Enabling of bearer rejected, already enabled [ 401.140022][T14907] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2738'. [ 401.140821][T14907] sctp: [Deprecated]: syz.0.2738 (pid 14907) Use of struct sctp_assoc_value in delayed_ack socket option. [ 401.140821][T14907] Use struct sctp_sack_info instead [ 401.175101][T14907] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2738'. [ 402.287389][T14933] FAULT_INJECTION: forcing a failure. [ 402.287389][T14933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.287412][T14933] CPU: 2 UID: 0 PID: 14933 Comm: syz.2.2746 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 402.287429][T14933] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 402.287434][T14933] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 402.287440][T14933] Call Trace: [ 402.287444][T14933] [ 402.287449][T14933] dump_stack_lvl+0x100/0x190 [ 402.287468][T14933] should_fail_ex.cold+0x5/0xa [ 402.287484][T14933] strncpy_from_user+0x3b/0x2d0 [ 402.287504][T14933] do_getname+0x78/0x390 [ 402.287517][T14933] user_path_at+0x26/0x60 [ 402.287532][T14933] __ia32_sys_mount+0x1fb/0x310 [ 402.287544][T14933] ? __pfx___ia32_sys_mount+0x10/0x10 [ 402.287559][T14933] __do_fast_syscall_32+0x14b/0x8c0 [ 402.287576][T14933] ? lockdep_hardirqs_on+0x7d/0x110 [ 402.287593][T14933] do_fast_syscall_32+0x32/0x70 [ 402.287611][T14933] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 402.287625][T14933] RIP: 0023:0xf7f65fbc [ 402.287635][T14933] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 402.287647][T14933] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 402.287658][T14933] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 0000000080000100 [ 402.287665][T14933] RDX: 0000000080000140 RSI: 0000000000008000 RDI: 0000000000000000 [ 402.287672][T14933] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 402.287685][T14933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 402.287692][T14933] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 402.287706][T14933] [ 402.443341][ T41] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 402.593936][ T41] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 402.594840][ T41] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 402.594864][ T41] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 402.594875][ T41] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 402.594895][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.622983][T14941] tipc: Enabling of bearer rejected, already enabled [ 402.863311][ T41] cxacru 5-1:1.0: send of cm 0x90 failed (-71) [ 402.863662][ T41] cxacru 5-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 402.866206][ T41] cxacru 5-1:1.0: probe with driver cxacru failed with error -22 [ 403.022169][ T41] usb 5-1: USB disconnect, device number 35 [ 403.323255][T14946] md: array md1 already has disks! [ 403.450924][T14949] ------------[ cut here ]------------ [ 403.450940][T14949] kernel BUG at drivers/md/raid5.c:8114! [ 403.450964][T14949] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 403.459738][T14949] CPU: 2 UID: 0 PID: 14949 Comm: syz.1.2751 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 403.464604][T14949] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 403.467084][T14949] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 403.471354][T14949] RIP: 0010:raid5_run+0x1325/0x1670 [ 403.473657][T14949] Code: 0f 04 e9 82 f4 ff ff 48 c7 44 24 38 00 00 00 00 31 db e9 82 ef ff ff c7 44 24 44 00 00 00 00 e9 e1 fa ff ff e8 ec d8 78 f9 90 <0f> 0b e8 e4 d8 78 f9 90 0f 0b e8 dc d8 78 f9 90 0f 0b 4c 89 ff e8 [ 403.481682][T14949] RSP: 0000:ffffc9000331fa78 EFLAGS: 00010283 [ 403.484243][T14949] RAX: 0000000000000b86 RBX: 0000000000000000 RCX: ffffc90031004000 [ 403.487568][T14949] RDX: 0000000000080000 RSI: ffffffff889491a4 RDI: ffff88804e73cb00 [ 403.490861][T14949] RBP: 0000000000000002 R08: 0000000000000004 R09: 0000000000000005 [ 403.494145][T14949] R10: 0000000000000002 R11: 0000000000000001 R12: 0000000000000005 [ 403.497435][T14949] R13: 0000000000000000 R14: ffff88806e540000 R15: ffff88806e540028 [ 403.500668][T14949] FS: 0000000000000000(0000) GS:ffff8880954c7000(0063) knlGS:00000000f53d5b40 [ 403.504307][T14949] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 403.507051][T14949] CR2: 00000000f53d5da4 CR3: 000000004415a000 CR4: 0000000000352ef0 [ 403.510414][T14949] Call Trace: [ 403.511875][T14949] [ 403.513154][T14949] ? _raw_spin_unlock+0x28/0x50 [ 403.515224][T14949] ? __pfx_get_pers+0x10/0x10 [ 403.517249][T14949] ? lockdep_hardirqs_on+0x7d/0x110 [ 403.519448][T14949] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 403.521919][T14949] md_run+0xc2f/0x2510 [ 403.523647][T14949] ? __pfx_md_run+0x10/0x10 [ 403.525612][T14949] do_md_run+0x36/0x660 [ 403.527385][T14949] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 403.529922][T14949] md_ioctl+0x27e6/0x36c0 [ 403.531779][T14949] ? __pfx_md_ioctl+0x10/0x10 [ 403.533771][T14949] ? do_vfs_ioctl+0x226/0x13e0 [ 403.535801][T14949] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 403.537946][T14949] ? __fget_files+0x34/0x3d0 [ 403.539937][T14949] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 403.542462][T14949] ? __pfx_md_compat_ioctl+0x10/0x10 [ 403.544712][T14949] compat_blkdev_ioctl+0x682/0x7b0 [ 403.546925][T14949] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 403.549347][T14949] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 403.551755][T14949] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 403.554052][T14949] __do_fast_syscall_32+0x14b/0x8c0 [ 403.556251][T14949] do_fast_syscall_32+0x32/0x70 [ 403.558353][T14949] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 403.561013][T14949] RIP: 0023:0xf7f47fbc [ 403.562778][T14949] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 403.570766][T14949] RSP: 002b:00000000f53d550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 403.574267][T14949] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000400c0930 [ 403.577531][T14949] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 403.580858][T14949] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 403.584169][T14949] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 403.587490][T14949] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 403.590837][T14949] [ 403.592162][T14949] Modules linked in: [ 403.594311][T14949] ---[ end trace 0000000000000000 ]--- [ 403.608501][T14949] RIP: 0010:raid5_run+0x1325/0x1670 [ 403.608532][T14949] Code: 0f 04 e9 82 f4 ff ff 48 c7 44 24 38 00 00 00 00 31 db e9 82 ef ff ff c7 44 24 44 00 00 00 00 e9 e1 fa ff ff e8 ec d8 78 f9 90 <0f> 0b e8 e4 d8 78 f9 90 0f 0b e8 dc d8 78 f9 90 0f 0b 4c 89 ff e8 [ 403.608553][T14949] RSP: 0000:ffffc9000331fa78 EFLAGS: 00010283 [ 403.608571][T14949] RAX: 0000000000000b86 RBX: 0000000000000000 RCX: ffffc90031004000 [ 403.608585][T14949] RDX: 0000000000080000 RSI: ffffffff889491a4 RDI: ffff88804e73cb00 [ 403.608598][T14949] RBP: 0000000000000002 R08: 0000000000000004 R09: 0000000000000005 [ 403.608610][T14949] R10: 0000000000000002 R11: 0000000000000001 R12: 0000000000000005 [ 403.608622][T14949] R13: 0000000000000000 R14: ffff88806e540000 R15: ffff88806e540028 [ 403.608636][T14949] FS: 0000000000000000(0000) GS:ffff8880954c7000(0063) knlGS:00000000f53d5b40 [ 403.608687][T14949] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 403.608702][T14949] CR2: 00000000f71b8e10 CR3: 000000004415a000 CR4: 0000000000352ef0 [ 403.608716][T14949] Kernel panic - not syncing: Fatal exception [ 403.650768][T14949] Kernel Offset: disabled [ 403.652590][T14949] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:37:18 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffff88802ae24750 RCX=1ffffffff24d1ec4 RDX=0000000001000101 RSI=ffffffff8c832600 RDI=0000000000000000 RBP=0000000001000000 RSP=ffffc90000007fb8 R8 =0000000000000000 R9 =fffffbfff24d18cb R10=ffffffff9268c65f R11=ffffc90000007ff8 R12=ffff88801df5a580 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81e50280 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880952c7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000081000000 CR3=0000000044ece000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000006ff6bc RBX=ffff88801df62580 RCX=ffffffff8be27325 RDX=0000000000000001 RSI=ffffffff8c832600 RDI=ffffffff81e1a3de RBP=ffffed1003bec4b0 RSP=ffffc9000046fe00 R8 =0000000000000000 R9 =ffffed10055e6825 R10=ffff88802af3412b R11=ffffffff81d85c79 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=dffffc0000000000 RIP=ffffffff8be257bf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880953c7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c374242 CR3=0000000045382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000016000000000 0000000600000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000054 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85ba6275 RDI=ffffffff9cef14e0 RBP=ffffffff9cef14a0 RSP=ffffc9000331f298 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6e69203a73706f4f R12=0000000000000000 R13=0000000000000054 R14=0000000000000004 R15=ffffc9000331f5b0 RIP=ffffffff85ba629f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880954c7000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f53d5da4 CR3=000000004415a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000016000000000 0000000600000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000002000 RBX=ffff888040b68db0 RCX=000000000000000d RDX=ffff8880296c8000 RSI=ffffc90000415134 RDI=ffff8880296c8000 RBP=ffff88802a759038 RSP=ffffc90003e47048 R8 =0000000000000005 R9 =000000000000001f R10=000000000000000d R11=0000000000000012 R12=ffffc90000415100 R13=ffff888040b68e0c R14=ffff888040b68db8 R15=000000000000000d RIP=ffffffff86ca20df RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f35d4391300 ffffffff 00c00000 GS =0000 ffff8880955c7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000056508f74af40 CR3=0000000053d1c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 805f635f3cf3e30a 9ff2bae5ea588fd5 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b765db077e077cc6 b9446163ad5b2778 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9261bb64e9c322a3 62dc81b2062fb5af ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 037f75634414f572 e88815f052094e8d ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001b40 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7cd2000071aa0000 00f58047fe560080 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 de8d000001000000 010000001cba0080 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fbe8000000f57eb2 0000014f00f57dda ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000000f5808c 00f580680000010d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a2b1ce34cd072195 3772f028da70d4cd ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 63b911d75fd2d99a 692782e5016f8fa5 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=d9573e2dcd52552c 6fd5b8b9c8300b2f d9573e2dcd52552c 6fd5b8b9c8300b2f d9573e2dcd52552c 6fd5b8b9c8300b2f d9573e2dcd52552c 6fd5b8b9c8300b2f ZMM18=bc74c1a3f825fe01 0b5d6e389819b1b1 bc74c1a3f825fe01 0b5d6e389819b1b1 bc74c1a3f825fe01 0b5d6e389819b1b1 bc74c1a3f825fe01 0b5d6e389819b1b1 ZMM19=9113000000000000 0000000000000004 9113000000000000 0000000000000003 9113000000000000 0000000000000002 9113000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80020880a2d39408 0001000000080606 012bb404040062a0 0300000000000030 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 72656c6c616b7a79 7301ffffffffffff ffffdf0862800300 0400218284080061 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 800201c708000800 4ff6006e75742f74 656e2f7665642f01 ffffffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7380037380027280 037280026f900302 8008006f88030008 007098037c080070 ZMM25=0b5d6e380b5d6e38 0b5d6e380b5d6e38 0b5d6e380b5d6e38 0b5d6e380b5d6e38 0b5d6e380b5d6e38 0b5d6e380b5d6e38 0b5d6e380b5d6e38 0b5d6e380b5d6e38 ZMM26=f825fe01f825fe01 f825fe01f825fe01 f825fe01f825fe01 f825fe01f825fe01 f825fe01f825fe01 f825fe01f825fe01 f825fe01f825fe01 f825fe01f825fe01 ZMM27=bc74c1a3bc74c1a3 bc74c1a3bc74c1a3 bc74c1a3bc74c1a3 bc74c1a3bc74c1a3 bc74c1a3bc74c1a3 bc74c1a3bc74c1a3 bc74c1a3bc74c1a3 bc74c1a3bc74c1a3 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=9013000090130000 9013000090130000 9013000090130000 9013000090130000 9013000090130000 9013000090130000 9013000090130000 9013000090130000