last executing test programs: 12.963496922s ago: executing program 3 (id=1811): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r1, 0x4038ae7a, &(0x7f0000000580)=' \x00\x00\x00\x00\x00\x00@') ioctl(r2, 0x4048aecb, &(0x7f00000005c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$dri(&(0x7f00000003c0), 0xd21, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000400)={0x0, 0x0, r3}) r4 = openat$binderfs_log(0xffffff9c, &(0x7f0000000000)='./binderfs/binder_logs/transactions_hashed\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1a, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3, 0x0, 0x0, 0x0, 0x18}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffa}, {0x85, 0x0, 0x0, 0x12}}]}, &(0x7f0000000340)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x3d}, 0x94) read(r4, &(0x7f0000000040)=""/49, 0x31) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) setresuid(0x0, 0xee01, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000440)={0xa, 0x0, 0x0, @empty, 0x2}, 0x20) connect$l2tp6(r6, &(0x7f0000000480)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) cachestat(r5, &(0x7f0000000380)={0xffffffffffffffff, 0x3}, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r7, &(0x7f0000000080)=0x5, r7, &(0x7f00000000c0)=0xb6, 0x7fffffff, 0x4) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000005c0)={@empty, @private, 0x0}, &(0x7f0000000600)=0xc) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@bridge_dellink={0x44, 0x11, 0x400, 0x70bd2c, 0x255fdbfe, {0x7, 0x0, 0x0, r8, 0x1084, 0x200}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'team_slave_0\x00'}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xf173}, @IFLA_CARRIER={0x5, 0x21, 0x2}]}, 0x44}}, 0x24000000) 12.490551818s ago: executing program 3 (id=1813): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x4e, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d020002", @ANYRES16=r0], 0x0) ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x4, 0x208002) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000800000043000e007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0xffffffffffffffff, 0x2000403, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x2000000000000000}, 0x0) r4 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x8001, 0x30, 0x80000000, 0x53b}, &(0x7f0000000280)=0x18) shmctl$IPC_INFO(r4, 0x3, 0x0) shmat(r4, &(0x7f0000ffb000/0x3000)=nil, 0x7000) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000000000)={0x6, 'veth1_vlan\x00', {}, 0xdd3c}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x154, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0xd, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x128, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x10, 0x7d, 0x8, 0xe, 0x8}}, @TCA_RED_STAB={0x104}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}]}}]}, 0x154}}, 0x0) ioctl$NILFS_IOCTL_RESIZE(r2, 0x40086e8b, 0x0) 9.103114649s ago: executing program 3 (id=1819): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac-aes-ce\x00'}, 0x58) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000300)=0x90000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r4, &(0x7f0000001dc0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xc1db, 0xfffffffffffffffe) 8.83208608s ago: executing program 1 (id=1820): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x10, 0x2, 0x158}, &(0x7f00000020c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb41f, 0x2000, 0x3, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r5, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) open(0x0, 0x480920, 0x146) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r10, &(0x7f0000000040)=ANY=[], 0xffffff6a) unshare(0x22020600) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) fsync(r11) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r12, &(0x7f0000000200)='hd3ss3220 0x4', 0xd) r13 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0x1, 0x0) write(r13, &(0x7f0000000440)="300000377bd408cd08a9880b4e3ea2d1a94e5e81580e", 0x16) splice(r9, 0x0, r0, 0x0, 0x40010003, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) 8.589306918s ago: executing program 2 (id=1821): openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x2, 0x7, 0x2) socket(0x10, 0x2, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000180)=""/111, 0x6f}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) recvmmsg(r1, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=""/216, 0x34}, 0x10001}], 0x2, 0x40010000, 0x0) clock_adjtime(0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000000340)={0x1ff, 0x5, 0x1, {0x1, @pix={0xff, 0xa, 0x31324d4e, 0x0, 0x9, 0xffffff61, 0x9, 0x9, 0x0, 0x7, 0x2, 0x6}}, 0xd5a}) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x4000, 0x4) sendmmsg$alg(r3, &(0x7f0000001240)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@iv={0x10}, @iv={0x10}], 0x20, 0x4880}, {0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000780)="a27e751b506316d107c78c782937d6f33110862675b0cf4dd973f8161521f90c77ae4f26", 0x24}, {&(0x7f00000007c0)="946bcac2250f0a616e8f94e1baf7b9138cced2ccf8f2b4fe1e1a49f73250e614790249b84c8ee0ac47c0522e6c5da4f2f6b159d442a2d87aea70f7bdaf01436c4dce087aaff4696c77b8e973c587ecd7bb5fb2112e02f5df43bfa918e9f3026c9dff6f89975f76fcbecb71b5e8513c81f57cdeb0f24b6f767bc017ceea83", 0x7e}], 0x3, &(0x7f0000000880)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, {0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="3398a4", 0x3}], 0x1, &(0x7f0000000940)=[@assoc={0x10, 0x117, 0x4, 0x9}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10}], 0x30, 0x804c044}, {0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000a00)="a0ea6ea3427cef817dd7f81fd0efb568b0042fa10ff6e6e4e392e66e8a34d95fe4c9992b92ec54c266480c85ff0a76466f1ce133f0cc4a6590e68fe866b01294bbcd429977fc947d8c9303e5c96ce7a2457b795806086a68f4f32f4b2176d8ba50d133f85ead618af914d9787ba92896babebf4051c3f9e2c84e15ef7a0b9d30129b4d5d9e254dc15d6614384e817bf75584609c24a00c06c9d319", 0x9b}, {&(0x7f0000000ac0)="22509617adb91afa439b1f9b00ab2e15ab77ecc52cf6f6a79073d4a1f8166a86c20833c2527209467f628723fdbb88bad4b80d4c8a63d029eefb08cf461f2d433478", 0x42}, {&(0x7f0000000b40)="059af19a024c264d6e2a18d4bdcf804e2a17fee1863f29cda5134d6197b20382f5ff8b4d346a3bcf96877ea76e6ce26157409b0aca740a4806e568b7b16951be81bc3ea73611fe43127c2a8bb9b80c3b040dd6c4ba23f70ec96b57444fe9ccd69c5d43024e04ab16d43d6b7147ccfc448f573f5427a47cf6e7360ae611cf13d8cf03c736daaadc8187a36c559901c37f67d42921a2c8ff5c2d1f417d40b047b97ee0087bc2b896c44822e3876a58e27b32645bc00ad073733b35f160c47a569b7bb06ad4d65bd64dc2b6295132bb035fce916b5a230d3b6b308b122e360d7b8a28a2", 0xe2}, {0x0}, {&(0x7f0000000d40)="e6195fc805a6f8c49b717a2366b3610d2f1b646ffc85b7155922cdecf64ecd4d21849bcbfe4b8a5e4bbe74ea48beb9330f6ef93d5de44210850678c387ee6fdd0ed5efade60c12cf6cb08c683343934f1fc156a85e2c243d1abb962a425de7a1d2a7fc91e8c8928825204bf4615cf7e06d754e7e42cbca7b3c776c20174c5c8f8324b08633a7e517f6fbde324c557b78280872b174f30ee2fd8c06a7be9cd2", 0x9f}, {&(0x7f0000000e00)="9f151fd0f92644ca6a7fa73237bff578a7875549783e18c77f5d88a2323668c9334e5450243cfff2df0d5d1ebcc6052ae3e0edbc082b6e3163418151b361bd166bbde8b59a67f88095cacb949d0d68753be0ccfe6b51f180b0b71c098bd0049d74ea0ae906f016a3606b1cf40aa4872e9b30f00a7ce7e51b363651be2c6f59b3d656d7627d34afcdad559c475461c394ac41d328cdccc4f11e8fd078c9b1d1207801e6cbf31922692048e3ac4a84", 0xae}, {&(0x7f0000000ec0)="f9bee3476b931125ba7ae463e3c95db05048f2a4a5cd858a744e9058a13c7720eb751bac0f701da57b44befb73d2d5da9e7b9fbd6c544f2cb45df193860fd17352c817740c817af933b1cb9f2a83f81e013b0a369869c6ea4c83e01703d5900be2d6beda7efd6cc05677c70146b3771c5b9a1f0b72fd72fd35dbec03f7201b919810cbc3991b36604f72abc45b7eeae32bb72a0ab1d635ea248b0e75bced85d5a4040b776fd2ecda93974fba7f", 0xad}], 0x7, &(0x7f0000001140)=[@op={0x10}, @iv={0xa4, 0x117, 0x2, 0x91, "ce0faff8d5f8795f6467cda21010882ca780911951398e64c9322a6af2f3b766d1abba4dee1c7c5a883aaadba192581e7a1d2a90d97d3ef1a2d97de1010061888c0b016b9a17bc624b7ac63fd7f4d50a02f58a1c639c4e3a3fb3206ad7326b2eb150391e18285943f0ca2f1703d893ff4b593a9d71358f359b6998c020704356647b5239d7dc96072c2c285ce633fe8c3e"}, @op={0x10}], 0xc4, 0x4800}], 0x4, 0x190) 8.179269853s ago: executing program 3 (id=1822): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000040), 0x143) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) kexec_load(0x80, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x40000000, 0x2000000}], 0xa0000) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x1, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xffd8) 8.162088981s ago: executing program 2 (id=1824): ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x80047437, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) inotify_init() syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x329ff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r5, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r4, 0x407, 0x100004) write$eventfd(r4, &(0x7f0000000240), 0xffffff14) 6.885934022s ago: executing program 1 (id=1825): setns(0xc9, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000e8fffffff52affff000000000000"], 0x98) ioctl$DRM_IOCTL_SG_ALLOC(r4, 0xc0086438, &(0x7f0000000100)={0x3}) 6.830580058s ago: executing program 0 (id=1826): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_io_uring_setup(0x111, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x205c) r1 = fsopen(&(0x7f00000022c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0xa) fchdir(r2) r3 = open(&(0x7f0000002300)='./bus\x00', 0x1031c2, 0x0) ftruncate(r3, 0x2007ffb) r4 = open(&(0x7f0000002340)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) fcntl$setsig(r4, 0xa, 0x21) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000180)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000023c0)={0x0, 0x0, 0xfd8b, 0x5}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002400), 0x42, 0x0) write$dsp(r5, &(0x7f0000002440)="5cba91a4", 0xffffffd9) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000002480)={{0x0, 0x989680}, {0x77359400}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002380)='./bus\x00', 0x88882, 0x0) 6.148254865s ago: executing program 2 (id=1827): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x4c840) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r2, &(0x7f0000001480)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14) sendmmsg(r2, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c010) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001500), 0x0, 0x0) ioctl(r3, 0x40186f40, &(0x7f0000001540)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046f41, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, &(0x7f0000001600)={0x80, 0x401, 0x1}) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aa6c00aaaaaaffcedeffffffacf7ffff0800450000340065000000019078ac1e78080000000000020000650a539891df267d824a17a3caf9407c7bdcaab01b4d"], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x20e8401, 0x0) 5.938632337s ago: executing program 1 (id=1828): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000080)=0x8b, 0x100000500) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000006680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000002740)={r0, &(0x7f0000002600)=']\x00', 0x202000, &(0x7f0000002680)={@align=0x5, {0x1f4, 0x8, 0x2, 0x5}}, 0x1, &(0x7f00000026c0)={@_ha_fsid}, &(0x7f0000002700)=0x9}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002780)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006700)={0x0, 0x0, &(0x7f0000006740)={&(0x7f0000006780)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x4, 0x4}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xfffffd70, 0x2, {0x0, 0x1003}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x10000000) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) r7 = syz_open_dev$vim2m(0x0, 0x3ff, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r7, 0xc0d05640, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r8 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r8, &(0x7f0000000440)={0x2, 0x4e22, @empty}, 0x10) listen(r8, 0x9) socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r4, &(0x7f0000000280)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000440), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 5.587131057s ago: executing program 3 (id=1829): socket$netlink(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) set_mempolicy(0x3, 0x0, 0x7) unshare(0x6a040000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x13, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000280)=0x6, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x8, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r2, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0x7fff) ioctl$DVB_DEMUX_DMX_STOP(r2, 0x6f2a) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 5.359804141s ago: executing program 2 (id=1830): syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x5036c2, 0x0) sigaltstack(&(0x7f00000000c0)={0x0, 0x80000001}, 0x0) sigaltstack(0x0, &(0x7f0000000100)={0x0}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x1c3902, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x40041}, 0x8010) sendfile(r1, r1, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000002a80)) setns(0xc9, 0x0) r2 = socket(0x2a, 0x2, 0x9) getpeername$inet6(r2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r3, 0xe503, 0x0) syz_fuse_handle_req(r3, &(0x7f00000003c0)="a95ee66af223165fb85c7a063307d28ba66dd294927c55081f5012d8223e0c009905bba59fcad5c499ccbc3ecf96e9d6ab31713938d657bc1cdd65b0a8c5fbba04f0e4926fc32fede46dcf41865bc66b2b1b353824177c6ad6f47ead9c18951b761a2bf0f17b779c4ade8a3100cdb3f4925ce68a944881cad07ce81e6d4ffd31847a0453b3ce672102b33f5c46bab37c7fb678ba1908052334b225eea595ea982901991c169eb4e0fc23b2a45018e1544c308724adc81d1d22c012fe67aebc0d3157170f2a5eb586f9af8bd80fae3bc2e9bbd9b51a9c32fbc467e2b0a0a840b765938728ba3f6902046443434e9c8a539dbce61dd8fb0e6813208877ac1fc45e9fa75ea6c5e7dc23acf9bf14523cc47de600ab3807ae8162eda1c66cf41d61386817d1483e63591002fabca6c9c1b5201974ea2b404dd54d80e24beadcc9048059c4cb26225eb2ade9e189a1ff40fa7cbb917aab58dcda7cf32bf8ac69a4faaf3a67e06e8736f92700608e1bc38d092a18d914881fd0a17e65d465f0c3cbeb987ae1fda981203d792fe5708993cdf5648f94cf23024caa3fc99d7fe6a6a434d5dab60192987ec3f55bedb08c40078e2f5e1c9e0b033f48ee56d00336f997c17a2f976d57193ec8b3132e8ee249c3dcba95e737127c7e2cd8cd6eea30688d627637e82c27b26110c0c61631d0fe0eb8c600023e8e4f0fe495a8666baa4e3cf9de28e4d95d7b7edea0d8f1b19fcff477164bf6abb3d28485398e02dc4b003de2046aa16a808c077f59a35c0ee44d5e6958b57b60b5fe2980cb0f870395c904e735f7c726d48de3bc2b558bce111f913cbdc65e9a6fdd51f0cb6079a4e6048c61a4dba2fc6cce6e3b93d86e312bb43c30a01c0cfc72ebdc3e18781238b159d08ea32fd37fb352f5943b4a22133586ada296c9ec1a3580d9dd59569496194e8f87f95474263ee6313a8eac98de06426c0f5ff00fee25a915e899e9d99b4ca4d52204498a0c8f877adb92cce1010403ad8c53d6162202a09a099930fc4dfb3246f46134993aeae1e49f2e8b0ccb30ea1b09e12dafa24530b8844473ec04d666e8a7e1c89a1f552d04efe1b85a0bbcc33091460faf098625999c0061eaef184e8b02a96e6206d512870a7fe819dbebf93c00ccbf4357841dbe0343c0850cae8d8d15cfeb3da41bf5682c842f53ca5131545784f1dee5ffcf9b4ccf4cdd037a31e4efdb6524056057ba749cc4208df722c80948a486da031a50d129349fda2549157499b8ee553bd545ec411334b902720ef0a71819ffbf002742151d950df0fe8b2efb5a94133d943286c73adf359659480c438bcf1f7f1bc1ad2dbaa54548aa3d1b4ac7d17e755ca23de9f978f45edaaeff3ade5d122c6029f8406732d1c5cfef450635d3bfa323dd14397fa085e1c928ab84f604bd3c378b2368cb0bf371d41ff1e4982e413bc3f3aedf32237845def41805fe66a5239475f246b1bc91045384aac0dd7c0723c5ed4cb02ff0cd39db2b469790a57582543e5fd8edd24944795cb237b5ec6b09e62e7ec95af1560bbd455416d22accf42ad9fdd5eb9afe198e2a327f69ca3b617eae3c24c0fd7dd36fa9fb3bd111d8d7e5dcf3039fa06b8e3405cc73e90f07660b9aa9748643832784b36d2a1418a453645610fcc816c983065a44e86f3fed8ca3bd5397a1eba72c813a49f45af504f18e85fde740dfc63922baece7e5873beded5755869bebd1f984dade3856c34369529bbab5fc32294d2f68512f0d5d116521f56443637b67587372850ff34f093f7c00376bcd15b9d470502200f81d42a46e711ad001aa1135dee47ee2f38754ea50ac8c98b9cd6f1c1a00f862900af52d9e7007be27b3c095b2e0d880d6ff7fa8bece867dac7deb0080d08d7b31cb905666f36cebe4b8033460823ddfe658319bc26a72f1b55fc8bcf364271cb1f280f9f81abab630f656c1491f70412f735061fa1aaf9d0eb016cc5e7152699ed8e7ea5ff05cdb1c7b8c65ca35d18cb7409425240ede6afa92f211b59a825968b83499bc91db40509367fad75ede35c6553ebd28ef8c9f75a566d8107116af185f555cab0322c108ced7e8012c03916ebf8b563dbe818a2576111a0ff9749627acfe19ae3fdccdeab6349b5c1f106a490c1d128d640a81d8706b66e3a16ee0a4068d9e7102c7724a03ab121d7c93adcf179c5e661b9fd47546f2bc73f92e45b372fdb08d8e958610ad2c4acb1a3ad7bfa236565796b16ef1f9799084f7e60d5396a3a286d207051d325eb5282b54837fef08c7e28a5c38f7d72ad8535166d60e2893f58f704aa5152ea4a6b00b6a26825715156eea616c72c1fbaa46f3df4ebe3696164e47cade8edce9f1f7a509e30f135b3b29bfc849ad66bf05c17d6c8679234a7a53a3d8385c509eaf5709b1558434ad5f73b966c6db4eacf52509de480002b6bc6b65134d9cf378d5820bade7c0f0373b389e06c162745c0cedcea0eda0762697f0e73307cda99d95cd7d2388afcbff6370bf3ca5e3b3393bf5a00780a93699c0cfe0fbac6d809ceca12d95c8d5a9f71c236eea0851113ccecd0a6479350b0589b5bba13bbf4640779751328509f7db504c474392b83afb5bb31d4a4835d108584bbbd914e95851ec020a07d95d5dd51fa2bd3dd51bd706cf054a2b4ca0c2937639fc5a5ee3090d08bcd2335a5e6213e4a11c080373854bbfa7a96efa317884b38675a9891f3256ad8a1f74b64e3dde55e4d5c4775b7adc6ac284203aaf9f6ac12f95aaac02b09b2088ff5d53dfaabf0ce4c6958e97250c91147e266247042da5792e7097bc3210f514954b0dbb5163b1d71a0322fdb2c0d747d4754bc0a7da972b9579233ceed92741bf5b582e349b4aa5ce522d9abfba532f50d68b41e365bcf54b008c384bae1099d4d6ced5e7f4c1b05c7f7151d459ad5eb7dcad282b05a31f4530f2d628f93efad19bd239c06143483646c7b1d1614f700be8593108108a8f28152d48ecd6577bc387935552e396bc563db28454bf358d71eaabe0ebfb46226a3088d8c7ea244b99f8fa643d20fa92d9d0cfa4d6c58002eb18e6cc5c13a07237a218b09fcf16dae2812e9d68cedb4a37e49a8298c3dba5712cc84cf1df6427ecdbe2a9ba2f05951608a02ab7674c4c8bcea2832c89ee71efd66b7b72a04e7d2e6caabc3bccbd9d7ea5a8b95c1a9b8fdb9be258b8dd57e9f4e409445267b2f8a1f991ffe7a4b77c50b8845f1be30356f3de2789fcf49ba4ad46d47b78aeefee7e06ae7d386f115ce0a55bc0ee42d9765c12dcdbe540d41a781dd6d08ca45f27c4a91c65c9a9dbb90b9f9c9e60663e41260792663235e70d9bbe3c485f57522b7c3d13704f662fcc94949825316b814acccef8e18128ccf8834330caee12b376b802aa32214160622339c055d8071eb50c7281991495b72eaf132d0669c7d6b534149016e54d5cd2347121dea8ac60e7b5ca5a53acfb8233242ab6ffa6c01997244ccef3d485c6e5ac4b8a252210822265c1f6b9af893550c163a962bd2ea149a6e9b1ab913446c1a54934ce8f56426a8531df2f07fa73670b78d6213d10a0113864bb15af6568765dab324722a74c87bd18550bdb51663c9d8b6724c9dd1299019fe1d8241c7c9a0200257f3a8593b6830c9ed38ac983908242ec5fed94bc07e6f3cf0fecda556a6685d828343d7b7a2ae6a7ce25a1f0af2e565f4479f791d3bb4944803f5a76a768f3ec71e4aafd217da9d8d32aa2967fa320d67c8aed60cc4b5806439092c1a0cf511918beb0c30ff62a547f8bcea0183ed162ec5a7b2764e5ff49aa93539089ca814cee68ad100dfbfcc5617735be68bb8ea22aee333c88fde3124729047646bab77f08e33c7c70d4d6d023b3091337d0582c75206933ed52ed99bda3d4d5cf48bcc8e683b7c17a19768e8770123731d98c1691e22fc97a0c9ee27eff1ed455e839163ef0195ad8f6d3e653d88b0adaa325f8232787cf38629fc1103ae1e77d453db51f8c16299d68a3230e61138e6c716d7c981f8803c2222ec9d99f476701352bfb497a892398a3c84c87ec43c3494e70c92b8fe6351d73bbe68f73dd1d4168b3b67a277c4e85b2e2d34075dbfe23ed3d6f6520d4987b282c2710423cff7624fee0c5bf6364bcdf2734eb8465ad3abea522a5bc1dd787b812901e286788abb7db6fc25398bd4d6b78657bdf7a602b4706caac46bad88c4a0f6c15c8a60252fc53b3d496707e0857f5c5946ff5fcfa89eb816e1b96b335727f09f164136b367191ad047c3f1f3f5fd487ae535b0284e276c232ad5a6df68eaa8c74d5cde46ba3fb6abf3d42177e4466f18f7a8251f9809e39bcfe0ab07e24c4c7bbd99f70b7252d4a1a34a9aa34fa595871996f31a8e1eea0734e2e60d0871a4eb443a7d434b5a53c0bee62f388f4025ed1d413ae737a0b4d39591b9a5cfc5edefbed55ba21f480b7ecd2db6df235c9c6c2e0da1abacccfd8805839164f2493baf75df275012413bca9ebb38a1c88c600b1dac6cc82b9115ecd597b6b4ab0ae3720c6d9cf13bf96cd56e33898026e60e1b6bf1917b602171fe8bae56c7896aff9a5d65522c91f3478af5643dc563523e397b85f26a573d2d03ec2f63dc9615d3956273196cb4ca3033f1fdea6a95fc6fe95c0042caa07d37e0880a3a3053ea87f1a02e3e4cc062f642adfbd6769f2540c04a99335a0fa452559f27acb146257ae1b93f1c80cb000a71cf87b7a8555f4e77ac4ecd6411051a26b846796fd229417fc456e3e7a64a9d5232b0fa9794616a2bfc67ad9aec0cc361f3bb7dcff27d6815defa96896ad904a3d53b4f39030e3b2b786f82f5d46eda4de74a214d092f7d900a3c8575ff781ee659681d77ff348a21c0bec5ee66fa1abdc32ee75ad4a51a0a0f942c801aeb55ad9567d140e13fc3524648a231d8389c25d3c18550cbd54ef5493dc5a7f6ab8924765086a1e5b69ef6e80d5790f078e999883efbf04825c3326d3b7d54aa453988fa226b31cf19549bebbd46b54716e48c05df7655fbcefe426fd48b0e4867795d1a03df00e7da4245e95630f2cd3d1dbaae5b74ab2795f6ad5ababe632f4ae1abbc97182220a28eb1d108feb52f8326ec2b3abb0ed045fe64b8e302348d3bd561eaaa3a7f6d1aa426a5848f320f026db837d98063724d38a778cabe67caa2b8b7462523620661965fbdf41a2e835e64d484804321754f79e8b56f7af558a9007d8871fd60e2aeb697270d470394e97f43c93f6515e9941fce5c3e020148cabac9a3f257769afa92374b3a8b5420dfbeeb3f4f1d9106cf1f822791fab189d3a769438aa0b8ad58316d02eae97264e4238ea807c578fb215614d60f6d69d23c438854b0e0b47cb820e0deca03a8f5b0221f10b0e7164ca28b60f978ae82beb3fc52bf8f5f9d4bf9ea5a44014ffb3fba5604fb70db687bd7649fbb4b72d2e604b8031eec10d7fd55cf62234d1515905c4ecdcb2073ae480437e134fa65b37f5fc718ea1595510b302f5a750bada2b1b51c5d6c14da8e69f51c5454d3c15f94f5551ba41e402f98c31d8340bc24ce0c2d0857eee2e6699781434f9eca84e52e9dc0345c4c289880c3c7162772d39bfa62cfb8b401e1cf9a241e7afe1ae4fd5e224bb1f4c3c7098753b01c35f9c8fe1e0c3cbe7521b259e403006121e1c3f62d357394267e78209f31fa87e1aa87cf1054119ea364d7b9e82ae84b998860d8fa73da7cf6c58fb4bd754316c39bfdc453fcea16b73c1bc56996b22074fb4a1e944b6dc786e1f1d8460004c1b9abba76cb5ad9c02444d01b628aef339809a93696b8eedc658222b11f0ade5cad02ec734bdfae30421adc690dc0882cada0a1cf5ad9d538f0366232c7aca013ae8bafacda63dbdcf8507b911009829f2ef019e60a2b1236614b25c258ac4b05aa85d69e8cb2bff36728b967b58f70683e0f1f4408edc8c4fef715170c163324489d8fa4684579fb6f175af8ee8f387ff939b750c7dfd4ba62fe715eea3e5ac3ff7d5cf3ffcbea739b85374956b00b38d6f4519390d6b382d3a883c8bb7a62ce654c005744921a082479affd60092aaff76cafe07820c1aa10a0d5ba589eb21f48e09bf5c279c7a3ac6bdb7958cd439f54d5ad369f0eb68e090eb2a6cffbce0d5af05f7afe5336ad069482f8a765823c63a45d345a72b42d5ad50d8d73a3e7f22e717c1e2aca4786d43b0b1dd2651fa46c0a6cceaf8f57f2f132cf49112ea156f6a159978f8cf8e5e9d74caee5530d999c4d0e6e50d6c69b5c57edb78b0a63d6a06eeb499060300da73ca39199cd4bf6412d58bc9344b5cedf7800b6cd84f193a55314bfa047bb93f562955d1b4407781ebe40fef42f6e5401046866391dd9ad8b96dc6915d43d40df4d7ceb43f682afa7c0cce1f944d79e81eba4c01c64334bf50bb26db0992e9265ba022b49fec9f188ea213ee504d666544d0230b1272f5222db08aa5347e985abf2607fee7719a03a3dedea280e2bcc77737562cd18d979992dc3bb32dbcd3bbfbb5896b9d06cffef2ee68cb071e76d2b7ec5123a91fd73e6fb737d887c016782328ee5a85bff817a8f5a769205373e5c63ffb883158be34059deb0bb99960f3f0cf838efd35f265240cfede2ed447fd7ebaf92befa24c74546c3c9b93aa6ead03c7350327a3e0bd049a582028f3ca59fc9fdc2ac7819f8f92da0a48c4184f7d9abd10e7745a1af4457127f997580bbda67a56cf9bb67b5f3ce6b2b62dffc56b47c95886fcbbcf89da58ce694281a9e8bf50fd5878efc3d357e6f4994a9483ec74b536a5f8ccc714b045fcb5b896e1d998ac11e418d23028f088e99845ef0458dbf45f0bfe9a7188bda3bc07a27f25c741d414aae493b191d8721ddb60281c741bebccc12c841b07dfab15481f65e90d4337414112c9ec23bff763b1eca8a1bd6cb6c252b6531e4e096dbebae5a16120867ece7746a7b487216851ce059a8e3aa37dd4885c6b4e0b8ed807dcf62279f1de1b3b834add0ba26a1bbce31199a5b145ae456f84136887ba27b2e3c6d57f1cfedc9e7042a6c5c8d5c67c04c4a0610d09ae7c037cc1c75f355fc5033e434762aa8f4f23d28ac98409deea20c826b7a9317168ab0075503f3022ccbf2296b58bea2242082d3925d6788ef2d56c435b1db3f96a992d3854d5a9e2af29e5a7817b6c7f210ef511071c46fc3f013171d53703ed7ec6258f531c0d00782c8e2b30149e6157f0e898732bf683341a4a768c199f0f8953120e8d2e9ea791b228da103a2f67ec920560436bc306861fdb098c45ae66ebe12db1e27bc5d2e5b4fe530de58e90c2d5c4ab764cfe9312f2397dfb20468d7db6e9e0aa5765ff0bd2b1c1620671f9a9a516f405e0e8ca8c3498cadd75a76786d88a1adcfd91d2e7c302876b5c9d97d2ee8e5b51d73ff20039a3dd4ea244ec37242f3bbe6ebd7c2f9c583885274c0537ae5b3af6cdfd216a7e9c9f3638322e1d4c58c5f0ee9107bd19f50f2435642a9c584d4de9a4ac6cbe5f699144b9521f2669ab0df72a70d1af1ac9369c58bc8f23311bccc7e7b0b32b744135241c397d6796690f064c8e6df5d7593c2e7bb159bd1a7da0ee9002c0b7a52b549777def7e854acb8224d83c4ec769bf45e4c699c680243d6e2e4149341db46acc685f0650de45fcd75f4b0bfbb3eb5bce224f2c04a03b35edad303af6a2ba403abe9daed9bc170363333efbb9ab4725e453df55b3861499a7283c983db6cfacd367df13dbad52a31fce48bfd13ab9982d821ace9a998a2763d9bf4f484d46ca345d81360ea8841adaa5b45feace5db05fed42113647dcbe3c3dfd70f4b3537e77228a5218d9419a94685a504fe61a1169115536eb2682a63675a0a4debcfb29ac169e4a999206bb6d4a4cc5e508534e9ad4295f08f681071d5cdf0edd674ba2a43a60739929ff3e22cfd4675b669b78998cfac88a0392033930f2b788dbdfe11e560ec1a04be8fcde01fb3cf80d93ce1df819a21ff158dd18e9bdc759a59b9f7111245d336963a97ac8bc7c4bc2682c8273204117402f666e9bbf1f0c0edb08bf3e51270876f92067ae8d37bdbf857d4174a4a32de8459e4612ab723d5e52bfe77e44d7faf4b70d7c8102a5b3503460b0865e5ded0c0366d9dbfeb111deeb425c8878798cad64a84f2036dd9a883277a89d368d636ae34b7f9a8ee57f1e563d72645629ec94d5e763b29dfe2e2fcf699eee4224ec6a3881f892e4f3139962b7f8c397dda473c820761f82df111ee571df65e01b697287cbd8d1496cc98f462828cf22fcc14bfa4cedf934920892fac405290ab3ee7eedae9af2a1eb0f45309eec1cafec9d5f9fe10212417e89182cd22474a8b8972520b79728c8b712ee96a809b31a0c08bab2285fcff6d8b8f638f5550cea169055163017e5c3ff238fd5ba7e460b06ca7dd11fcb37829e6c71a29df07a53ecf8a041081977da88a21074dee4cf64132868a3d7c32e4efa49a71d98a4be181b681f22152bbdca36b377baf0c90f8cbf2c32f8dac624e7fa650d3aa974aba48d29b7d352557f5b2d8054c86d36363c00497a6e467ebe863890c6344a8151ca09a0012e8d0f904acba4edcc92d16e021dd24f0d58504152c62ddd21904a039222673e9b3c0a255ecb2c67d919cf50abeeb3ed8d52618d31242b274f96057ae05944ae0a367aeb6a29455c1171f69f7b138d20197216e552f1c11956a9a031539b032ff5d666b2b7203b8441d8e8c2bf325aadd08e01d3eebdcf663d318c3302130299b1cf852edec4300498ed3fc57073309f83490ffc5d2f65cf087f47790e950a6c810a50cdef1b6a4c62c0f40f3bf438d1ad1f0a04a4c28645de82c6fe6174147145ccc180e5989fd5368ea9c90b5b74cbb8acdde83a05f91b943d73f950940f4ba967767533e4093015f9e7c5c2bcf422e83af0d2b718dd15c219e1dad959f88f18b4592a20c396e3862bc8d629b50e670eab0e12460e1bd94e8d192fbbef19d5b5e7244ef274a5192f8e28b28d1ecfdbe6da5c4102f9535edf71a6f5de0f59a7290cecf062a0328154b1fa5ba4dcee2a856de908d9984914c5a05038b4678dc5b202150be8768b33d15f7d380f080ecb406be5e991d83f10f6113ec8ee18a4d269a96f4b30b84d059e6600af3fd36f0cd6afc8b9c0d7673ac8ae164a796ee21e4e1e4ba1d75c64a65de49bf755abe4aa4d832ca23c7833972e8735acb7d31969993437d2cbb7b12cfde845e0fa7a3ec6a9959cb859ae8ec8da9b9b93dfaba08b0bc092a1e75d95ded612837ef01b11d05b649ef903a065bbde06643bb2bb6d352b01b2db6b693941e4a6d955fe01c29c56dbd298146a6ab48c2ad9d0e191c4307c3a68c858f975d6da078c95eee82212b07c1c0c496771dfc29429cd3fb6d6932e3c49b77e834e1bcc15a7e2f62779c7eda7cb7339037676dbd603b46554de1ca7950e33d48e7615a7971e525696b69b1e024377d20653bcd41b530f6a764699f75a9134b4be30082ab571eab792063234db36907f6bdf8caba3e0e0f884816943418b32e3063378accf4d916e068f0b9055039e93a875cb500e25ef8258cbea70b445d3c2680c75600759e4df1270f9f79b1826909b2dfe6e7a2b58040d03e0963eb46b8c99a327a61a510c07103b23c40bccefc14e2d8b92140a7792eabc328e147dfcc87cd215a03ffb9d1a54351657ade1af17d4bb953ada02830869186cc820a44fa13325e3e53c565d7cdd5a1292de52150a144df0ed39ee23cb7a26f15ff042a797c9aa69ec8a33d9cede2f1f00c04b990025adf0813ceea6827c46c1ec46cfe6fc9294ac3d7963bbdcb7a5a75431e067c492b0c6da41606c6c82425145ec772f733afcdde02e2a422d64439ba43e080d1f79d1ab5ffa01392f4f21cb9940a1ed244ea5ff85bde6af06d72c5a54cb3c1af918fd0801f8ebdc410db560ec151eec471acd4634f781141c46569dd7abf178f286aed037fd73f4daa356e648eeeda0bc546f196b2b6319da806ef87542e3c47bc5cc54da7ae92e79420fbda44c35f38a72ea14d13df8a4c526175e7f0648151b5fa27ecd735965265e9c07e20f5f1e9cf01a9c9fa508d93cae05d0b666bf7d1a4cdec9b380dcd1694d7ffc09f06420fb2c97ccf1084bce8f30192004f055fe859e3de62ca7f77904d080fa7a6a099d8db70ef3ee82ff8b0d6e4eeee656b17463176c759dcf3d943807207df04da7c731dc2f56a5b263831ce89e4eaaad6e56e21764ca1d96f4cd6069bdfb0a278c23c92521b4a17763c926d70aa4f49cb718c90a426a64ea9c03469be5602ee34141c290375f5e98af76ea53512d32f268cbc0527dcca0ab3e2b1b76e79b4285dc09a3a7f89997da03a629b5d9f755b4ce6a4c50455011efacdc5d2c1b91db8b865c614b135db2e0f9e4cede55ae414cb1f14398a8c9a73a09d315796beb10e702bd8522b9875deff4435cc166b2a87d3d4d7d172b6290acb8e97f6b62615d4019d71324adeac0c3bc00a5650a5fcd471cf27f28a829d0fb8fdeb93b62973482fd1e7b57b3de16283501cd39f6d8986c191172394c39cdf11607f415cb171f8a9662b7990b51a1e42caa718229b34c4262b1db8fdd0c8093d62efd43d9ee3eed44f6208c7151544170c39b9f78becb55c08c597715b2f1901df6457da8e6ebc483b3bb5db68fd3c89668cafc4339a21f4b05e483570190cef51bf92ca49709ba11dc06bd305deadaed6b9f6f028bc95a92fb8385534883990332f54b71733807a1f2b8f25fdb1df88eb3b38976706d07a67f756e431546aebd4af2743f31b36038f91c00deddb1285e26297c174397126ff53433f2e184c1d4cef6b3a7bfa1862de9a1ec20869e03b69379de53d7b4311495acdf897855a9f23552a512ae9bf34a9775693d8957d9905504c089d19d7c98187e1dd671516f8d6b605941d8e7f77ab6118cc5ebeec6ca42a5f9f6818dcef7b0af9652bed27ec585f7e18e23a3b0736dee634cce14dc52656f0663eeee84ebca945e62adf94bba85942c89e328c4f35e43586af445f11b1b64945c8f4dad48f6db27c3444f016cce7feb7a438759d67cd203d9fcb3f44211f4977b5f347800f3f37b874df4ef985dc55d6a1cb3457e6c10a539f4bff7623a09ffe0761fff206afcfb5cc4b5a9fbd54f98e9a553ae59790facbda1adf615a79e439172341c3bf95b99dd8f78ff53699d110769c9731c03ad3ccd8abb8877fe84c0ab0d646ff06a49f73c42764ad003bf85703f633a9d85d0b03d3c595f9eb103a85363fb5df48e201e22d4b361bcb5de70bbaab8a02a2d3b27a5246145b2da2cc71bfa561544f7cd3cff6688a7b049ae086b43d197a61ae54d7113829e8f6afaf2414b7ac0b2f286968d2db9a4bb1b90c1ad9861dba35722483c88c63e5d77cf8b05225f31e665878f9238e55bf90f312fab7c19e400008fd67965386bbbee50999ec685fa1bb20cbf106a909a234f65de75ba4c896e218074ccdb8f75a333ed4e0c256283d1d7d326683b84ddfdb7a7b2e6dc4a93b2dbb8b37b208d4c02b6d192d28bb49ea44dfc56be4e70a3021ed442eaab2c45f832b68bf7b8600", 0x2000, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = memfd_create(&(0x7f0000002480)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?Y\x96\xab\xc7\x06F\x8e\xab\xc8\x1e\x89]\x13bZ\x8d \x19\x00k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\x02K\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]Z\x88\xecIf\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89vr\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xf08h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf]\x0e\a\x00\x91T\x1b\xee\x10\x92\x80m\xc7\x90\x9fU\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xca@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\a\x84\xb2j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe00x0}) sched_setscheduler(r3, 0x1, &(0x7f0000000000)=0x40) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) io_uring_register$IORING_REGISTER_ZCRX_CTRL(0xffffffffffffffff, 0x24, &(0x7f0000000180)={0x3, 0x0, '\x00', @zc_export}, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$UBLK_U_CMD_DEL_DEV(r0, 0xc0207505, &(0x7f0000002300)) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 3.290765389s ago: executing program 0 (id=1832): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000200)) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) timer_create(0x5, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x5, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbf8, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20009805}, 0x40010) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) connect$unix(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000280)=0xfff, 0x5) socket$kcm(0x2, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x5c}}, 0x0) r3 = add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="1c00"/12, 0xc, 0xfffffffffffffffe) keyctl$chown(0x4, r3, 0x0, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000240)={r3, 0x63, 0x1b}, &(0x7f00000002c0)={'enc=', 'pkcs1', ' hash=', {'sha256-asm\x00'}}, &(0x7f0000000340)="c61e7bb0a66e7c0334b931359b7dd554fac255639b789c763650c6c1a775758bb908b4644d0fb63e5a9ad36e12e65eb3693993ff80a98ce9c612c2c4041e99fed6000410349b839a4ba09d7a1f44d4ae79bce5dd50c63526b6e52a44a5ee06955c897b", &(0x7f0000000440)=""/27) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 2.696915816s ago: executing program 0 (id=1833): setns(0xc9, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) r0 = syz_open_dev$media(&(0x7f0000000600), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc01c7c02, &(0x7f0000000640)={0x80000000, 0x0, &(0x7f0000000680)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000580)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f00000005c0)=0x1, 0x4) sendmmsg(r4, &(0x7f0000000600), 0x612, 0x4000010) 2.618686178s ago: executing program 1 (id=1834): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[], 0x1b8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000880)="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", 0x573}], 0x1}}], 0x1, 0x4000000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000000)="26eba9fdb4cbab48929e1af151000000000000000500000000000100", 0x1c}], 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) accept4(r2, 0x0, 0x0, 0x80000) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xc, 0x143182) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e1c, 0x3, 'wrr\x00', 0x5, 0x80, 0x1b}, 0x2c) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x2, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004) 1.379861719s ago: executing program 2 (id=1835): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r4, r1, 0x25, 0x8, @void}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x70bd2c, 0x25dfdbfe, {0x7, r10}, [@MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x1, 0x2, 0x1, {@ip4=@multicast1, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000000}, 0x40080c0) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) socket$alg(0x26, 0x5, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x172) write(r11, &(0x7f0000000300)='1', 0x1) 1.342531984s ago: executing program 0 (id=1836): openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x2, 0x7, 0x2) socket(0x10, 0x2, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000180)=""/111, 0x6f}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) recvmmsg(r1, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=""/216, 0x34}, 0x10001}], 0x2, 0x40010000, 0x0) clock_adjtime(0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000000340)={0x1ff, 0x5, 0x1, {0x1, @pix={0xff, 0xa, 0x31324d4e, 0x0, 0x9, 0xffffff61, 0x9, 0x9, 0x0, 0x7, 0x2, 0x6}}, 0xd5a}) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x4000, 0x4) sendmmsg$alg(r3, &(0x7f0000001240)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@iv={0x10}, @iv={0x10}], 0x20, 0x4880}, {0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000780)="a27e751b506316d107c78c782937d6f33110862675b0cf4dd973f8161521f90c77ae4f26", 0x24}, {&(0x7f00000007c0)="946bcac2250f0a616e8f94e1baf7b9138cced2ccf8f2b4fe1e1a49f73250e614790249b84c8ee0ac47c0522e6c5da4f2f6b159d442a2d87aea70f7bdaf01436c4dce087aaff4696c77b8e973c587ecd7bb5fb2112e02f5df43bfa918e9f3026c9dff6f89975f76fcbecb71b5e8513c81f57cdeb0f24b6f767bc017ceea83", 0x7e}], 0x3, &(0x7f0000000880)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, {0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="3398a4", 0x3}], 0x1, &(0x7f0000000940)=[@assoc={0x10, 0x117, 0x4, 0x9}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10}], 0x30, 0x804c044}, {0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000a00)="a0ea6ea3427cef817dd7f81fd0efb568b0042fa10ff6e6e4e392e66e8a34d95fe4c9992b92ec54c266480c85ff0a76466f1ce133f0cc4a6590e68fe866b01294bbcd429977fc947d8c9303e5c96ce7a2457b795806086a68f4f32f4b2176d8ba50d133f85ead618af914d9787ba92896babebf4051c3f9e2c84e15ef7a0b9d30129b4d5d9e254dc15d6614384e817bf75584609c24a00c06c9d319", 0x9b}, {&(0x7f0000000ac0)="22509617adb91afa439b1f9b00ab2e15ab77ecc52cf6f6a79073d4a1f8166a86c20833c2527209467f628723fdbb88bad4b80d4c8a63d029eefb08cf461f2d433478", 0x42}, {&(0x7f0000000b40)="059af19a024c264d6e2a18d4bdcf804e2a17fee1863f29cda5134d6197b20382f5ff8b4d346a3bcf96877ea76e6ce26157409b0aca740a4806e568b7b16951be81bc3ea73611fe43127c2a8bb9b80c3b040dd6c4ba23f70ec96b57444fe9ccd69c5d43024e04ab16d43d6b7147ccfc448f573f5427a47cf6e7360ae611cf13d8cf03c736daaadc8187a36c559901c37f67d42921a2c8ff5c2d1f417d40b047b97ee0087bc2b896c44822e3876a58e27b32645bc00ad073733b35f160c47a569b7bb06ad4d65bd64dc2b6295132bb035fce916b5a230d3b6b308b122e360d7b8a28a2", 0xe2}, {0x0}, {&(0x7f0000000d40)="e6195fc805a6f8c49b717a2366b3610d2f1b646ffc85b7155922cdecf64ecd4d21849bcbfe4b8a5e4bbe74ea48beb9330f6ef93d5de44210850678c387ee6fdd0ed5efade60c12cf6cb08c683343934f1fc156a85e2c243d1abb962a425de7a1d2a7fc91e8c8928825204bf4615cf7e06d754e7e42cbca7b3c776c20174c5c8f8324b08633a7e517f6fbde324c557b78280872b174f30ee2fd8c06a7be9cd2", 0x9f}, {&(0x7f0000000e00)="9f151fd0f92644ca6a7fa73237bff578a7875549783e18c77f5d88a2323668c9334e5450243cfff2df0d5d1ebcc6052ae3e0edbc082b6e3163418151b361bd166bbde8b59a67f88095cacb949d0d68753be0ccfe6b51f180b0b71c098bd0049d74ea0ae906f016a3606b1cf40aa4872e9b30f00a7ce7e51b363651be2c6f59b3d656d7627d34afcdad559c475461c394ac41d328cdccc4f11e8fd078c9b1d1207801e6cbf31922692048e3ac4a84", 0xae}, {&(0x7f0000000ec0)="f9bee3476b931125ba7ae463e3c95db05048f2a4a5cd858a744e9058a13c7720eb751bac0f701da57b44befb73d2d5da9e7b9fbd6c544f2cb45df193860fd17352c817740c817af933b1cb9f2a83f81e013b0a369869c6ea4c83e01703d5900be2d6beda7efd6cc05677c70146b3771c5b9a1f0b72fd72fd35dbec03f7201b919810cbc3991b36604f72abc45b7eeae32bb72a0ab1d635ea248b0e75bced85d5a4040b776fd2ecda93974fba7f", 0xad}], 0x7, &(0x7f0000001140)=[@op={0x10}, @iv={0xa4, 0x117, 0x2, 0x91, "ce0faff8d5f8795f6467cda21010882ca780911951398e64c9322a6af2f3b766d1abba4dee1c7c5a883aaadba192581e7a1d2a90d97d3ef1a2d97de1010061888c0b016b9a17bc624b7ac63fd7f4d50a02f58a1c639c4e3a3fb3206ad7326b2eb150391e18285943f0ca2f1703d893ff4b593a9d71358f359b6998c020704356647b5239d7dc96072c2c285ce633fe8c3e"}, @op={0x10}], 0xc4, 0x4800}], 0x4, 0x190) 1.162050719s ago: executing program 3 (id=1843): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa4242, 0x0) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000180)="308205553082", 0x6, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioprio_set$pid(0x2, 0x0, 0x2004) sched_getattr(0x0, &(0x7f0000000300)={0x38}, 0x38, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x0, 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000240)="52000000230001011e020600"/41, 0x29) write$uinput_user_dev(r1, &(0x7f0000000380)={'syz1\x00', {0x5, 0x4, 0x0, 0x13fb}, 0x25, [0x10, 0x5, 0xb, 0x0, 0x5, 0x83, 0xd2, 0x80000000, 0x10001, 0x9, 0xde2, 0x6, 0xfffffffb, 0x10, 0x2, 0x0, 0x1ff, 0xc, 0x68a, 0x2, 0x1, 0x7fff, 0x5c5f, 0x4, 0x0, 0x9, 0x9, 0x3ff, 0xd9, 0x1, 0x1, 0x32, 0x7fff, 0x7f, 0x1, 0x81, 0x8fe, 0x5, 0x6, 0x1000, 0x7, 0xc51, 0x7, 0x3, 0xd, 0x5, 0x0, 0x1, 0x7f, 0x1, 0x2, 0x3, 0x0, 0x0, 0xffffffff, 0xe4, 0x6, 0xf9, 0xffffffff, 0x1000, 0x0, 0x5, 0x0, 0x5], [0x20000007, 0x0, 0x1b08000, 0xffffffff, 0xcc65, 0x5, 0x4, 0x602e, 0x9, 0x9, 0x9, 0x4, 0x2, 0xcc, 0xfff, 0x9, 0x200, 0x800, 0x8, 0x5, 0x6, 0x4, 0x5, 0x3, 0x8, 0x3, 0x80, 0x3, 0xffff, 0x0, 0x6, 0x7fff, 0x8, 0x21, 0x800, 0x0, 0xfb23, 0x0, 0x40, 0x5, 0x3, 0x5, 0x7, 0x8000, 0xd, 0x5, 0x7b5, 0x4, 0x2, 0x10, 0x0, 0x69a0, 0x8b3, 0x8, 0x100, 0xfffffffb, 0x80000001, 0x4, 0x8, 0x6693, 0x5, 0xae, 0x52, 0x9], [0x69, 0x7, 0x0, 0xfffffff9, 0x4, 0xa957, 0x6, 0x3, 0xc0, 0x2, 0x322c, 0x2, 0x9, 0xc3, 0x2, 0x0, 0x26, 0x1, 0x4, 0x7, 0x400, 0x10000, 0x7, 0x0, 0xb, 0x8, 0x4, 0xfffffffe, 0x0, 0xdd, 0x4, 0x7fff, 0x4, 0x58b4, 0x0, 0x9, 0xc, 0xfffffff9, 0x3, 0x5, 0x82, 0x6, 0x4, 0xfa0, 0x9, 0x1, 0xfffffffb, 0xffffffff, 0xc57, 0x6d, 0x8, 0x1, 0x0, 0x2, 0x5, 0xfffffff9, 0x5, 0x8, 0x8, 0x9, 0x7, 0x0, 0x101, 0xfffffffd], [0x4f, 0xca4, 0x82c, 0x2, 0x5, 0x9, 0x5, 0x4, 0xc, 0x2, 0xa, 0x484e, 0x81, 0x0, 0x6, 0x0, 0x8, 0x9, 0x4, 0x6, 0x1, 0x5, 0x95f, 0x97, 0x8b9, 0xffff6b6a, 0x227, 0x6, 0xfff, 0x5, 0x1, 0xffff7fff, 0x2, 0x80008, 0x6, 0x8, 0x10, 0x1, 0x1, 0x9, 0xa8e, 0x3, 0x8001, 0x1, 0x0, 0x6, 0x401, 0x2c37d4c4, 0x0, 0x4d, 0xf, 0xa, 0x7ff, 0xffffffff, 0xffff4b40, 0x3, 0x2, 0x1, 0x900, 0x6, 0x7, 0xfff, 0xa]}, 0x45c) read$dsp(r1, 0x0, 0x600) r3 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='cmdline\x00') read$FUSE(r4, 0x0, 0x0) ioctl$DM_TABLE_LOAD(r3, 0xc138fd09, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r5, 0x29, 0x1d, 0x0, 0x2) 990.681019ms ago: executing program 1 (id=1837): r0 = syz_genetlink_get_family_id$smc(&(0x7f00000005c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x14, r0, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xb}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000040601010000000000000000010000050500010007000000e5b8313d5168e287ff1474249a839e2d448342e6f1b190e88642acafdf1e0b482d4031be5ba7b48c2df454732c7158846ade9a8697c7dd58fe112439f86b13bf31e6b92965c439518c9c34eb0ed885f5a1a22788ab0bca77bcc3f8218fef39d0714a79c0303981e91eaff47db4"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc40) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000180)=0x6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x4, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x5, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000440)={'bond0\x00', @ifru_names='gretap0\x00'}) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r9, 0x2000000, 0x7, 0x0, &(0x7f0000000cc0)="630b008646dc3f", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x823be637d8173150}, 0x40000c0) bind$inet(r2, 0x0, 0x0) 783.269347ms ago: executing program 0 (id=1838): openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x2, 0x7, 0x2) socket(0x10, 0x2, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000180)=""/111, 0x6f}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) recvmmsg(r1, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=""/216, 0x34}, 0x10001}], 0x2, 0x40010000, 0x0) clock_adjtime(0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000000340)={0x1ff, 0x5, 0x1, {0x1, @pix={0xff, 0xa, 0x31324d4e, 0x0, 0x9, 0xffffff61, 0x9, 0x9, 0x0, 0x7, 0x2, 0x6}}, 0xd5a}) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x4000, 0x4) sendmmsg$alg(r3, &(0x7f0000001240)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@iv={0x10}, @iv={0x10}], 0x20, 0x4880}, {0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000780)="a27e751b506316d107c78c782937d6f33110862675b0cf4dd973f8161521f90c77ae4f26", 0x24}, {&(0x7f00000007c0)="946bcac2250f0a616e8f94e1baf7b9138cced2ccf8f2b4fe1e1a49f73250e614790249b84c8ee0ac47c0522e6c5da4f2f6b159d442a2d87aea70f7bdaf01436c4dce087aaff4696c77b8e973c587ecd7bb5fb2112e02f5df43bfa918e9f3026c9dff6f89975f76fcbecb71b5e8513c81f57cdeb0f24b6f767bc017ceea83", 0x7e}], 0x3, &(0x7f0000000880)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, {0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="3398a4", 0x3}], 0x1, &(0x7f0000000940)=[@assoc={0x10, 0x117, 0x4, 0x9}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10}], 0x30, 0x804c044}, {0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000a00)="a0ea6ea3427cef817dd7f81fd0efb568b0042fa10ff6e6e4e392e66e8a34d95fe4c9992b92ec54c266480c85ff0a76466f1ce133f0cc4a6590e68fe866b01294bbcd429977fc947d8c9303e5c96ce7a2457b795806086a68f4f32f4b2176d8ba50d133f85ead618af914d9787ba92896babebf4051c3f9e2c84e15ef7a0b9d30129b4d5d9e254dc15d6614384e817bf75584609c24a00c06c9d319", 0x9b}, {&(0x7f0000000ac0)="22509617adb91afa439b1f9b00ab2e15ab77ecc52cf6f6a79073d4a1f8166a86c20833c2527209467f628723fdbb88bad4b80d4c8a63d029eefb08cf461f2d433478", 0x42}, {&(0x7f0000000b40)="059af19a024c264d6e2a18d4bdcf804e2a17fee1863f29cda5134d6197b20382f5ff8b4d346a3bcf96877ea76e6ce26157409b0aca740a4806e568b7b16951be81bc3ea73611fe43127c2a8bb9b80c3b040dd6c4ba23f70ec96b57444fe9ccd69c5d43024e04ab16d43d6b7147ccfc448f573f5427a47cf6e7360ae611cf13d8cf03c736daaadc8187a36c559901c37f67d42921a2c8ff5c2d1f417d40b047b97ee0087bc2b896c44822e3876a58e27b32645bc00ad073733b35f160c47a569b7bb06ad4d65bd64dc2b6295132bb035fce916b5a230d3b6b308b122e360d7b8a28a2", 0xe2}, {0x0}, {&(0x7f0000000d40)="e6195fc805a6f8c49b717a2366b3610d2f1b646ffc85b7155922cdecf64ecd4d21849bcbfe4b8a5e4bbe74ea48beb9330f6ef93d5de44210850678c387ee6fdd0ed5efade60c12cf6cb08c683343934f1fc156a85e2c243d1abb962a425de7a1d2a7fc91e8c8928825204bf4615cf7e06d754e7e42cbca7b3c776c20174c5c8f8324b08633a7e517f6fbde324c557b78280872b174f30ee2fd8c06a7be9cd2", 0x9f}, {&(0x7f0000000e00)="9f151fd0f92644ca6a7fa73237bff578a7875549783e18c77f5d88a2323668c9334e5450243cfff2df0d5d1ebcc6052ae3e0edbc082b6e3163418151b361bd166bbde8b59a67f88095cacb949d0d68753be0ccfe6b51f180b0b71c098bd0049d74ea0ae906f016a3606b1cf40aa4872e9b30f00a7ce7e51b363651be2c6f59b3d656d7627d34afcdad559c475461c394ac41d328cdccc4f11e8fd078c9b1d1207801e6cbf31922692048e3ac4a84", 0xae}, {&(0x7f0000000ec0)="f9bee3476b931125ba7ae463e3c95db05048f2a4a5cd858a744e9058a13c7720eb751bac0f701da57b44befb73d2d5da9e7b9fbd6c544f2cb45df193860fd17352c817740c817af933b1cb9f2a83f81e013b0a369869c6ea4c83e01703d5900be2d6beda7efd6cc05677c70146b3771c5b9a1f0b72fd72fd35dbec03f7201b919810cbc3991b36604f72abc45b7eeae32bb72a0ab1d635ea248b0e75bced85d5a4040b776fd2ecda93974fba7f", 0xad}], 0x7, &(0x7f0000001140)=[@op={0x10}, @iv={0xa4, 0x117, 0x2, 0x91, "ce0faff8d5f8795f6467cda21010882ca780911951398e64c9322a6af2f3b766d1abba4dee1c7c5a883aaadba192581e7a1d2a90d97d3ef1a2d97de1010061888c0b016b9a17bc624b7ac63fd7f4d50a02f58a1c639c4e3a3fb3206ad7326b2eb150391e18285943f0ca2f1703d893ff4b593a9d71358f359b6998c020704356647b5239d7dc96072c2c285ce633fe8c3e"}, @op={0x10}], 0xc4, 0x4800}], 0x4, 0x190) 89.134134ms ago: executing program 1 (id=1839): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x122) fcntl$notify(r2, 0x402, 0x8000003d) mknod(0x0, 0x8001420, 0x0) open$dir(0x0, 0x0, 0x0) r3 = open$dir(0x0, 0x1, 0x27) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) sendfile(r3, r4, 0x0, 0x20000000000006) open$dir(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r5, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x2e, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x67, 0x58, 0xa0, 0x2, 0x6, 0x7e}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0x8, 0x0, 0x180, 0x0, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffa, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 0s ago: executing program 0 (id=1840): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r2, 0x110, 0x7, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x0, 0x0, 0x9, 0xffffff7fffffffff, 0xfffffdfffffffffd, 0xffffffc0, 0xffffffff}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x10000, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, r4, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x9}) socket$unix(0x1, 0x5, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000000) getsockopt(0xffffffffffffffff, 0x128b, 0x100, &(0x7f00000004c0)=""/34, &(0x7f0000000800)=0x22) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x4, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) kernel console output (not intermixed with test programs): nd 3 of xref (1 dead, 0 orphan) found. [ 367.230526][T10289] jffs2: Checked all inodes but still 0x0 bytes of unchecked space? [ 367.230542][T10289] jffs2: No space for garbage collection. Aborting GC thread [ 367.695399][T10295] rxe_eth0 speed is unknown, defaulting to 1000 [ 367.836221][T10300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.836594][T10300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.898883][T10300] jffs2: notice: (10300) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 3 of xref (1 dead, 0 orphan) found. [ 367.950589][T10302] jffs2: Checked all inodes but still 0x0 bytes of unchecked space? [ 367.950602][T10302] jffs2: No space for garbage collection. Aborting GC thread [ 368.324890][T10311] rxe_eth0 speed is unknown, defaulting to 1000 [ 368.329483][T10295] lo speed is unknown, defaulting to 1000 [ 369.276223][T10311] lo speed is unknown, defaulting to 1000 [ 369.695358][T10326] rxe_eth0 speed is unknown, defaulting to 1000 [ 370.452971][T10335] jffs2: notice: (10335) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 3 of xref (1 dead, 0 orphan) found. [ 370.509187][ T1165] IPVS: starting estimator thread 0... [ 370.511634][T10340] jffs2: Checked all inodes but still 0x0 bytes of unchecked space? [ 370.511644][T10340] jffs2: No space for garbage collection. Aborting GC thread [ 370.611615][T10341] IPVS: using max 43 ests per chain, 103200 per kthread [ 371.023323][T10326] lo speed is unknown, defaulting to 1000 [ 372.053670][T10364] rxe_eth0 speed is unknown, defaulting to 1000 [ 372.128695][T10365] team0: Device xfrm0 is of different type [ 372.961234][T10364] lo speed is unknown, defaulting to 1000 [ 373.139849][T10368] rxe_eth0 speed is unknown, defaulting to 1000 [ 373.859395][T10368] lo speed is unknown, defaulting to 1000 [ 378.174965][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.819208][T10376] rxe_eth0 speed is unknown, defaulting to 1000 [ 383.490494][T10392] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 383.554284][T10376] lo speed is unknown, defaulting to 1000 [ 384.261252][ T41] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 384.410371][ T41] usb 6-1: Using ep0 maxpacket: 32 [ 384.410931][ T41] usb 6-1: New USB device found: idVendor=046d, idProduct=c539, bcdDevice=0.40 [ 384.412157][ T41] usb 6-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 384.412178][ T41] usb 6-1: config 1 interface 0 has no altsetting 0 [ 384.413950][ T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.413961][ T41] usb 6-1: Product: syz [ 384.413968][ T41] usb 6-1: Manufacturer: syz [ 384.413975][ T41] usb 6-1: SerialNumber: syz [ 384.686782][ T41] usbhid 6-1:1.0: can't add hid device: -71 [ 384.686864][ T41] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 384.697707][ T41] usb 6-1: USB disconnect, device number 10 [ 384.831978][T10421] rxe_eth0 speed is unknown, defaulting to 1000 [ 385.043961][T10421] lo speed is unknown, defaulting to 1000 [ 385.955045][T10439] rxe_eth0 speed is unknown, defaulting to 1000 [ 385.962476][T10441] ublk_ctrl_add_dev: invalid recovery flags 10 [ 386.106992][T10439] lo speed is unknown, defaulting to 1000 [ 387.126922][T10450] pim6reg: entered allmulticast mode [ 387.394879][T10452] rxe_eth0 speed is unknown, defaulting to 1000 [ 387.445513][T10444] pim6reg: left allmulticast mode [ 387.829604][T10462] ublk_ctrl_add_dev: invalid recovery flags 10 [ 387.971431][T10452] lo speed is unknown, defaulting to 1000 [ 388.698237][T10469] jffs2: notice: (10469) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 3 of xref (1 dead, 0 orphan) found. [ 391.583624][T10497] rxe_eth0 speed is unknown, defaulting to 1000 [ 391.979237][T10497] lo speed is unknown, defaulting to 1000 [ 392.003011][ T41] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 392.160312][ T41] usb 6-1: Using ep0 maxpacket: 16 [ 392.163125][ T41] usb 6-1: New USB device found: idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 392.163976][ T41] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 392.163989][ T41] usb 6-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 392.164000][ T41] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 392.164012][ T41] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 392.164024][ T41] usb 6-1: config 0 interface 0 has no altsetting 0 [ 392.165865][ T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.165913][ T41] usb 6-1: Product: syz [ 392.165925][ T41] usb 6-1: Manufacturer: syz [ 392.165935][ T41] usb 6-1: SerialNumber: syz [ 392.215895][ T41] usb 6-1: config 0 descriptor?? [ 392.216673][T10500] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 392.702581][T10493] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 392.935476][ T41] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input17 [ 393.380924][ T41] usb 6-1: USB disconnect, device number 11 [ 395.442149][T10546] jffs2: notice: (10546) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (1 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found. [ 396.429908][T10565] rxe_eth0 speed is unknown, defaulting to 1000 [ 396.968773][T10565] lo speed is unknown, defaulting to 1000 [ 397.337241][T10577] overlay: ./file0 is not a directory [ 399.510764][T10599] jffs2: notice: (10599) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (4 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found. [ 400.380740][T10588] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 401.731958][T10629] cgroup: No subsys list or none specified [ 403.984616][T10636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1115'. [ 403.992142][T10636] overlayfs: failed to resolve './file0': -2 [ 406.296165][T10676] rxe_eth0 speed is unknown, defaulting to 1000 [ 406.414640][T10676] lo speed is unknown, defaulting to 1000 [ 407.401824][T10688] bridge_slave_1: left allmulticast mode [ 407.401841][T10688] bridge_slave_1: left promiscuous mode [ 407.401959][T10688] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.178450][T10757] rxe_eth0 speed is unknown, defaulting to 1000 [ 412.708271][T10757] lo speed is unknown, defaulting to 1000 [ 414.229507][T10774] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1147'. [ 414.394584][T10776] rxe_eth0 speed is unknown, defaulting to 1000 [ 414.540000][T10776] lo speed is unknown, defaulting to 1000 [ 416.542529][T10798] rxe_eth0 speed is unknown, defaulting to 1000 [ 417.175811][T10805] overlay: ./file0 is not a directory [ 418.027817][T10798] lo speed is unknown, defaulting to 1000 [ 418.415075][ T43] IPVS: starting estimator thread 0... [ 418.501583][T10823] IPVS: using max 43 ests per chain, 103200 per kthread [ 419.100375][T10828] rxe_eth0 speed is unknown, defaulting to 1000 [ 419.371451][T10816] futex_wake_op: syz.2.1158 tries to shift op by 144; fix this program [ 419.371572][T10816] futex_wake_op: syz.2.1158 tries to shift op by 144; fix this program [ 419.496819][T10828] lo speed is unknown, defaulting to 1000 [ 419.817794][T10835] rxe_eth0 speed is unknown, defaulting to 1000 [ 420.158255][T10835] lo speed is unknown, defaulting to 1000 [ 421.645082][T10855] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 421.645105][T10855] overlayfs: overlapping lowerdir path [ 421.832526][T10856] overlayfs: overlapping lowerdir path [ 422.661896][T10859] rxe_eth0 speed is unknown, defaulting to 1000 [ 422.751286][T10859] lo speed is unknown, defaulting to 1000 [ 424.911667][T10880] netlink: 'syz.0.1171': attribute type 39 has an invalid length. [ 425.038880][ T42] audit: type=1400 audit(1793848601.807:1805): apparmor="STATUS" operation="profile_replace" info="profile can not be replaced" error=-17 profile="unconfined" name="/" pid=10879 comm="syz.0.1171" [ 425.278161][T10883] can0: slcan on ttyS3. [ 425.571770][T10879] can0 (unregistered): slcan off ttyS3. [ 425.680040][T10889] rxe_eth0 speed is unknown, defaulting to 1000 [ 426.430399][T10898] rxe_eth0 speed is unknown, defaulting to 1000 [ 426.435590][T10889] lo speed is unknown, defaulting to 1000 [ 427.525903][T10898] lo speed is unknown, defaulting to 1000 [ 431.035317][T10944] sctp_transport_update_pmtu: 44 callbacks suppressed [ 431.035772][T10944] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 431.047070][T10944] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 431.054990][T10944] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 431.058611][T10944] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 431.090550][T10944] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 431.093800][T10944] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 431.098425][T10944] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 431.102610][T10944] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 431.121264][T10944] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 431.125960][T10944] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 434.486917][T10963] overlay: ./file0 is not a directory [ 435.126850][T10966] netlink: 'syz.1.1184': attribute type 39 has an invalid length. [ 435.183835][ T42] audit: type=1400 audit(1793848611.957:1806): apparmor="STATUS" operation="profile_replace" info="profile can not be replaced" error=-17 profile="unconfined" name="/" pid=10965 comm="syz.1.1184" [ 435.212412][T10967] can0: slcan on ttyS3. [ 435.732032][T10974] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1187'. [ 435.732071][T10974] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1187'. [ 436.087673][T10965] can0 (unregistered): slcan off ttyS3. [ 436.526104][T10985] rxe_eth0 speed is unknown, defaulting to 1000 [ 436.654991][T10974] FAULT_INJECTION: forcing a failure. [ 436.654991][T10974] name failslab, interval 1, probability 5, space 0, times 0 [ 436.655010][T10974] CPU: 3 UID: 0 PID: 10974 Comm: syz.2.1187 Not tainted syzkaller #0 PREEMPT(full) [ 436.655024][T10974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 436.655030][T10974] Call Trace: [ 436.655034][T10974] [ 436.655039][T10974] dump_stack_lvl+0x100/0x190 [ 436.655062][T10974] should_fail_ex.cold+0x5/0xa [ 436.655077][T10974] should_failslab+0xc2/0x120 [ 436.655092][T10974] __kmalloc_cache_noprof+0x91/0x6d0 [ 436.655110][T10974] ? assoc_array_insert+0x10b/0x32c0 [ 436.655124][T10974] assoc_array_insert+0x10b/0x32c0 [ 436.655135][T10974] ? __mutex_lock+0x267/0x1c10 [ 436.655149][T10974] ? key_link+0x2bb/0x390 [ 436.655162][T10974] ? __pfx___mutex_lock+0x10/0x10 [ 436.655177][T10974] ? __pfx_assoc_array_insert+0x10/0x10 [ 436.655186][T10974] ? __pfx___might_resched+0x10/0x10 [ 436.655206][T10974] ? down_write+0x141/0x1f0 [ 436.655220][T10974] ? __pfx_down_write+0x10/0x10 [ 436.655237][T10974] __key_link_begin+0xf5/0x260 [ 436.655249][T10974] key_link+0x103/0x390 [ 436.655259][T10974] ? keyctl_get_persistent+0x6d1/0x860 [ 436.655275][T10974] ? keyctl_get_persistent+0x6d1/0x860 [ 436.655290][T10974] ? __pfx_key_link+0x10/0x10 [ 436.655299][T10974] ? bpf_lsm_key_permission+0x9/0x10 [ 436.655311][T10974] ? key_task_permission+0x2c7/0x3c0 [ 436.655333][T10974] keyctl_get_persistent+0x5bd/0x860 [ 436.655352][T10974] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 436.655368][T10974] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 436.655388][T10974] ? find_held_lock+0x2b/0x80 [ 436.655404][T10974] ? __might_fault+0xc5/0x140 [ 436.655417][T10974] ? __might_fault+0xc5/0x140 [ 436.655432][T10974] __ia32_compat_sys_keyctl+0x38f/0x550 [ 436.655452][T10974] __do_fast_syscall_32+0x14b/0x8c0 [ 436.655470][T10974] do_fast_syscall_32+0x32/0x70 [ 436.655503][T10974] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 436.655518][T10974] RIP: 0023:0xf73eefbc [ 436.655528][T10974] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 436.655539][T10974] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000120 [ 436.655552][T10974] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000000000 [ 436.655559][T10974] RDX: 000000002171612d RSI: 0000000000000000 RDI: 0000000000000000 [ 436.655566][T10974] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 436.655572][T10974] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 436.655579][T10974] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 436.655593][T10974] [ 436.994111][T10985] lo speed is unknown, defaulting to 1000 [ 437.896472][T10999] rxe_eth0 speed is unknown, defaulting to 1000 [ 438.505750][T11007] ublk5: read batch cmd buffer failed [ 438.505805][T11007] ublk5: read batch cmd buffer failed [ 438.537013][T11007] ublk5: read batch cmd buffer failed [ 438.537363][T11007] ublk5: read batch cmd buffer failed [ 438.952839][T10999] lo speed is unknown, defaulting to 1000 [ 439.344694][T11013] rxe_eth0 speed is unknown, defaulting to 1000 [ 439.470890][T11016] overlay: ./file0 is not a directory [ 439.706188][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.839830][T11013] lo speed is unknown, defaulting to 1000 [ 440.649981][T11028] rxe_eth0 speed is unknown, defaulting to 1000 [ 440.779861][T11033] netlink: 'syz.2.1199': attribute type 39 has an invalid length. [ 440.948930][ T42] audit: type=1400 audit(1793848617.717:1807): apparmor="STATUS" operation="profile_replace" info="profile can not be replaced" error=-17 profile="unconfined" name="/" pid=11032 comm="syz.2.1199" [ 441.416005][T11034] can0: slcan on ttyS3. [ 441.416097][T11028] lo speed is unknown, defaulting to 1000 [ 442.061319][T11032] can0 (unregistered): slcan off ttyS3. [ 445.474041][T11079] ublk6: read batch cmd buffer failed [ 445.474475][T11079] ublk6: read batch cmd buffer failed [ 445.519785][T11079] ublk6: read batch cmd buffer failed [ 445.520210][T11079] ublk6: read batch cmd buffer failed [ 446.655974][T11092] overlay: ./file0 is not a directory [ 446.827411][T11089] rxe_eth0 speed is unknown, defaulting to 1000 [ 449.757185][T11089] lo speed is unknown, defaulting to 1000 [ 449.869533][T11108] rxe_eth0 speed is unknown, defaulting to 1000 [ 451.606851][T11108] lo speed is unknown, defaulting to 1000 [ 454.111244][T11137] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1218'. [ 454.230322][T11133] tipc: Enabling of bearer rejected, failed to enable media [ 457.864202][T11176] overlay: ./file0 is not a directory [ 459.662109][T11195] netlink: 'syz.2.1232': attribute type 5 has an invalid length. [ 459.757218][T11193] rxe_eth0 speed is unknown, defaulting to 1000 [ 459.760337][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.760371][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.760399][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.760426][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.314925][T11193] lo speed is unknown, defaulting to 1000 [ 465.198302][T11219] rxe_eth0 speed is unknown, defaulting to 1000 [ 465.429328][T11225] block nbd1: server does not support multiple connections per device. [ 465.438514][T11225] block nbd1: shutting down sockets [ 465.791598][T11219] lo speed is unknown, defaulting to 1000 [ 467.336813][T11247] overlay: ./file0 is not a directory [ 469.285896][T11256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.286326][T11256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.080314][ T41] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 470.252161][ T41] usb 6-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00 [ 470.256794][ T41] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.256819][ T41] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 470.256851][ T41] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.317754][ T41] idmouse 6-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 470.657725][T11264] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 470.888414][ T5836] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 471.139706][T11264] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 471.734302][ T3411] usb 6-1: USB disconnect, device number 12 [ 471.742382][ T3411] idmouse 6-1:1.0: disconnected [ 473.865856][T11296] rxe_eth0 speed is unknown, defaulting to 1000 [ 474.153640][T11296] lo speed is unknown, defaulting to 1000 [ 478.633254][T11337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1263'. [ 478.790210][T11336] macsec1: entered allmulticast mode [ 478.790224][T11336] veth1_macvtap: entered allmulticast mode [ 479.040496][ T5149] Bluetooth: hci3: unexpected cc 0x204b length: 34 > 3 [ 479.041709][ T5149] Bluetooth: hci3: unexpected event for opcode 0x204b [ 479.220008][T11336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1263'. [ 479.220023][T11336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1263'. [ 479.495111][T11337] veth1_macvtap (unregistering): left allmulticast mode [ 482.473949][T11360] syz.0.1267: page allocation failure: order:2, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 482.473992][T11360] CPU: 2 UID: 0 PID: 11360 Comm: syz.0.1267 Not tainted syzkaller #0 PREEMPT(full) [ 482.474006][T11360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 482.474013][T11360] Call Trace: [ 482.474017][T11360] [ 482.474022][T11360] dump_stack_lvl+0x100/0x190 [ 482.474042][T11360] warn_alloc.cold+0x9e/0xb2 [ 482.474055][T11360] ? __pfx_warn_alloc+0x10/0x10 [ 482.474076][T11360] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 482.474091][T11360] ? __pfx_get_page_from_freelist+0x10/0x10 [ 482.474111][T11360] __alloc_frozen_pages_noprof+0xaf3/0x3280 [ 482.474135][T11360] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 482.474155][T11360] ? stack_trace_save+0x8e/0xc0 [ 482.474168][T11360] ? do_raw_write_lock+0x11e/0x260 [ 482.474185][T11360] ? __kasan_kmalloc+0xaa/0xb0 [ 482.474196][T11360] ? __kmalloc_noprof+0x32f/0x840 [ 482.474205][T11360] ? comedi_isadma_alloc+0xc6/0x620 [ 482.474217][T11360] ? pcl816_attach+0x909/0xb30 [ 482.474241][T11360] alloc_pages_node_noprof+0x93/0x200 [ 482.474274][T11360] ? __pfx_alloc_pages_node_noprof+0x10/0x10 [ 482.474296][T11360] alloc_pages_exact_nid_noprof+0x32/0xe0 [ 482.474313][T11360] __dma_direct_alloc_pages.isra.0+0x34e/0x510 [ 482.474331][T11360] ? dma_alloc_from_dev_coherent+0x2e0/0x570 [ 482.474346][T11360] dma_direct_alloc+0x3d1/0x8a0 [ 482.474365][T11360] dma_alloc_attrs+0x1b9/0x3e0 [ 482.474382][T11360] ? __pfx_dma_alloc_attrs+0x10/0x10 [ 482.474396][T11360] ? __kmalloc_noprof+0x350/0x840 [ 482.474405][T11360] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 482.474417][T11360] ? dma_direct_supported+0xca/0x220 [ 482.474430][T11360] comedi_isadma_alloc+0x331/0x620 [ 482.474445][T11360] ? __pfx_comedi_isadma_alloc+0x10/0x10 [ 482.474459][T11360] ? request_threaded_irq+0x27b/0x3e0 [ 482.474473][T11360] pcl816_attach+0x909/0xb30 [ 482.474484][T11360] comedi_device_attach+0x40e/0x6b0 [ 482.474505][T11360] do_devconfig_ioctl+0x1b3/0x6d0 [ 482.474516][T11360] ? comedi_unlocked_ioctl+0x180/0x3310 [ 482.474530][T11360] ? trace_hrtimer_start+0x77/0x220 [ 482.474545][T11360] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 482.474565][T11360] ? rcu_is_watching+0x13/0xc0 [ 482.474601][T11360] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 482.474618][T11360] comedi_unlocked_ioctl+0x860/0x3310 [ 482.474636][T11360] ? __schedule+0x1270/0x6990 [ 482.474651][T11360] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 482.474673][T11360] ? __pfx___schedule+0x10/0x10 [ 482.474687][T11360] ? preempt_schedule_irq+0x79/0x90 [ 482.474702][T11360] ? irqentry_exit+0x202/0xab0 [ 482.474716][T11360] ? lockdep_hardirqs_on+0x7d/0x110 [ 482.474730][T11360] ? irqentry_exit+0x202/0xab0 [ 482.474754][T11360] comedi_compat_ioctl+0x438/0xe20 [ 482.474769][T11360] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 482.474784][T11360] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 482.474798][T11360] ? do_vfs_ioctl+0x226/0x13e0 [ 482.474814][T11360] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 482.474832][T11360] ? __fget_files+0x34/0x3d0 [ 482.474845][T11360] ? find_held_lock+0x2b/0x80 [ 482.474858][T11360] ? __fget_files+0x215/0x3d0 [ 482.474869][T11360] ? hook_file_ioctl_common+0x140/0x440 [ 482.474887][T11360] ? __fget_files+0x21f/0x3d0 [ 482.474901][T11360] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 482.474915][T11360] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 482.474934][T11360] __do_fast_syscall_32+0x14b/0x8c0 [ 482.474947][T11360] ? lockdep_hardirqs_on+0x7d/0x110 [ 482.474961][T11360] do_fast_syscall_32+0x32/0x70 [ 482.474975][T11360] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 482.474988][T11360] RIP: 0023:0xf740efbc [ 482.474998][T11360] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 482.475008][T11360] RSP: 002b:00000000f540550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 482.475018][T11360] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000040946400 [ 482.475025][T11360] RDX: 0000000080000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 482.475031][T11360] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 482.475038][T11360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 482.475045][T11360] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 482.475060][T11360] [ 482.475085][T11360] Mem-Info: [ 482.475091][T11360] active_anon:787 inactive_anon:6019 isolated_anon:0 [ 482.475091][T11360] active_file:10687 inactive_file:7547 isolated_file:0 [ 482.475091][T11360] unevictable:4072 dirty:544 writeback:0 [ 482.475091][T11360] slab_reclaimable:6334 slab_unreclaimable:59646 [ 482.475091][T11360] mapped:24677 shmem:8701 pagetables:1165 [ 482.475091][T11360] sec_pagetables:338 bounce:0 [ 482.475091][T11360] kernel_misc_reclaimable:0 [ 482.475091][T11360] free:31274 free_pcp:73 free_cma:0 [ 482.475119][T11360] Node 0 active_anon:20kB inactive_anon:36kB active_file:260kB inactive_file:4kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7296kB pagetables:1096kB sec_pagetables:1136kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 482.475148][T11360] Node 0 DMA free:2452kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:292kB local_pcp:128kB free_cma:0kB [ 482.475179][T11360] lowmem_reserve[]: 0 256 256 256 256 [ 482.475198][T11360] Node 0 DMA: 113*4kB (UE) 14*8kB (UE) 12*16kB (UE) 13*32kB (UE) 14*64kB (UE) 1*128kB (E) 1*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2452kB [ 482.475278][T11360] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 482.475287][T11360] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 482.475295][T11360] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 482.475302][T11360] Node 1 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 482.475310][T11360] 28503 total pagecache pages [ 482.475314][T11360] 1558 pages in swap cache [ 482.475317][T11360] Free swap = 101480kB [ 482.475321][T11360] Total swap = 124996kB [ 482.475325][T11360] 524155 pages RAM [ 482.475328][T11360] 0 pages HighMem/MovableOnly [ 482.475332][T11360] 217670 pages reserved [ 482.475336][T11360] 0 pages cma reserved [ 483.050431][ T5149] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 483.050476][ T5149] Bluetooth: hci3: Injecting HCI hardware error event [ 483.054404][ T5149] Bluetooth: hci3: hardware error 0x00 [ 483.367000][T11339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.681467][T11339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.210266][ T5149] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 486.060279][ T5836] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.060310][ T5836] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.060331][ T5836] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.060348][ T5836] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.112933][T11349] rxe_eth0 speed is unknown, defaulting to 1000 [ 486.425570][T11349] lo speed is unknown, defaulting to 1000 [ 490.460002][T11434] FAULT_INJECTION: forcing a failure. [ 490.460002][T11434] name failslab, interval 1, probability 5, space 0, times 0 [ 490.460176][T11434] CPU: 3 UID: 0 PID: 11434 Comm: syz.3.1281 Not tainted syzkaller #0 PREEMPT(full) [ 490.460198][T11434] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 490.460210][T11434] Call Trace: [ 490.460217][T11434] [ 490.460224][T11434] dump_stack_lvl+0x100/0x190 [ 490.460272][T11434] should_fail_ex.cold+0x5/0xa [ 490.460300][T11434] should_failslab+0xc2/0x120 [ 490.460322][T11434] __kmalloc_noprof+0xfc/0x840 [ 490.460341][T11434] ? tomoyo_encode2+0xfb/0x3c0 [ 490.460372][T11434] tomoyo_encode2+0xfb/0x3c0 [ 490.460403][T11434] tomoyo_encode+0x29/0x50 [ 490.460429][T11434] tomoyo_realpath_from_path+0x18c/0x690 [ 490.460464][T11434] tomoyo_check_open_permission+0x2af/0x3c0 [ 490.460492][T11434] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 490.460520][T11434] ? hook_file_open+0x245/0x8e0 [ 490.460570][T11434] tomoyo_file_open+0x6b/0x90 [ 490.460591][T11434] security_file_open+0xb5/0x1e0 [ 490.460622][T11434] do_dentry_open+0x552/0x1470 [ 490.460650][T11434] vfs_open_consume+0xcc/0x460 [ 490.460680][T11434] path_openat+0x1547/0x23f0 [ 490.460706][T11434] ? __pfx_path_openat+0x10/0x10 [ 490.460734][T11434] do_file_open+0x20e/0x430 [ 490.460757][T11434] ? __pfx_do_file_open+0x10/0x10 [ 490.460799][T11434] ? _raw_spin_unlock+0x28/0x50 [ 490.460818][T11434] ? alloc_fd+0x471/0x7a0 [ 490.460847][T11434] do_sys_openat2+0x163/0x1d0 [ 490.460873][T11434] ? __pfx_do_sys_openat2+0x10/0x10 [ 490.460908][T11434] __ia32_compat_sys_openat+0x12d/0x210 [ 490.460936][T11434] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 490.460973][T11434] __do_fast_syscall_32+0x14b/0x8c0 [ 490.460996][T11434] ? lockdep_hardirqs_on+0x7d/0x110 [ 490.461021][T11434] do_fast_syscall_32+0x32/0x70 [ 490.461044][T11434] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 490.461067][T11434] RIP: 0023:0xf7ff8fbc [ 490.461082][T11434] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 490.461098][T11434] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 490.461117][T11434] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000100 [ 490.461128][T11434] RDX: 0000000000161042 RSI: 0000000000000000 RDI: 0000000000000000 [ 490.461139][T11434] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 490.461149][T11434] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 490.461160][T11434] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 490.461184][T11434] [ 490.462250][T11435] jffs2: notice: (11435) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (4 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found. [ 490.468391][T11434] ERROR: Out of memory at tomoyo_realpath_from_path. [ 491.116042][T11445] 9pnet_virtio: no channels available for device syz [ 493.638269][T11457] rxe_eth0 speed is unknown, defaulting to 1000 [ 495.601226][T11457] lo speed is unknown, defaulting to 1000 [ 498.680406][T11482] rxe_eth0 speed is unknown, defaulting to 1000 [ 499.257715][T11482] lo speed is unknown, defaulting to 1000 [ 501.031870][T11510] rxe_eth0 speed is unknown, defaulting to 1000 [ 501.082561][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.822393][T11510] lo speed is unknown, defaulting to 1000 [ 505.254936][T11534] Invalid ELF header type: 3 != 1 [ 506.059165][T11534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.974541][T11568] rxe_eth0 speed is unknown, defaulting to 1000 [ 508.724707][T11581] macvlan0: entered promiscuous mode [ 508.727942][T11581] netlink: 'syz.2.1307': attribute type 1 has an invalid length. [ 508.727982][T11581] netlink: 'syz.2.1307': attribute type 2 has an invalid length. [ 508.784990][T11568] lo speed is unknown, defaulting to 1000 [ 508.870263][T11567] ftl_cs: FTL header not found. [ 509.137699][T11567] block2mtd: mtd2: [/dev/zram0] erase_size = 0KiB [6] [ 509.178713][T11587] rxe_eth0 speed is unknown, defaulting to 1000 [ 509.285151][T11587] lo speed is unknown, defaulting to 1000 [ 515.537684][T11643] rxe_eth0 speed is unknown, defaulting to 1000 [ 517.091273][T11643] lo speed is unknown, defaulting to 1000 [ 524.279634][T11741] rxe_eth0 speed is unknown, defaulting to 1000 [ 524.422021][T11741] lo speed is unknown, defaulting to 1000 [ 524.427558][T11746] rxe_eth0 speed is unknown, defaulting to 1000 [ 524.629002][T11746] lo speed is unknown, defaulting to 1000 [ 524.987087][ T42] audit: type=1326 audit(1793848701.757:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11756 comm="syz.1.1342" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf748efbc code=0x0 [ 525.391449][T11764] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1343'. [ 525.900462][T11772] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 525.903047][T11772] PKCS7: Only support pkcs7_signedData type [ 532.844880][T11808] rxe_eth0 speed is unknown, defaulting to 1000 [ 533.220835][T11826] cpuidle: using governor haltpoll [ 533.373628][T11817] rxe_eth0 speed is unknown, defaulting to 1000 [ 533.460081][T11828] rxe_eth0 speed is unknown, defaulting to 1000 [ 533.462736][T11817] lo speed is unknown, defaulting to 1000 [ 533.479449][T11808] lo speed is unknown, defaulting to 1000 [ 535.661632][T11828] lo speed is unknown, defaulting to 1000 [ 539.900282][T11367] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 540.715643][T11367] usb 8-1: Using ep0 maxpacket: 32 [ 540.810920][T11367] usb 8-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 540.971735][T11367] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.971751][T11367] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 540.973661][T11367] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.973674][T11367] usb 8-1: Product: syz [ 540.973680][T11367] usb 8-1: Manufacturer: syz [ 540.973687][T11367] usb 8-1: SerialNumber: syz [ 540.975673][T11367] usb 8-1: config 0 descriptor?? [ 541.544905][ T37] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5fa885c8-68f6-49b5-8bc0-161dabc52d57. [ 541.635443][T11870] nvme nvme0: creating 4 I/O queues. [ 541.731573][T11870] nvme nvme0: new ctrl: "testsubsys" [ 541.890854][T11367] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 541.932386][T11881] rxe_eth0 speed is unknown, defaulting to 1000 [ 542.051031][T11367] usb 7-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 542.052298][T11367] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 542.052319][T11367] usb 7-1: config 0 interface 0 has no altsetting 0 [ 542.054581][T11367] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 542.054598][T11367] usb 7-1: Product: syz [ 542.054607][T11367] usb 7-1: Manufacturer: syz [ 542.054617][T11367] usb 7-1: SerialNumber: syz [ 542.077121][T11367] usb 7-1: config 0 descriptor?? [ 542.086411][T11367] usb 7-1: selecting invalid altsetting 0 [ 542.296023][T11879] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 542.296051][T11879] CIFS: Attempting to mount //127.0.0.1/share [ 542.324007][T11879] CIFS: VFS: Error connecting to socket. Aborting operation. [ 542.324036][T11879] CIFS: VFS: cifs_mount failed w/return code = -111 [ 542.485016][T11881] lo speed is unknown, defaulting to 1000 [ 542.531175][T11889] rxe_eth0 speed is unknown, defaulting to 1000 [ 542.612967][T11367] usb 8-1: USB disconnect, device number 7 [ 543.144096][T11889] lo speed is unknown, defaulting to 1000 [ 543.187473][ T7216] usb 7-1: USB disconnect, device number 9 [ 545.806184][T11902] rxe_eth0 speed is unknown, defaulting to 1000 [ 546.401036][T11918] FAULT_INJECTION: forcing a failure. [ 546.401036][T11918] name failslab, interval 1, probability 5, space 0, times 0 [ 546.401055][T11918] CPU: 1 UID: 0 PID: 11918 Comm: syz.0.1375 Not tainted syzkaller #0 PREEMPT(full) [ 546.401066][T11918] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 546.401072][T11918] Call Trace: [ 546.401076][T11918] [ 546.401081][T11918] dump_stack_lvl+0x100/0x190 [ 546.401101][T11918] should_fail_ex.cold+0x5/0xa [ 546.401118][T11918] should_failslab+0xc2/0x120 [ 546.401131][T11918] __kmalloc_noprof+0xfc/0x840 [ 546.401141][T11918] ? kasan_quarantine_put+0x104/0x240 [ 546.401152][T11918] ? alloc_trace_uprobe+0x86/0x370 [ 546.401168][T11918] alloc_trace_uprobe+0x86/0x370 [ 546.401184][T11918] __trace_uprobe_create+0x673/0x2310 [ 546.401205][T11918] ? __pfx___trace_uprobe_create+0x10/0x10 [ 546.401219][T11918] ? trace_kmalloc+0xeb/0x110 [ 546.401230][T11918] ? __kasan_kmalloc+0xaa/0xb0 [ 546.401241][T11918] ? __kmalloc_noprof+0x350/0x840 [ 546.401269][T11918] ? argv_split+0x173/0x420 [ 546.401287][T11918] ? argv_split+0x359/0x420 [ 546.401302][T11918] ? __pfx___trace_uprobe_create+0x10/0x10 [ 546.401323][T11918] trace_probe_create+0xef/0x100 [ 546.401337][T11918] ? __pfx_trace_probe_create+0x10/0x10 [ 546.401356][T11918] dyn_event_create+0x50/0x90 [ 546.401368][T11918] create_or_delete_trace_uprobe+0x5a/0xb0 [ 546.401383][T11918] trace_parse_run_command+0x1ab/0x3b0 [ 546.401397][T11918] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 546.401415][T11918] vfs_write+0x2aa/0x1050 [ 546.401429][T11918] ? __pfx_probes_write+0x10/0x10 [ 546.401442][T11918] ? lock_acquire+0x1d1/0x380 [ 546.401454][T11918] ? __fget_files+0x34/0x3d0 [ 546.401465][T11918] ? __pfx_vfs_write+0x10/0x10 [ 546.401475][T11918] ? find_held_lock+0x2b/0x80 [ 546.401490][T11918] ? __fget_files+0x215/0x3d0 [ 546.401503][T11918] ? __fget_files+0x21f/0x3d0 [ 546.401518][T11918] ksys_write+0x12a/0x250 [ 546.401529][T11918] ? __pfx_ksys_write+0x10/0x10 [ 546.401544][T11918] __do_fast_syscall_32+0x14b/0x8c0 [ 546.401559][T11918] do_fast_syscall_32+0x32/0x70 [ 546.401573][T11918] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 546.401587][T11918] RIP: 0023:0xf740efbc [ 546.401596][T11918] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 546.401606][T11918] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 546.401626][T11918] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080001d80 [ 546.401632][T11918] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 546.401638][T11918] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 546.401644][T11918] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 546.401650][T11918] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 546.401665][T11918] [ 546.532490][T11924] Invalid ELF header type: 3 != 1 [ 546.534542][T11924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.065635][T11924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.500282][T11902] lo speed is unknown, defaulting to 1000 [ 548.808992][T11946] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1379'. [ 549.178794][T11948] rxe_eth0 speed is unknown, defaulting to 1000 [ 550.088435][T11948] lo speed is unknown, defaulting to 1000 [ 550.402482][T11967] rxe_eth0 speed is unknown, defaulting to 1000 [ 552.420737][T11967] lo speed is unknown, defaulting to 1000 [ 553.613172][T11989] rxe_eth0 speed is unknown, defaulting to 1000 [ 554.030089][T12010] Invalid ELF header type: 3 != 1 [ 554.036587][T12010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.055667][T12010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 554.149634][T12012] 9pnet_virtio: no channels available for device syz [ 554.771527][T11989] lo speed is unknown, defaulting to 1000 [ 557.649122][ T42] audit: type=1800 audit(1793848734.417:1809): pid=12056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1393" name="dummy_udc" dev="gadgetfs" ino=9707 res=0 errno=-16 [ 558.399771][T12069] rxe_eth0 speed is unknown, defaulting to 1000 [ 561.421485][T12069] lo speed is unknown, defaulting to 1000 [ 562.072789][T12090] rxe_eth0 speed is unknown, defaulting to 1000 [ 562.120310][ T858] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 562.300770][T12090] lo speed is unknown, defaulting to 1000 [ 562.523830][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.552206][ T858] usb 8-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 563.617045][ T858] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 563.617093][ T858] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.638333][ T858] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 563.638539][ T858] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81 [ 563.638665][ T858] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1 [ 563.640768][ T858] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 563.640830][ T858] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 563.651388][ T858] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 563.653505][ T858] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 563.653567][ T858] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 563.677560][ T858] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 564.904090][T12108] 9pnet_virtio: no channels available for device syz [ 566.060847][ T858] usb 8-1: USB disconnect, device number 8 [ 566.143836][ T858] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 566.147426][ T858] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 566.149739][ T858] keyspan 8-1:1.0: device disconnected [ 566.187289][T12115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.187514][T12115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.175690][T12138] rxe_eth0 speed is unknown, defaulting to 1000 [ 568.829199][T12138] lo speed is unknown, defaulting to 1000 [ 568.833240][ T858] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 569.043514][ T858] usb 8-1: Using ep0 maxpacket: 16 [ 569.043970][ T858] usb 8-1: New USB device found: idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 569.110412][T12155] Invalid ELF header magic: != ELF [ 569.400734][ T858] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 569.400760][ T858] usb 8-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 569.400777][ T858] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 569.400797][ T858] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 569.400817][ T858] usb 8-1: config 0 interface 0 has no altsetting 0 [ 569.462728][ T858] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.462745][ T858] usb 8-1: Product: syz [ 569.462752][ T858] usb 8-1: Manufacturer: syz [ 569.462759][ T858] usb 8-1: SerialNumber: syz [ 569.468874][ T858] usb 8-1: config 0 descriptor?? [ 569.474741][T12139] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 570.275407][T12131] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 570.287558][ T858] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input18 [ 570.740307][T11367] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 570.982753][T11367] usb 7-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 570.983762][T11367] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 570.983799][T11367] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.006632][T11367] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 571.006825][T11367] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 571.006880][T11367] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 571.008024][T11367] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 571.008088][T11367] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 571.014708][T11367] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 571.017460][T11378] usb 8-1: USB disconnect, device number 9 [ 571.035249][T11367] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 571.035317][T11367] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 571.036540][T11367] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 573.391014][T11367] usb 7-1: USB disconnect, device number 10 [ 573.484454][T11367] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 573.523861][T11367] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 573.524338][T11367] keyspan 7-1:1.0: device disconnected [ 576.500304][T12217] rxe_eth0 speed is unknown, defaulting to 1000 [ 576.779968][T12217] lo speed is unknown, defaulting to 1000 [ 579.901761][T11378] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 580.020622][ T858] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 580.072459][T11378] usb 6-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 580.073773][T11378] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 580.074156][T11378] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.084552][T11378] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 580.084645][T11378] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 580.084672][T11378] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 580.085541][T11378] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 580.085578][T11378] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 580.200327][ T858] usb 8-1: Using ep0 maxpacket: 8 [ 580.204241][ T858] usb 8-1: New USB device found: idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 580.207991][ T858] usb 8-1: config 0 has no interfaces? [ 580.213929][ T858] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.213947][ T858] usb 8-1: Product: syz [ 580.213957][ T858] usb 8-1: Manufacturer: syz [ 580.213967][ T858] usb 8-1: SerialNumber: syz [ 580.216228][ T858] usb 8-1: config 0 descriptor?? [ 580.288230][T12262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.288772][T12262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.291567][T11378] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 580.293217][T11378] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 580.293484][T11378] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 580.294709][T11378] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 580.393397][T12254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.481855][T12254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 580.484066][T12254] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 580.484079][T12254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 580.485435][T12254] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 580.963611][T11367] usb 8-1: USB disconnect, device number 10 [ 582.695812][T11367] usb 6-1: USB disconnect, device number 13 [ 582.703983][T11367] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 582.716360][T11367] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 582.716859][T11367] keyspan 6-1:1.0: device disconnected [ 583.244304][T12291] rxe_eth0 speed is unknown, defaulting to 1000 [ 583.372116][T12291] lo speed is unknown, defaulting to 1000 [ 585.724548][T12310] 9p: Bad value for 'rfdno' [ 588.904098][T12341] 9pnet_virtio: no channels available for device syz [ 588.940347][T11367] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 589.101205][T11367] usb 7-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 589.106301][T11367] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 589.106329][T11367] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.109898][T11367] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 589.110004][T11367] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 589.110032][T11367] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 589.161383][T11367] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 589.161450][T11367] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 589.165100][T11367] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 589.166400][T11367] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 589.166465][T11367] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 589.195125][T11367] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 589.209927][T12336] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 589.350244][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 589.510663][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 589.511476][ T24] usb 6-1: New USB device found: idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 589.511972][ T24] usb 6-1: config 0 has no interfaces? [ 589.527295][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.527314][ T24] usb 6-1: Product: syz [ 589.527321][ T24] usb 6-1: Manufacturer: syz [ 589.527328][ T24] usb 6-1: SerialNumber: syz [ 589.539615][ T24] usb 6-1: config 0 descriptor?? [ 590.041370][T11385] usb 6-1: USB disconnect, device number 14 [ 594.176034][T12354] rxe_eth0 speed is unknown, defaulting to 1000 [ 594.212181][T11385] usb 7-1: USB disconnect, device number 11 [ 594.227329][T11385] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 594.277522][T11385] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 594.278047][T11385] keyspan 7-1:1.0: device disconnected [ 594.463090][ T42] audit: type=1326 audit(1793848771.237:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12372 comm="syz.0.1463" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf740efbc code=0x0 [ 595.292733][T12354] lo speed is unknown, defaulting to 1000 [ 600.571031][T12435] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 601.228292][T12445] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 601.525838][T12459] 9pnet_virtio: no channels available for device syz [ 601.621468][T11385] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 601.781891][T11385] usb 7-1: Using ep0 maxpacket: 8 [ 601.783484][T11385] usb 7-1: New USB device found: idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 601.784052][T11385] usb 7-1: config 0 has no interfaces? [ 601.786690][T11385] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.786702][T11385] usb 7-1: Product: syz [ 601.786709][T11385] usb 7-1: Manufacturer: syz [ 601.786716][T11385] usb 7-1: SerialNumber: syz [ 601.793893][T11385] usb 7-1: config 0 descriptor?? [ 602.021682][T11385] usb 7-1: USB disconnect, device number 12 [ 602.240729][ T7216] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 602.440194][ T7216] usb 6-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 602.442274][ T7216] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 602.442297][ T7216] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.507513][ T7216] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 602.507908][ T7216] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 602.507938][ T7216] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 602.523225][ T7216] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 602.524067][ T7216] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 602.557258][ T7216] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 602.573075][ T7216] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 602.573112][ T7216] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 602.636689][ T7216] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 605.017956][T11385] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 605.019069][T11367] usb 6-1: USB disconnect, device number 15 [ 605.032648][T11367] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 605.046866][T11367] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 605.062103][T11367] keyspan 6-1:1.0: device disconnected [ 605.170462][T11385] usb 7-1: Using ep0 maxpacket: 16 [ 605.173436][T11385] usb 7-1: New USB device found: idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 605.177407][T11385] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 605.177429][T11385] usb 7-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 605.177448][T11385] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 605.177467][T11385] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 605.177487][T11385] usb 7-1: config 0 interface 0 has no altsetting 0 [ 605.179652][T11385] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.179670][T11385] usb 7-1: Product: syz [ 605.179681][T11385] usb 7-1: Manufacturer: syz [ 605.179692][T11385] usb 7-1: SerialNumber: syz [ 605.185376][T11385] usb 7-1: config 0 descriptor?? [ 605.187413][T12503] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 605.544196][T12490] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 605.554554][T11385] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input19 [ 605.951771][ T24] usb 7-1: USB disconnect, device number 13 [ 606.698238][T12516] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 607.230274][T11385] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 607.436150][T11385] usb 8-1: Using ep0 maxpacket: 8 [ 607.477171][T11385] usb 8-1: New USB device found: idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 607.499229][T11385] usb 8-1: config 0 has no interfaces? [ 607.596287][T11385] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.596312][T11385] usb 8-1: Product: syz [ 607.596324][T11385] usb 8-1: Manufacturer: syz [ 607.596335][T11385] usb 8-1: SerialNumber: syz [ 607.637484][T11385] usb 8-1: config 0 descriptor?? [ 607.862307][ T7216] usb 8-1: USB disconnect, device number 11 [ 609.269932][ T42] audit: type=1326 audit(1793848786.037:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12552 comm="syz.3.1483" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff8fbc code=0x0 [ 609.820244][T11367] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 609.971211][T11367] usb 6-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 609.972516][T11367] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 609.972539][T11367] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.002189][T11367] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 610.006764][T11367] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 610.006847][T11367] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 610.021793][T11367] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 610.021920][T11367] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 610.040049][T11367] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 610.047276][T11367] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 610.047311][T11367] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 610.062422][T11367] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 611.874678][T12615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.875753][T12615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.638754][T11367] usb 6-1: USB disconnect, device number 16 [ 612.656756][T11367] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 612.675772][T11367] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 612.693263][T11367] keyspan 6-1:1.0: device disconnected [ 613.462653][T12638] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 613.845655][T11367] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 614.090534][T11367] usb 8-1: Using ep0 maxpacket: 8 [ 614.120667][T11367] usb 8-1: New USB device found: idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 614.121095][T11367] usb 8-1: config 0 has no interfaces? [ 614.122621][T11367] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.122632][T11367] usb 8-1: Product: syz [ 614.122639][T11367] usb 8-1: Manufacturer: syz [ 614.122646][T11367] usb 8-1: SerialNumber: syz [ 614.126656][T11367] usb 8-1: config 0 descriptor?? [ 614.352088][T11367] usb 8-1: USB disconnect, device number 12 [ 617.321260][T12678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.329987][T12678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.226425][T12687] FAULT_INJECTION: forcing a failure. [ 618.226425][T12687] name failslab, interval 1, probability 5, space 0, times 0 [ 618.226452][T12687] CPU: 1 UID: 0 PID: 12687 Comm: syz.2.1504 Not tainted syzkaller #0 PREEMPT(full) [ 618.226471][T12687] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 618.226482][T12687] Call Trace: [ 618.226488][T12687] [ 618.226494][T12687] dump_stack_lvl+0x100/0x190 [ 618.226524][T12687] should_fail_ex.cold+0x5/0xa [ 618.226550][T12687] should_failslab+0xc2/0x120 [ 618.226572][T12687] __kmalloc_noprof+0xfc/0x840 [ 618.226589][T12687] ? rcu_is_watching+0x13/0xc0 [ 618.226615][T12687] ? trace_probe_init+0x77/0x560 [ 618.226642][T12687] trace_probe_init+0x77/0x560 [ 618.226669][T12687] alloc_trace_uprobe+0xf8/0x370 [ 618.226694][T12687] __trace_uprobe_create+0x673/0x2310 [ 618.226731][T12687] ? __pfx___trace_uprobe_create+0x10/0x10 [ 618.226756][T12687] ? trace_kmalloc+0xeb/0x110 [ 618.226775][T12687] ? __kasan_kmalloc+0xaa/0xb0 [ 618.226795][T12687] ? __kmalloc_noprof+0x350/0x840 [ 618.226812][T12687] ? argv_split+0x173/0x420 [ 618.226841][T12687] ? argv_split+0x359/0x420 [ 618.226865][T12687] ? __pfx___trace_uprobe_create+0x10/0x10 [ 618.226892][T12687] trace_probe_create+0xef/0x100 [ 618.226915][T12687] ? __pfx_trace_probe_create+0x10/0x10 [ 618.226946][T12687] dyn_event_create+0x50/0x90 [ 618.226964][T12687] create_or_delete_trace_uprobe+0x5a/0xb0 [ 618.226990][T12687] trace_parse_run_command+0x1ab/0x3b0 [ 618.227012][T12687] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 618.227042][T12687] vfs_write+0x2aa/0x1050 [ 618.227059][T12687] ? __pfx_probes_write+0x10/0x10 [ 618.227081][T12687] ? lock_acquire+0x1d1/0x380 [ 618.227098][T12687] ? __fget_files+0x34/0x3d0 [ 618.227119][T12687] ? __pfx_vfs_write+0x10/0x10 [ 618.227135][T12687] ? find_held_lock+0x2b/0x80 [ 618.227159][T12687] ? __fget_files+0x215/0x3d0 [ 618.227188][T12687] ? __fget_files+0x21f/0x3d0 [ 618.227208][T12687] ksys_write+0x12a/0x250 [ 618.227220][T12687] ? __pfx_ksys_write+0x10/0x10 [ 618.227235][T12687] __do_fast_syscall_32+0x14b/0x8c0 [ 618.227253][T12687] do_fast_syscall_32+0x32/0x70 [ 618.227268][T12687] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 618.227281][T12687] RIP: 0023:0xf73eefbc [ 618.227291][T12687] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 618.227300][T12687] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 618.227312][T12687] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080001d80 [ 618.227318][T12687] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 618.227324][T12687] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 618.227329][T12687] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 618.227335][T12687] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 618.227349][T12687] [ 620.847314][T12726] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 620.912171][ T1174] nvmet: Created nvm controller 2 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5fa885c8-68f6-49b5-8bc0-161dabc52d57. [ 620.912969][T12724] nvme nvme1: creating 4 I/O queues. [ 620.919327][T12724] nvme nvme1: new ctrl: "testsubsys" [ 621.961862][ T858] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 622.585345][T12742] 9pnet_virtio: no channels available for device syz [ 622.940874][ T858] usb 6-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 622.942211][ T858] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 622.942234][ T858] usb 6-1: config 0 interface 0 has no altsetting 0 [ 622.958905][ T858] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 622.958928][ T858] usb 6-1: Product: syz [ 622.958940][ T858] usb 6-1: Manufacturer: syz [ 622.958952][ T858] usb 6-1: SerialNumber: syz [ 622.964215][ T858] usb 6-1: config 0 descriptor?? [ 623.059386][ T858] usb 6-1: selecting invalid altsetting 0 [ 623.159797][T12744] FAULT_INJECTION: forcing a failure. [ 623.159797][T12744] name failslab, interval 1, probability 5, space 0, times 0 [ 623.159821][T12744] CPU: 1 UID: 0 PID: 12744 Comm: syz.3.1514 Not tainted syzkaller #0 PREEMPT(full) [ 623.159834][T12744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 623.159840][T12744] Call Trace: [ 623.159844][T12744] [ 623.159848][T12744] dump_stack_lvl+0x100/0x190 [ 623.159868][T12744] should_fail_ex.cold+0x5/0xa [ 623.159882][T12744] should_failslab+0xc2/0x120 [ 623.159895][T12744] __kmalloc_noprof+0xfc/0x840 [ 623.159905][T12744] ? rcu_is_watching+0x13/0xc0 [ 623.159919][T12744] ? trace_probe_init+0x77/0x560 [ 623.159944][T12744] trace_probe_init+0x77/0x560 [ 623.159968][T12744] alloc_trace_uprobe+0xf8/0x370 [ 623.159996][T12744] __trace_uprobe_create+0x673/0x2310 [ 623.160049][T12744] ? __pfx___trace_uprobe_create+0x10/0x10 [ 623.160076][T12744] ? trace_kmalloc+0xeb/0x110 [ 623.160096][T12744] ? __kasan_kmalloc+0xaa/0xb0 [ 623.160117][T12744] ? __kmalloc_noprof+0x350/0x840 [ 623.160134][T12744] ? argv_split+0x173/0x420 [ 623.160164][T12744] ? argv_split+0x359/0x420 [ 623.160188][T12744] ? __pfx___trace_uprobe_create+0x10/0x10 [ 623.160214][T12744] trace_probe_create+0xef/0x100 [ 623.160238][T12744] ? __pfx_trace_probe_create+0x10/0x10 [ 623.160269][T12744] dyn_event_create+0x50/0x90 [ 623.160288][T12744] create_or_delete_trace_uprobe+0x5a/0xb0 [ 623.160316][T12744] trace_parse_run_command+0x1ab/0x3b0 [ 623.160339][T12744] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 623.160370][T12744] vfs_write+0x2aa/0x1050 [ 623.160390][T12744] ? __pfx_probes_write+0x10/0x10 [ 623.160414][T12744] ? lock_acquire+0x1d1/0x380 [ 623.160434][T12744] ? __fget_files+0x34/0x3d0 [ 623.160454][T12744] ? __pfx_vfs_write+0x10/0x10 [ 623.160471][T12744] ? find_held_lock+0x2b/0x80 [ 623.160497][T12744] ? __fget_files+0x215/0x3d0 [ 623.160522][T12744] ? __fget_files+0x21f/0x3d0 [ 623.160551][T12744] ksys_write+0x12a/0x250 [ 623.160570][T12744] ? __pfx_ksys_write+0x10/0x10 [ 623.160614][T12744] __do_fast_syscall_32+0x14b/0x8c0 [ 623.160652][T12744] do_fast_syscall_32+0x32/0x70 [ 623.160677][T12744] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 623.160701][T12744] RIP: 0023:0xf7ff8fbc [ 623.160717][T12744] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 623.160734][T12744] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 623.160751][T12744] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080001d80 [ 623.160762][T12744] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 623.160773][T12744] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 623.160784][T12744] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 623.160795][T12744] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 623.160822][T12744] [ 623.372156][T12733] CIFS: Attempting to mount //127.0.0.1/share [ 623.395118][T12748] rxe_eth0 speed is unknown, defaulting to 1000 [ 623.495348][T12752] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 623.495695][T12752] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 623.933093][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.448004][T12748] lo speed is unknown, defaulting to 1000 [ 624.524334][T12733] CIFS: VFS: cifs_mount failed w/return code = -512 [ 624.607238][T11369] usb 6-1: USB disconnect, device number 17 [ 629.838482][ T42] audit: type=1326 audit(1793848806.607:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12787 comm="syz.2.1521" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73eefbc code=0x0 [ 631.283673][T12819] 9pnet_virtio: no channels available for device syz [ 636.270282][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 636.463646][ T24] usb 6-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 636.468363][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 636.468378][ T24] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 636.468396][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.502755][ T24] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 636.514730][ T24] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 637.837562][T12863] 9pnet_virtio: no channels available for device syz [ 638.479647][ T24] usb 6-1: USB disconnect, device number 18 [ 638.520403][ T24] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 638.521359][ T24] spcp8x5 6-1:1.0: device disconnected [ 638.795809][T12861] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 638.884634][ T1174] nvmet: Created nvm controller 3 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5fa885c8-68f6-49b5-8bc0-161dabc52d57. [ 638.888173][T12861] nvme nvme2: creating 4 I/O queues. [ 639.049708][T12861] nvme nvme2: new ctrl: "testsubsys" [ 640.090305][T11369] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 640.335846][T11369] usb 7-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 640.381198][T11369] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 640.381247][T11369] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.778367][T11369] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 640.778554][T11369] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 640.778605][T11369] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 641.169425][T11369] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 641.169474][T11369] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 641.305205][T11369] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 641.756004][T11369] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 641.756044][T11369] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 642.084193][T11369] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 642.450313][ T42] audit: type=1326 audit(1793848819.227:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12887 comm="syz.0.1544" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf740efbc code=0x0 [ 643.136300][ T24] libceph: connect (1)[c::]:6789 error -101 [ 643.137436][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 643.165681][T12902] ceph: No mds server is up or the cluster is laggy [ 643.393536][ T24] libceph: connect (1)[c::]:6789 error -101 [ 643.397148][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 644.117289][T11369] usb 7-1: USB disconnect, device number 14 [ 644.118787][T11369] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 644.120024][T11369] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 644.120367][T11369] keyspan 7-1:1.0: device disconnected [ 647.881401][T12932] Invalid ELF header magic: != ELF [ 650.964908][T12967] rxe_eth0 speed is unknown, defaulting to 1000 [ 650.980496][T11367] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 651.045475][T12971] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 651.200853][T11367] usb 7-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 651.224729][T11367] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 651.225183][T11367] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 651.226301][T11367] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.407215][T11367] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 651.438839][T11367] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 651.685552][T12967] lo speed is unknown, defaulting to 1000 [ 653.219273][T12992] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 653.229428][T11367] usb 7-1: USB disconnect, device number 15 [ 653.252219][T11367] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 653.256039][T11367] spcp8x5 7-1:1.0: device disconnected [ 653.460432][ T37] nvmet: Created nvm controller 4 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5fa885c8-68f6-49b5-8bc0-161dabc52d57. [ 653.570779][T12992] nvme nvme3: creating 4 I/O queues. [ 653.643979][T12992] nvme nvme3: new ctrl: "testsubsys" [ 653.772714][T13018] bridge_slave_1: left allmulticast mode [ 653.772733][T13018] bridge_slave_1: left promiscuous mode [ 653.772849][T13018] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.293133][T13022] FAULT_INJECTION: forcing a failure. [ 654.293133][T13022] name failslab, interval 1, probability 5, space 0, times 0 [ 654.293152][T13022] CPU: 1 UID: 0 PID: 13022 Comm: syz.3.1570 Not tainted syzkaller #0 PREEMPT(full) [ 654.293163][T13022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 654.293170][T13022] Call Trace: [ 654.293174][T13022] [ 654.293179][T13022] dump_stack_lvl+0x100/0x190 [ 654.293201][T13022] should_fail_ex.cold+0x5/0xa [ 654.293217][T13022] should_failslab+0xc2/0x120 [ 654.293231][T13022] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 654.293249][T13022] ? alloc_vmap_area+0x643/0x2bc0 [ 654.293263][T13022] alloc_vmap_area+0x643/0x2bc0 [ 654.293278][T13022] ? kasan_save_track+0x14/0x30 [ 654.293289][T13022] ? __kasan_kmalloc+0xaa/0xb0 [ 654.293299][T13022] ? __pfx_alloc_vmap_area+0x10/0x10 [ 654.293311][T13022] ? __get_vm_area_node+0x124/0x350 [ 654.293323][T13022] __get_vm_area_node+0x1ed/0x350 [ 654.293337][T13022] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 654.293350][T13022] ? __vcalloc_noprof+0x4d/0x80 [ 654.293366][T13022] ? __lock_acquire+0x5c0/0x1f40 [ 654.293378][T13022] ? __vcalloc_noprof+0x4d/0x80 [ 654.293394][T13022] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 654.293407][T13022] ? lock_acquire+0x1d1/0x380 [ 654.293421][T13022] ? __vcalloc_noprof+0x4d/0x80 [ 654.293433][T13022] __vmalloc_node_noprof+0xad/0xf0 [ 654.293445][T13022] ? __vcalloc_noprof+0x4d/0x80 [ 654.293459][T13022] __vmalloc_noprof+0xa3/0x120 [ 654.293470][T13022] ? __pfx___vmalloc_noprof+0x10/0x10 [ 654.293483][T13022] ? __pfx___mutex_lock+0x10/0x10 [ 654.293500][T13022] __vcalloc_noprof+0x4d/0x80 [ 654.293522][T13022] kvm_arch_prepare_memory_region+0x35c/0x8c0 [ 654.293544][T13022] kvm_set_memslot+0x139/0x1830 [ 654.293564][T13022] kvm_set_memory_region+0xe9f/0x1690 [ 654.293586][T13022] kvm_vm_ioctl+0x1ef5/0x2950 [ 654.293598][T13022] ? kasan_save_stack+0x3f/0x50 [ 654.293610][T13022] ? kasan_save_stack+0x30/0x50 [ 654.293620][T13022] ? kasan_save_track+0x14/0x30 [ 654.293631][T13022] ? kasan_save_free_info+0x3b/0x70 [ 654.293645][T13022] ? __kasan_slab_free+0x5f/0x80 [ 654.293656][T13022] ? kfree+0x22b/0x6d0 [ 654.293668][T13022] ? tomoyo_path_number_perm+0x46d/0x580 [ 654.293682][T13022] ? security_file_ioctl_compat+0xd3/0x230 [ 654.293696][T13022] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 654.293709][T13022] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 654.293740][T13022] ? kasan_quarantine_put+0x104/0x240 [ 654.293750][T13022] ? lockdep_hardirqs_on+0x7d/0x110 [ 654.293764][T13022] ? find_held_lock+0x2b/0x80 [ 654.293806][T13022] ? tomoyo_path_number_perm+0x28f/0x580 [ 654.293834][T13022] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 654.293849][T13022] ? do_vfs_ioctl+0x226/0x13e0 [ 654.293867][T13022] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 654.293885][T13022] kvm_vm_compat_ioctl+0x2f7/0x410 [ 654.293897][T13022] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 654.293910][T13022] ? __fget_files+0x34/0x3d0 [ 654.293923][T13022] ? find_held_lock+0x2b/0x80 [ 654.293936][T13022] ? __fget_files+0x215/0x3d0 [ 654.293946][T13022] ? hook_file_ioctl_common+0x140/0x440 [ 654.293964][T13022] ? __fget_files+0x21f/0x3d0 [ 654.293978][T13022] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 654.293991][T13022] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 654.294008][T13022] __do_fast_syscall_32+0x14b/0x8c0 [ 654.294025][T13022] do_fast_syscall_32+0x32/0x70 [ 654.294039][T13022] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 654.294052][T13022] RIP: 0023:0xf7ff8fbc [ 654.294061][T13022] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 654.294071][T13022] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 654.294082][T13022] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000004020ae46 [ 654.294089][T13022] RDX: 00000000800004c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 654.294095][T13022] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 654.294100][T13022] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 654.294106][T13022] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 654.294120][T13022] [ 654.294135][T13022] syz.3.1570: vmalloc error: size 4, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 654.294183][T13022] CPU: 1 UID: 0 PID: 13022 Comm: syz.3.1570 Not tainted syzkaller #0 PREEMPT(full) [ 654.294196][T13022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 654.294202][T13022] Call Trace: [ 654.294206][T13022] [ 654.294210][T13022] dump_stack_lvl+0x100/0x190 [ 654.294227][T13022] warn_alloc.cold+0x9e/0xb2 [ 654.294240][T13022] ? __pfx_warn_alloc+0x10/0x10 [ 654.294255][T13022] ? lockdep_hardirqs_on+0x7d/0x110 [ 654.294271][T13022] ? __get_vm_area_node+0x2f0/0x350 [ 654.294286][T13022] ? __get_vm_area_node+0x22b/0x350 [ 654.294300][T13022] __vmalloc_node_range_noprof+0xdc6/0x1440 [ 654.294316][T13022] ? __lock_acquire+0x5c0/0x1f40 [ 654.294327][T13022] ? __vcalloc_noprof+0x4d/0x80 [ 654.294343][T13022] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 654.294356][T13022] ? lock_acquire+0x1d1/0x380 [ 654.294370][T13022] ? __vcalloc_noprof+0x4d/0x80 [ 654.294382][T13022] __vmalloc_node_noprof+0xad/0xf0 [ 654.294394][T13022] ? __vcalloc_noprof+0x4d/0x80 [ 654.294408][T13022] __vmalloc_noprof+0xa3/0x120 [ 654.294420][T13022] ? __pfx___vmalloc_noprof+0x10/0x10 [ 654.294432][T13022] ? __pfx___mutex_lock+0x10/0x10 [ 654.294449][T13022] __vcalloc_noprof+0x4d/0x80 [ 654.294461][T13022] kvm_arch_prepare_memory_region+0x35c/0x8c0 [ 654.294482][T13022] kvm_set_memslot+0x139/0x1830 [ 654.294499][T13022] kvm_set_memory_region+0xe9f/0x1690 [ 654.294527][T13022] kvm_vm_ioctl+0x1ef5/0x2950 [ 654.294538][T13022] ? kasan_save_stack+0x3f/0x50 [ 654.294549][T13022] ? kasan_save_stack+0x30/0x50 [ 654.294560][T13022] ? kasan_save_track+0x14/0x30 [ 654.294570][T13022] ? kasan_save_free_info+0x3b/0x70 [ 654.294585][T13022] ? __kasan_slab_free+0x5f/0x80 [ 654.294597][T13022] ? kfree+0x22b/0x6d0 [ 654.294611][T13022] ? tomoyo_path_number_perm+0x46d/0x580 [ 654.294625][T13022] ? security_file_ioctl_compat+0xd3/0x230 [ 654.294640][T13022] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 654.294654][T13022] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 654.294684][T13022] ? kasan_quarantine_put+0x104/0x240 [ 654.294694][T13022] ? lockdep_hardirqs_on+0x7d/0x110 [ 654.294708][T13022] ? find_held_lock+0x2b/0x80 [ 654.294721][T13022] ? tomoyo_path_number_perm+0x28f/0x580 [ 654.294746][T13022] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 654.294760][T13022] ? do_vfs_ioctl+0x226/0x13e0 [ 654.294775][T13022] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 654.294792][T13022] kvm_vm_compat_ioctl+0x2f7/0x410 [ 654.294804][T13022] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 654.294815][T13022] ? __fget_files+0x34/0x3d0 [ 654.294826][T13022] ? find_held_lock+0x2b/0x80 [ 654.294840][T13022] ? __fget_files+0x215/0x3d0 [ 654.294850][T13022] ? hook_file_ioctl_common+0x140/0x440 [ 654.294868][T13022] ? __fget_files+0x21f/0x3d0 [ 654.294882][T13022] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 654.294894][T13022] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 654.294912][T13022] __do_fast_syscall_32+0x14b/0x8c0 [ 654.294928][T13022] do_fast_syscall_32+0x32/0x70 [ 654.294942][T13022] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 654.294954][T13022] RIP: 0023:0xf7ff8fbc [ 654.294962][T13022] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 654.294971][T13022] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 654.294981][T13022] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000004020ae46 [ 654.294987][T13022] RDX: 00000000800004c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 654.294993][T13022] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 654.294998][T13022] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 654.295004][T13022] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 654.295018][T13022] [ 654.295022][T13022] Mem-Info: [ 654.295027][T13022] active_anon:987 inactive_anon:4220 isolated_anon:0 [ 654.295027][T13022] active_file:10045 inactive_file:10192 isolated_file:0 [ 654.295027][T13022] unevictable:4072 dirty:547 writeback:0 [ 654.295027][T13022] slab_reclaimable:6490 slab_unreclaimable:60009 [ 654.295027][T13022] mapped:25808 shmem:6949 pagetables:1150 [ 654.295027][T13022] sec_pagetables:347 bounce:0 [ 654.295027][T13022] kernel_misc_reclaimable:0 [ 654.295027][T13022] free:25904 free_pcp:7050 free_cma:0 [ 654.295097][T13022] Node 0 active_anon:20kB inactive_anon:60kB active_file:260kB inactive_file:4kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:48kB dirty:4kB writeback:0kB shmem:2020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7264kB pagetables:1044kB sec_pagetables:1136kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 654.295124][T13022] Node 1 active_anon:3928kB inactive_anon:16820kB active_file:39920kB inactive_file:40764kB unevictable:14288kB isolated(anon):0kB isolated(file):0kB mapped:103184kB dirty:2184kB writeback:0kB shmem:25776kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6564kB pagetables:3556kB sec_pagetables:252kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 654.295151][T13022] Node 0 DMA free:2764kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:16kB free_cma:0kB [ 654.297564][T13022] lowmem_reserve[]: 0 256 256 256 256 [ 654.297587][T13022] Node 0 DMA32 free:20352kB boost:25968kB min:37512kB low:40396kB high:43280kB reserved_highatomic:2048kB free_highatomic:328kB active_anon:16kB inactive_anon:60kB active_file:260kB inactive_file:4kB unevictable:2000kB writepending:4kB zspages:1824kB present:1032196kB managed:262372kB mlocked:0kB bounce:0kB free_pcp:3360kB local_pcp:1176kB free_cma:0kB [ 654.297618][T13022] lowmem_reserve[]: 0 0 0 0 0 [ 654.297637][T13022] Node 1 DMA32 free:80500kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:2048kB free_highatomic:740kB active_anon:3928kB inactive_anon:16820kB active_file:39920kB inactive_file:40764kB unevictable:14288kB writepending:2184kB zspages:3632kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:24692kB local_pcp:2416kB free_cma:0kB [ 654.297668][T13022] lowmem_reserve[]: 0 0 0 0 0 [ 654.297686][T13022] Node 0 DMA: 115*4kB (UE) 14*8kB (UE) 13*16kB (UE) 22*32kB (UE) 14*64kB (UE) 1*128kB (E) 1*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2764kB [ 654.297805][T13022] Node 0 DMA32: 322*4kB (UEH) 69*8kB (UEH) 53*16kB (UMH) 104*32kB (UMEH) 54*64kB (UME) 31*128kB (UMEH) 13*256kB (UM) 5*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 20352kB [ 654.297887][T13022] Node 1 DMA32: 1752*4kB (UMEH) 517*8kB (UMEH) 152*16kB (UMEH) 210*32kB (UMEH) 95*64kB (UMEH) 59*128kB (UME) 23*256kB (ME) 17*512kB (M) 7*1024kB (M) 6*2048kB (M) 3*4096kB (UM) = 80264kB [ 654.297974][T13022] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 654.297982][T13022] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 654.297989][T13022] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 654.297997][T13022] Node 1 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 654.298004][T13022] 28679 total pagecache pages [ 654.298008][T13022] 1495 pages in swap cache [ 654.298012][T13022] Free swap = 102256kB [ 654.298015][T13022] Total swap = 124996kB [ 654.298019][T13022] 524155 pages RAM [ 654.298022][T13022] 0 pages HighMem/MovableOnly [ 654.298026][T13022] 217670 pages reserved [ 654.298029][T13022] 0 pages cma reserved [ 656.566908][T13057] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 656.666812][T13057] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 656.666872][T13057] overlayfs: failed to look up (tracing) for ino (-66) [ 660.300480][T13081] Invalid ELF header magic: != ELF [ 660.906880][T13080] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 661.030878][ T237] nvmet: Created nvm controller 5 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:5fa885c8-68f6-49b5-8bc0-161dabc52d57. [ 661.032445][T13080] nvme nvme4: creating 4 I/O queues. [ 661.038388][T13080] nvme nvme4: new ctrl: "testsubsys" [ 666.291923][T13142] Invalid ELF header magic: != ELF [ 666.319575][T13142] overlay: Unknown parameter '/' [ 666.940512][T13153] ublk7: read batch cmd buffer failed [ 666.940563][T13153] ublk7: read batch cmd buffer failed [ 666.946855][T13153] ublk7: read batch cmd buffer failed [ 666.946905][T13153] ublk7: read batch cmd buffer failed [ 667.271896][T13157] rxe_eth0 speed is unknown, defaulting to 1000 [ 667.569896][T13157] lo speed is unknown, defaulting to 1000 [ 673.336493][T13206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1610'. [ 675.088177][T13228] 9pnet_virtio: no channels available for device syz [ 678.574929][T13240] ceph: No mds server is up or the cluster is laggy [ 678.578840][ T34] libceph: connect (1)[c::]:6789 error -101 [ 678.580728][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 678.855572][ T34] libceph: connect (1)[c::]:6789 error -101 [ 678.872386][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 680.433323][T13250] Console: switching to colour dummy device 80x25 [ 681.776161][ T42] audit: type=1326 audit(1793848858.547:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13261 comm="syz.0.1623" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf740efbc code=0x0 [ 684.258412][T13294] rxe_eth0 speed is unknown, defaulting to 1000 [ 685.375261][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.943710][T13309] ubi0: attaching mtd0 [ 685.965583][T13309] ubi0: scanning is finished [ 685.965613][T13309] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 685.974255][T13294] lo speed is unknown, defaulting to 1000 [ 686.007063][T11378] hid-sensor-hub 0003:1234:5678.0002: hidraw1: USB HID v0.01 Device [syz0] on syz0 [ 686.529692][T13308] bridge0: entered promiscuous mode [ 686.529706][T13308] bridge0: entered allmulticast mode [ 686.626099][T13309] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 687.107586][T13315] fido_id[13315]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 687.650556][T13322] 9pnet_virtio: no channels available for device syz [ 691.450003][T11385] libceph: connect (1)[c::]:6789 error -101 [ 691.455742][T11385] libceph: mon0 (1)[c::]:6789 connect error [ 691.493185][T13335] ceph: No mds server is up or the cluster is laggy [ 691.837356][ T42] audit: type=1326 audit(1793848868.607:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13341 comm="syz.0.1639" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf740efbc code=0x0 [ 693.203929][T13365] 9pnet_virtio: no channels available for device syz [ 694.856135][T13382] device-mapper: table: 248:5: raid: 'raid10_format' is an invalid parameter for this RAID type (-EINVAL) [ 694.856163][T13382] device-mapper: ioctl: error adding target to table [ 694.936084][T13382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1647'. [ 695.702209][T13394] rxe_eth0 speed is unknown, defaulting to 1000 [ 695.943354][T13394] lo speed is unknown, defaulting to 1000 [ 697.840056][T13413] ublk8: read batch cmd buffer failed [ 697.840288][T13413] ublk8: read batch cmd buffer failed [ 697.875906][T13413] ublk8: read batch cmd buffer failed [ 697.876268][T13413] ublk8: read batch cmd buffer failed [ 698.510447][T11385] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 698.754958][T11385] usb 8-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 698.756011][T11385] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 698.756032][T11385] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 698.756059][T11385] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.780860][T11385] spcp8x5 8-1:1.0: SPCP8x5 converter detected [ 698.793120][T11385] usb 8-1: SPCP8x5 converter now attached to ttyUSB0 [ 699.111209][T13432] 9pnet_virtio: no channels available for device syz [ 699.855869][T13435] Invalid ELF header magic: != ELF [ 700.733628][T11385] usb 8-1: USB disconnect, device number 13 [ 700.791976][T11385] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 700.792288][T11385] spcp8x5 8-1:1.0: device disconnected [ 700.847482][T13442] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1658'. [ 700.887661][T13442] i801_smbus 0000:00:1f.3: SMBus using PCI interrupt [ 700.914457][T13442] FAULT_INJECTION: forcing a failure. [ 700.914457][T13442] name failslab, interval 1, probability 5, space 0, times 0 [ 700.914477][T13442] CPU: 1 UID: 0 PID: 13442 Comm: syz.1.1658 Not tainted syzkaller #0 PREEMPT(full) [ 700.914491][T13442] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 700.914497][T13442] Call Trace: [ 700.914501][T13442] [ 700.914507][T13442] dump_stack_lvl+0x100/0x190 [ 700.914528][T13442] should_fail_ex.cold+0x5/0xa [ 700.914545][T13442] should_failslab+0xc2/0x120 [ 700.914559][T13442] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 700.914572][T13442] ? kstrdup_const+0x63/0x80 [ 700.914587][T13442] kstrdup+0x51/0xe0 [ 700.914600][T13442] kstrdup_const+0x63/0x80 [ 700.914611][T13442] __kernfs_new_node+0x9b/0xa10 [ 700.914630][T13442] ? __pfx___kernfs_new_node+0x10/0x10 [ 700.914663][T13442] ? lock_acquire+0x1d1/0x380 [ 700.914674][T13442] ? kernfs_root+0x23/0x2a0 [ 700.914688][T13442] ? find_held_lock+0x2b/0x80 [ 700.914703][T13442] ? kernfs_root+0xee/0x2a0 [ 700.914717][T13442] ? kernfs_root+0xee/0x2a0 [ 700.914737][T13442] kernfs_new_node+0x194/0x200 [ 700.914755][T13442] ? __pfx_kernfs_new_node+0x10/0x10 [ 700.914771][T13442] ? kernfs_create_link+0xe4/0x280 [ 700.914783][T13442] ? kernfs_create_link+0xe4/0x280 [ 700.914800][T13442] kernfs_create_link+0x100/0x280 [ 700.914814][T13442] sysfs_do_create_link_sd+0x90/0x140 [ 700.914830][T13442] sysfs_create_link+0x61/0xc0 [ 700.914844][T13442] acpi_bind_one+0x4b4/0x650 [ 700.914861][T13442] ? __pfx_acpi_bind_one+0x10/0x10 [ 700.914876][T13442] ? __kasan_kmalloc+0xaa/0xb0 [ 700.914887][T13442] ? lockdep_init_map_type+0x5c/0x250 [ 700.914901][T13442] acpi_device_notify+0x50/0x510 [ 700.914916][T13442] device_add+0x2b4/0x1970 [ 700.914929][T13442] ? __pfx_device_add+0x10/0x10 [ 700.914938][T13442] ? __pfx_idr_replace+0x10/0x10 [ 700.914954][T13442] ? dput.part.0+0x4a/0x240 [ 700.914969][T13442] ? dput+0x24/0x30 [ 700.914985][T13442] i2c_register_adapter+0x862/0x13f0 [ 700.914997][T13442] ? of_alias_get_id+0xb1/0x110 [ 700.915015][T13442] i801_probe.cold+0x30c/0x8bf [ 700.915031][T13442] ? __pfx_i801_probe+0x10/0x10 [ 700.915048][T13442] ? mark_held_locks+0x40/0x70 [ 700.915058][T13442] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 700.915070][T13442] ? lockdep_hardirqs_on+0x7d/0x110 [ 700.915083][T13442] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 700.915097][T13442] ? __pfx_i801_probe+0x10/0x10 [ 700.915109][T13442] local_pci_probe+0xdd/0x1b0 [ 700.915125][T13442] pci_call_probe+0x176/0x800 [ 700.915136][T13442] ? pci_match_device+0x147/0x7d0 [ 700.915151][T13442] ? __pfx_pci_call_probe+0x10/0x10 [ 700.915164][T13442] ? __pfx_pci_match_device+0x10/0x10 [ 700.915179][T13442] ? pci_find_host_bridge+0x3c/0x80 [ 700.915197][T13442] pci_device_probe+0x25b/0x400 [ 700.915207][T13442] ? __pfx_pci_device_probe+0x10/0x10 [ 700.915222][T13442] ? sysfs_create_link+0x68/0xc0 [ 700.915236][T13442] ? __pfx_pci_device_probe+0x10/0x10 [ 700.915253][T13442] really_probe+0x241/0xa60 [ 700.915272][T13442] __driver_probe_device+0x210/0x460 [ 700.915290][T13442] device_driver_attach+0xaa/0x230 [ 700.915308][T13442] bind_store+0xf4/0x190 [ 700.915321][T13442] ? __pfx_bind_store+0x10/0x10 [ 700.915335][T13442] drv_attr_store+0x74/0xb0 [ 700.915347][T13442] ? __pfx_drv_attr_store+0x10/0x10 [ 700.915358][T13442] sysfs_kf_write+0xf2/0x150 [ 700.915373][T13442] kernfs_fop_write_iter+0x3e0/0x5f0 [ 700.915385][T13442] ? __pfx_sysfs_kf_write+0x10/0x10 [ 700.915415][T13442] vfs_write+0x6af/0x1050 [ 700.915428][T13442] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 700.915442][T13442] ? __pfx_vfs_write+0x10/0x10 [ 700.915453][T13442] ? find_held_lock+0x2b/0x80 [ 700.915479][T13442] ksys_write+0x12a/0x250 [ 700.915491][T13442] ? __pfx_ksys_write+0x10/0x10 [ 700.915507][T13442] __do_fast_syscall_32+0x14b/0x8c0 [ 700.915525][T13442] do_fast_syscall_32+0x32/0x70 [ 700.915540][T13442] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 700.915554][T13442] RIP: 0023:0xf748efbc [ 700.915563][T13442] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 700.915572][T13442] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 700.915583][T13442] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000800005c0 [ 700.915590][T13442] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 700.915596][T13442] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 700.915602][T13442] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 700.915607][T13442] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 700.915623][T13442] [ 700.927993][T13442] acpi device:10: Failed to create link physical_node1 (-12) [ 701.226252][T13447] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 701.237065][T13442] i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD [ 701.280052][ T13] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 701.358217][T13447] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 703.728588][T13486] 9pnet_virtio: no channels available for device syz [ 706.501679][T13503] sctp_transport_update_pmtu: 85 callbacks suppressed [ 706.501700][T13503] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 706.504969][T13503] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 706.510336][T13503] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 706.527249][T13503] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 706.537837][T13503] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 706.548592][T13503] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 706.580510][T13503] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 706.588808][T13503] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 706.593961][T13503] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 706.604453][T13503] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 707.753573][T13540] xt_REDIRECT: bad MAP_IPS. [ 707.766748][T13540] syzkaller0: entered promiscuous mode [ 707.766766][T13540] syzkaller0: entered allmulticast mode [ 708.312967][T13547] 9pnet_virtio: no channels available for device syz [ 708.394239][T13548] batadv_slave_1: entered promiscuous mode [ 708.495546][T13544] batadv_slave_1: left promiscuous mode [ 709.518037][ T42] audit: type=1326 audit(1793848886.287:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13553 comm="syz.1.1682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 709.519772][ T42] audit: type=1326 audit(1793848886.287:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13553 comm="syz.1.1682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 709.555607][ T42] audit: type=1326 audit(1793848886.327:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13553 comm="syz.1.1682" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 709.555639][ T42] audit: type=1326 audit(1793848886.327:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13553 comm="syz.1.1682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 709.555659][ T42] audit: type=1326 audit(1793848886.327:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13553 comm="syz.1.1682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 709.558801][ T42] audit: type=1326 audit(1793848886.327:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13553 comm="syz.1.1682" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 709.558826][ T42] audit: type=1326 audit(1793848886.327:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13553 comm="syz.1.1682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 709.558846][ T42] audit: type=1326 audit(1793848886.327:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13553 comm="syz.1.1682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 709.559519][ T42] audit: type=1326 audit(1793848886.327:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13553 comm="syz.1.1682" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 709.559542][ T42] audit: type=1326 audit(1793848886.327:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13553 comm="syz.1.1682" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 713.267041][T13589] sctp_transport_update_pmtu: 39 callbacks suppressed [ 713.267063][T13589] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 713.273338][T13589] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 713.279606][T13589] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 713.286412][T13589] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 713.292375][T13589] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 713.298590][T13589] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 713.304516][T13589] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 713.310672][T13589] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 713.316863][T13589] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 713.322751][T13589] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 715.320740][T13605] rxe_eth0 speed is unknown, defaulting to 1000 [ 715.343663][T13608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1693'. [ 717.107069][T13605] lo speed is unknown, defaulting to 1000 [ 719.522550][T13630] 9pnet_virtio: no channels available for device syz [ 722.004779][T13662] rxe_eth0 speed is unknown, defaulting to 1000 [ 723.090568][T13662] lo speed is unknown, defaulting to 1000 [ 723.848261][T13677] Illegal XDP return value 4294967294 on prog (id 239) dev N/A, expect packet loss! [ 727.540063][T13699] 9pnet_virtio: no channels available for device syz [ 728.290506][T13710] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 729.243215][T13716] 9pnet_virtio: no channels available for device syz [ 729.249614][T13715] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 730.012827][T13721] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 731.837860][T13735] rxe_eth0 speed is unknown, defaulting to 1000 [ 731.916804][T13735] lo speed is unknown, defaulting to 1000 [ 735.622807][T13770] 9pnet_virtio: no channels available for device syz [ 735.990498][T13771] e1000e 0000:00:02.0: resetting [ 736.679828][T13777] 9pnet_virtio: no channels available for device syz [ 736.981227][T13771] e1000e 0000:00:02.0: reset done [ 737.457483][T13787] Invalid ELF header magic: != ELF [ 738.840250][T11385] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 738.980934][T13802] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1736'. [ 739.169316][T13802] FAULT_INJECTION: forcing a failure. [ 739.169316][T13802] name failslab, interval 1, probability 5, space 0, times 0 [ 739.169437][T13802] CPU: 1 UID: 0 PID: 13802 Comm: syz.3.1736 Not tainted syzkaller #0 PREEMPT(full) [ 739.169461][T13802] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 739.169473][T13802] Call Trace: [ 739.169480][T13802] [ 739.169488][T13802] dump_stack_lvl+0x100/0x190 [ 739.169596][T13802] should_fail_ex.cold+0x5/0xa [ 739.169619][T13802] should_failslab+0xc2/0x120 [ 739.169667][T13802] __kvmalloc_node_noprof+0x113/0x9b0 [ 739.169691][T13802] ? sbitmap_init_node+0x1cc/0x720 [ 739.169726][T13802] sbitmap_init_node+0x1cc/0x720 [ 739.169754][T13802] ? __kmalloc_cache_node_noprof+0x271/0x710 [ 739.169777][T13802] sbitmap_queue_init_node+0x40/0x4a0 [ 739.169809][T13802] blk_mq_init_tags+0x184/0x300 [ 739.169831][T13802] blk_mq_alloc_map_and_rqs+0x244/0xe20 [ 739.169865][T13802] ? blk_mq_update_queue_map+0x227/0x3a0 [ 739.169888][T13802] blk_mq_alloc_tag_set+0x7ff/0x1320 [ 739.169926][T13802] loop_add+0x3b7/0xb60 [ 739.169977][T13802] ? __pfx_loop_add+0x10/0x10 [ 739.170018][T13802] ? __fget_files+0x34/0x3d0 [ 739.170039][T13802] ? find_held_lock+0x2b/0x80 [ 739.170064][T13802] ? __fget_files+0x215/0x3d0 [ 739.170086][T13802] loop_control_ioctl+0xae/0x620 [ 739.170113][T13802] ? __pfx_loop_control_ioctl+0x10/0x10 [ 739.170144][T13802] ? __pfx_loop_control_ioctl+0x10/0x10 [ 739.170170][T13802] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 739.170204][T13802] __do_fast_syscall_32+0x14b/0x8c0 [ 739.170259][T13802] do_fast_syscall_32+0x32/0x70 [ 739.170286][T13802] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 739.170313][T13802] RIP: 0023:0xf7ff8fbc [ 739.170328][T13802] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 739.170345][T13802] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 739.170364][T13802] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000004c80 [ 739.170376][T13802] RDX: 00000000ffffffe4 RSI: 0000000000000000 RDI: 0000000000000000 [ 739.170389][T13802] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 739.170399][T13802] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 739.170410][T13802] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 739.170435][T13802] [ 739.272079][T13802] blk-mq: reduced tag depth (128 -> 64) [ 739.823650][T11385] usb 7-1: unable to get BOS descriptor or descriptor too short [ 739.823695][T11385] usb 7-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=0.00 [ 739.823721][T11385] usb 7-1: no configurations [ 739.823730][T11385] usb 7-1: can't read configurations, error -22 [ 740.820844][T13824] 9pnet_virtio: no channels available for device syz [ 744.248746][T13839] syz.2.1745: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 744.248788][T13839] CPU: 1 UID: 0 PID: 13839 Comm: syz.2.1745 Not tainted syzkaller #0 PREEMPT(full) [ 744.248800][T13839] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 744.248806][T13839] Call Trace: [ 744.248811][T13839] [ 744.248815][T13839] dump_stack_lvl+0x100/0x190 [ 744.248835][T13839] warn_alloc.cold+0x9e/0xb2 [ 744.248848][T13839] ? __pfx_warn_alloc+0x10/0x10 [ 744.248867][T13839] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 744.248882][T13839] ? __pfx_get_page_from_freelist+0x10/0x10 [ 744.248902][T13839] __alloc_frozen_pages_noprof+0xaf3/0x3280 [ 744.248926][T13839] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 744.248952][T13839] ? lock_acquire+0x1d1/0x380 [ 744.248963][T13839] ? page_table_check_set+0x1aa/0x630 [ 744.248986][T13839] __folio_alloc_noprof+0x16/0x260 [ 744.249002][T13839] alloc_migration_target+0x1d7/0x6d0 [ 744.249017][T13839] migrate_pages_batch+0x5c2/0x4700 [ 744.249032][T13839] ? set_pte_range+0x3f0/0x9c0 [ 744.249042][T13839] ? __pfx_alloc_migration_target+0x10/0x10 [ 744.249058][T13839] ? rcu_read_unlock+0x2d/0xb0 [ 744.249072][T13839] ? __pfx_migrate_pages_batch+0x10/0x10 [ 744.249087][T13839] ? finish_fault+0xaea/0x13e0 [ 744.249102][T13839] ? folio_unlock+0xf5/0x190 [ 744.249118][T13839] migrate_pages_sync+0x12c/0x880 [ 744.249132][T13839] ? __pfx_alloc_migration_target+0x10/0x10 [ 744.249149][T13839] ? __pfx_migrate_pages_sync+0x10/0x10 [ 744.249169][T13839] migrate_pages+0x1a79/0x2840 [ 744.249184][T13839] ? __pfx_alloc_migration_target+0x10/0x10 [ 744.249201][T13839] ? __pfx_migrate_pages+0x10/0x10 [ 744.249220][T13839] ? mtree_load+0x3a4/0xb50 [ 744.249236][T13839] move_pages_and_store_status+0xf1/0x230 [ 744.249252][T13839] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 744.249272][T13839] kernel_move_pages+0xca4/0x14d0 [ 744.249291][T13839] ? __pfx_kernel_move_pages+0x10/0x10 [ 744.249309][T13839] ? find_held_lock+0x2b/0x80 [ 744.249323][T13839] ? __might_fault+0xc5/0x140 [ 744.249335][T13839] ? __might_fault+0xc5/0x140 [ 744.249349][T13839] __ia32_sys_move_pages+0xdd/0x1b0 [ 744.249386][T13839] __do_fast_syscall_32+0x14b/0x8c0 [ 744.249400][T13839] ? lockdep_hardirqs_on+0x7d/0x110 [ 744.249414][T13839] do_fast_syscall_32+0x32/0x70 [ 744.249428][T13839] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 744.249442][T13839] RIP: 0023:0xf73eefbc [ 744.249451][T13839] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 744.249461][T13839] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 744.249471][T13839] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000000020a0 [ 744.249477][T13839] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 744.249483][T13839] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 744.249490][T13839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 744.249495][T13839] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 744.249509][T13839] [ 744.249513][T13839] Mem-Info: [ 744.249517][T13839] active_anon:1527 inactive_anon:4090 isolated_anon:0 [ 744.249517][T13839] active_file:5669 inactive_file:10549 isolated_file:0 [ 744.249517][T13839] unevictable:3072 dirty:301 writeback:0 [ 744.249517][T13839] slab_reclaimable:6576 slab_unreclaimable:61145 [ 744.249517][T13839] mapped:26852 shmem:6647 pagetables:1089 [ 744.249517][T13839] sec_pagetables:346 bounce:0 [ 744.249517][T13839] kernel_misc_reclaimable:0 [ 744.249517][T13839] free:35491 free_pcp:0 free_cma:0 [ 744.249541][T13839] Node 0 active_anon:20kB inactive_anon:40kB active_file:8kB inactive_file:116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7136kB pagetables:1040kB sec_pagetables:1132kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 744.249566][T13839] Node 1 active_anon:6088kB inactive_anon:16320kB active_file:22668kB inactive_file:42080kB unevictable:12288kB isolated(anon):0kB isolated(file):0kB mapped:107380kB dirty:1200kB writeback:0kB shmem:26588kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6540kB pagetables:3316kB sec_pagetables:252kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 744.249591][T13839] Node 0 DMA free:2812kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 744.249618][T13839] lowmem_reserve[]: 0 256 256 256 256 [ 744.249636][T13839] Node 0 DMA32 free:29100kB boost:25968kB min:37512kB low:40396kB high:43280kB reserved_highatomic:0kB free_highatomic:0kB active_anon:16kB inactive_anon:40kB active_file:8kB inactive_file:116kB unevictable:0kB writepending:4kB zspages:1712kB present:1032196kB managed:262372kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 744.249663][T13839] lowmem_reserve[]: 0 0 0 0 0 [ 744.249709][T13839] Node 1 DMA32 free:110052kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:2048kB free_highatomic:760kB active_anon:6088kB inactive_anon:16320kB active_file:22668kB inactive_file:42080kB unevictable:12288kB writepending:1200kB zspages:3636kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 744.249738][T13839] lowmem_reserve[]: 0 0 0 0 0 [ 744.249754][T13839] Node 0 DMA: 125*4kB (UE) 17*8kB (UE) 16*16kB (UE) 20*32kB (UE) 14*64kB (UE) 1*128kB (E) 1*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2812kB [ 744.273158][T13839] Node 0 DMA32: 529*4kB (UME) 157*8kB (UME) 88*16kB (UM) 203*32kB (UME) 63*64kB (UME) 30*128kB (UME) 15*256kB (UM) 8*512kB (UM) 0*1024kB 1*2048kB (M) 0*4096kB = 29132kB [ 744.273231][T13839] Node 1 DMA32: 1134*4kB (UMEH) 1826*8kB (UMEH) 952*16kB (UMEH) 296*32kB (UMEH) 74*64kB (UMEH) 56*128kB (UME) 41*256kB (UME) 19*512kB (UM) 10*1024kB (M) 7*2048kB (UM) 2*4096kB (U) = 108744kB [ 744.273310][T13839] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 744.273318][T13839] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 744.273325][T13839] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 744.273332][T13839] Node 1 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 744.273339][T13839] 24015 total pagecache pages [ 744.273343][T13839] 1481 pages in swap cache [ 744.273346][T13839] Free swap = 102428kB [ 744.273350][T13839] Total swap = 124996kB [ 744.273353][T13839] 524155 pages RAM [ 744.273376][T13839] 0 pages HighMem/MovableOnly [ 744.273380][T13839] 217670 pages reserved [ 744.273383][T13839] 0 pages cma reserved [ 744.590243][T11385] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 744.742342][T11385] usb 8-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 744.753218][T11385] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 744.753244][T11385] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.766774][T11385] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 744.766887][T11385] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81 [ 744.766926][T11385] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1 [ 744.767527][T11385] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 744.767559][T11385] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 744.787407][T11385] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 744.788091][T11385] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 744.788125][T11385] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 744.797835][T11385] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 745.151369][T13871] 9pnet_virtio: no channels available for device syz [ 745.526433][T13866] bridge0: port 1(netdevsim0) entered blocking state [ 745.527370][T13866] bridge0: port 1(netdevsim0) entered disabled state [ 745.534924][T13866] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 745.620930][T13866] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 745.627497][T13866] bridge0: port 1(netdevsim0) entered blocking state [ 745.627586][T13866] bridge0: port 1(netdevsim0) entered forwarding state [ 746.813063][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.409928][T11385] usb 8-1: USB disconnect, device number 14 [ 747.412896][T11385] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 747.416964][T11385] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 747.417223][T11385] keyspan 8-1:1.0: device disconnected [ 749.449116][T13914] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 749.558102][T13917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1763'. [ 749.560008][T13914] md: could not open device unknown-block(1,1). [ 749.560058][T13914] md: error, md_import_device() returned -16 [ 749.926293][T13913] socket: no more sockets [ 750.418011][T13920] rxe_eth0 speed is unknown, defaulting to 1000 [ 750.494639][T13923] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 750.729313][T13920] lo speed is unknown, defaulting to 1000 [ 751.885146][T13934] bond0: (slave gretap0): Opening slave failed [ 752.638191][T13950] rxe_eth0 speed is unknown, defaulting to 1000 [ 752.911275][T13956] service_operation: orangefs_mount -- wait timed out; aborting attempt. [ 752.911291][T13956] orangefs_mount: mount request failed with -110 [ 752.934480][T13955] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 753.203559][ T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 753.203597][ T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 753.203622][ T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 753.203648][ T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 753.249580][T13950] lo speed is unknown, defaulting to 1000 [ 754.177705][T13965] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 756.631781][T13983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 756.632130][T13983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.037347][T14004] netlink: 'syz.2.1780': attribute type 1 has an invalid length. [ 759.054714][T14004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 759.087832][T14004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 759.087997][T14004] bond0: (slave wireguard1): The slave device specified does not support setting the MAC address [ 759.088403][T14004] bond0: (slave wireguard1): Error -95 calling set_mac_address [ 760.252460][T14015] rxe_eth0 speed is unknown, defaulting to 1000 [ 760.736783][T14015] lo speed is unknown, defaulting to 1000 [ 761.297115][T14020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1785'. [ 762.092120][T14028] tipc: Enabled bearer , priority 10 [ 762.795213][T14039] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 762.852183][T14039] md: array md3 already initialised! [ 762.964170][T14043] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 763.020814][T14039] md: could not open device unknown-block(1,7). [ 763.020866][T14039] md: error, md_import_device() returned -16 [ 763.202960][T14039] md: md3 stopped. [ 764.652311][ T34] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 764.825159][ T34] usb 7-1: Using ep0 maxpacket: 16 [ 764.825713][ T34] usb 7-1: New USB device found: idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 764.826621][ T34] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 764.826634][ T34] usb 7-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 764.826645][ T34] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 764.826657][ T34] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 764.826669][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 764.828314][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.828325][ T34] usb 7-1: Product: syz [ 764.828332][ T34] usb 7-1: Manufacturer: syz [ 764.828339][ T34] usb 7-1: SerialNumber: syz [ 764.836093][ T34] usb 7-1: config 0 descriptor?? [ 764.860858][T14055] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 765.240283][T14049] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 765.246994][ T34] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input20 [ 765.466797][ T34] usb 7-1: USB disconnect, device number 18 [ 766.316879][T14064] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1794'. [ 766.871173][T14080] rxe_eth0 speed is unknown, defaulting to 1000 [ 767.246282][T14080] lo speed is unknown, defaulting to 1000 [ 771.283482][ T42] kauditd_printk_skb: 212 callbacks suppressed [ 771.283499][ T42] audit: type=1800 audit(1793848948.057:2038): pid=14086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1799" name="bus" dev="ramfs" ino=44755 res=0 errno=-4 [ 771.367082][T14102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1803'. [ 771.753368][T14102] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 772.307836][T14118] rxe_eth0 speed is unknown, defaulting to 1000 [ 772.424590][T14118] lo speed is unknown, defaulting to 1000 [ 772.450264][T11367] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 772.522692][T14122] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1809'. [ 772.587223][T14124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1809'. [ 772.600415][T11367] usb 7-1: Using ep0 maxpacket: 8 [ 772.600871][T11367] usb 7-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 772.601670][T11367] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 772.601683][T11367] usb 7-1: config 179 has no interface number 0 [ 772.601704][T11367] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 772.601717][T11367] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 772.601729][T11367] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 772.601741][T11367] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 772.601752][T11367] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 772.601771][T11367] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.603669][T14116] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 772.824981][T14116] trusted_key: encrypted_key: insufficient parameters specified [ 775.140298][ T42] audit: type=1326 audit(1793848951.887:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14153 comm="syz.3.1813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fbc code=0x7ffc0000 [ 775.140356][ T42] audit: type=1326 audit(1793848951.887:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14153 comm="syz.3.1813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fbc code=0x7ffc0000 [ 775.140395][ T42] audit: type=1326 audit(1793848951.897:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14153 comm="syz.3.1813" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7ff8fbc code=0x7ffc0000 [ 775.140423][ T42] audit: type=1326 audit(1793848951.897:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14153 comm="syz.3.1813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fbc code=0x7ffc0000 [ 775.140460][ T42] audit: type=1326 audit(1793848951.897:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14153 comm="syz.3.1813" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7ff8fbc code=0x7ffc0000 [ 775.140496][ T42] audit: type=1326 audit(1793848951.897:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14153 comm="syz.3.1813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fbc code=0x7ffc0000 [ 775.140530][ T42] audit: type=1326 audit(1793848951.907:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14153 comm="syz.3.1813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fbc code=0x7ffc0000 [ 775.146220][ T42] audit: type=1326 audit(1793848951.917:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14153 comm="syz.3.1813" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71e7f6b code=0x7ffc0000 [ 775.148386][ T42] audit: type=1326 audit(1793848951.917:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14153 comm="syz.3.1813" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff8fbc code=0x7ffc0000 [ 775.250820][T14155] 9pnet_virtio: no channels available for device syz [ 775.326752][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 775.326780][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 775.326986][T11385] usb 7-1: USB disconnect, device number 19 [ 775.408508][ T34] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 775.586309][ T34] usb 8-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 775.612681][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.612696][ T34] usb 8-1: Product: syz [ 775.612702][ T34] usb 8-1: Manufacturer: syz [ 775.612710][ T34] usb 8-1: SerialNumber: syz [ 775.649267][ T34] usb 8-1: USB2VGA dongle found at address 15 [ 775.665712][ T34] usb 8-1: Allocated 8 output buffers [ 776.120923][T14169] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1813'. [ 776.390886][ T42] kauditd_printk_skb: 50 callbacks suppressed [ 776.390905][ T42] audit: type=1326 audit(1793848953.157:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14153 comm="syz.3.1813" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7ff8fbc code=0x7ffc0000 [ 776.391485][ T42] audit: type=1326 audit(1793848953.167:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14153 comm="syz.3.1813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fbc code=0x7ffc0000 [ 776.394673][ T42] audit: type=1326 audit(1793848953.167:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14153 comm="syz.3.1813" exe="/syz-executor" sig=0 arch=40000003 syscall=396 compat=1 ip=0xf7ff8fbc code=0x7ffc0000 [ 776.395176][ T42] audit: type=1326 audit(1793848953.167:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14153 comm="syz.3.1813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fbc code=0x7ffc0000 [ 776.395721][ T42] audit: type=1326 audit(1793848953.167:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14153 comm="syz.3.1813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fbc code=0x7ffc0000 [ 776.399596][ T42] audit: type=1326 audit(1793848953.167:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14153 comm="syz.3.1813" exe="/syz-executor" sig=0 arch=40000003 syscall=397 compat=1 ip=0xf7ff8fbc code=0x7ffc0000 [ 776.408990][ T42] audit: type=1326 audit(1793848953.177:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14153 comm="syz.3.1813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fbc code=0x7ffc0000 [ 776.409847][ T42] audit: type=1326 audit(1793848953.177:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14153 comm="syz.3.1813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fbc code=0x7ffc0000 [ 776.423004][ T42] audit: type=1326 audit(1793848953.197:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14153 comm="syz.3.1813" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff8fbc code=0x7ffc0000 [ 776.423035][ T42] audit: type=1326 audit(1793848953.197:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14153 comm="syz.3.1813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fbc code=0x7ffc0000 [ 777.210062][ T34] usb 8-1: Failed to early initialize device [ 777.224158][ T34] usb 8-1: USB disconnect, device number 15 [ 779.188412][T14194] hd3ss3220 0-0004: supply vdd5 not found, using dummy regulator [ 779.331518][T14194] hd3ss3220 0-0004: supply vcc33 not found, using dummy regulator [ 779.366860][T14199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1822'. [ 779.456392][T14194] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x04 [ 779.958800][T14207] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 780.052597][T14207] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 780.052635][T14207] overlayfs: failed to look up (tracing) for ino (-66) [ 781.611477][T14222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1828'. [ 781.803320][T14223] ubi0: attaching mtd0 [ 781.806002][T14223] ubi0: scanning is finished [ 781.806030][T14223] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 781.954797][T14227] rxe_eth0 speed is unknown, defaulting to 1000 [ 782.035144][T14223] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 782.395558][T14227] lo speed is unknown, defaulting to 1000 [ 783.718909][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 783.718929][ T42] audit: type=1800 audit(1793848960.487:2140): pid=14219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1826" name="bus" dev="ramfs" ino=41719 res=0 errno=-4 [ 786.683267][T14261] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 786.821428][T14261] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 786.821541][T14261] pci 0000:00:01.0: BAR 2 [mem 0xfeaf6000-0xfeaf6fff] [ 786.821714][T14261] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 786.824709][T14261] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 786.968257][T14261] pci 0000:00:01.0: Adding to iommu group 1 [ 787.011821][T14265] bond0: (slave gretap0): Opening slave failed [ 787.017248][T14261] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 787.017262][T14261] pci 0000:00:01.0: vgaarb: bridge control possible [ 787.017269][T14261] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 787.068352][T14261] pci 0000:00:05.0: [1af4:1009] type 00 class 0x000200 conventional PCI endpoint [ 787.171301][T14261] pci 0000:00:05.0: BAR 0 [io 0xc0c0-0xc0df] [ 787.171363][T14261] pci 0000:00:05.0: BAR 1 [mem 0xfeaf8000-0xfeaf8fff] [ 787.171540][T14261] pci 0000:00:05.0: BAR 4 [mem 0xfe204000-0xfe207fff 64bit pref] [ 787.302733][T14261] pci 0000:00:05.0: Adding to iommu group 5 [ 787.385790][T14261] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 787.412332][T14261] pci 0000:00:05.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned [ 787.425084][T14261] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 787.426304][T14261] pci 0000:00:05.0: BAR 1 [mem 0x81001000-0x81001fff]: assigned [ 787.439610][T14261] pci 0000:00:05.0: BAR 0 [io 0x2000-0x201f]: assigned [ 787.450066][T14261] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 787.526109][T14261] [drm] Found bochs VGA, ID 0xb0c5. [ 787.526125][T14261] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 787.545854][T14261] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 787.722932][T14261] ================================================================== [ 787.722978][T14261] BUG: KASAN: slab-use-after-free in acpi_ns_ge ** replaying previous printk message ** [ 787.722978][T14261] BUG: KASAN: slab-use-after-free in acpi_ns_get_attached_object+0x148/0x1b0 [ 787.723070][T14261] Read of size 1 at addr ffff888022a0e008 by task syz.2.1835/14261 [ 787.723087][T14261] [ 787.723108][T14261] CPU: 1 UID: 0 PID: 14261 Comm: syz.2.1835 Not tainted syzkaller #0 PREEMPT(full) [ 787.723131][T14261] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 787.723152][T14261] Call Trace: [ 787.723182][T14261] [ 787.723190][T14261] dump_stack_lvl+0x100/0x190 [ 787.723219][T14261] print_report+0x13d/0x4b0 [ 787.723248][T14261] ? __virt_addr_valid+0x239/0x430 [ 787.723269][T14261] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 787.723290][T14261] kasan_report+0xdf/0x1c0 [ 787.723311][T14261] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 787.723335][T14261] acpi_ns_get_attached_object+0x148/0x1b0 [ 787.723357][T14261] acpi_ex_resolve_node_to_value+0xb7/0x9a0 [ 787.723379][T14261] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 787.723403][T14261] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 787.723427][T14261] ? acpi_ds_create_operand+0x267/0xc20 [ 787.723456][T14261] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 787.723479][T14261] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 787.723513][T14261] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 787.723532][T14261] ? __asan_memset+0x23/0x50 [ 787.723557][T14261] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 787.723577][T14261] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 787.723605][T14261] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 787.723634][T14261] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 787.723660][T14261] ? acpi_ut_trace_ptr+0x111/0x2a0 [ 787.723677][T14261] acpi_ds_exec_end_op+0xb78/0x1e60 [ 787.723705][T14261] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 787.723730][T14261] acpi_ps_parse_loop+0x5e1/0x26e0 [ 787.723758][T14261] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 787.723783][T14261] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 787.723811][T14261] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 787.723830][T14261] ? acpi_ut_create_thread_state+0x6d/0x170 [ 787.723856][T14261] acpi_ps_parse_aml+0x81e/0x1120 [ 787.723883][T14261] acpi_ps_execute_method+0x5c4/0xe90 [ 787.723903][T14261] acpi_ns_evaluate+0x640/0x1670 [ 787.723924][T14261] acpi_ut_evaluate_object+0xf7/0x610 [ 787.723946][T14261] acpi_rs_get_prt_method_data+0xa0/0x150 [ 787.723965][T14261] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 787.723985][T14261] ? acpi_ut_status_exit+0x111/0x1c0 [ 787.724003][T14261] ? acpi_rs_validate_parameters+0x104/0x210 [ 787.724025][T14261] acpi_get_irq_routing_table+0xb8/0x140 [ 787.724044][T14261] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 787.724064][T14261] ? do_raw_spin_lock+0x128/0x260 [ 787.724088][T14261] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 787.724109][T14261] ? mark_held_locks+0x40/0x70 [ 787.724128][T14261] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 787.724148][T14261] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 787.724202][T14261] ? pci_conf1_read+0x138/0x240 [ 787.724228][T14261] acpi_pci_irq_lookup+0x8e/0x6b0 [ 787.724250][T14261] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 787.724272][T14261] ? __pfx_pci_bus_read_config_word+0x10/0x10 [ 787.724291][T14261] ? __driver_probe_device+0x210/0x460 [ 787.724342][T14261] ? __device_attach_driver+0x1df/0x320 [ 787.724369][T14261] ? bus_for_each_drv+0x159/0x1e0 [ 787.724390][T14261] ? __device_attach+0x1e4/0x4c0 [ 787.724425][T14261] acpi_pci_irq_enable+0x1f5/0x6f0 [ 787.724447][T14261] ? __pfx_acpi_pci_irq_enable+0x10/0x10 [ 787.724471][T14261] ? __pfx_pci_enable_resources+0x10/0x10 [ 787.724494][T14261] ? __pfx___pci_set_power_state+0x10/0x10 [ 787.724516][T14261] pcibios_enable_device+0xb6/0xe0 [ 787.724536][T14261] do_pci_enable_device+0x21f/0x4a0 [ 787.724555][T14261] ? __pfx_do_pci_enable_device+0x10/0x10 [ 787.724573][T14261] ? pci_update_current_state+0x102/0x240 [ 787.724600][T14261] ? __pfx_pci_update_current_state+0x10/0x10 [ 787.724627][T14261] ? write_protect_page.constprop.0+0x80/0x1d10 [ 787.724646][T14261] ? __kasan_kmalloc+0xaa/0xb0 [ 787.724665][T14261] pci_enable_device_flags+0x27c/0x370 [ 787.724698][T14261] ? __pfx_virtio_pci_probe+0x10/0x10 [ 787.724718][T14261] virtio_pci_probe+0x1d5/0x410 [ 787.724737][T14261] local_pci_probe+0xdd/0x1b0 [ 787.724764][T14261] pci_call_probe+0x176/0x800 [ 787.724793][T14261] ? pci_match_device+0x147/0x7d0 [ 787.724824][T14261] ? __pfx_pci_call_probe+0x10/0x10 [ 787.724843][T14261] ? __pfx_pci_match_device+0x10/0x10 [ 787.724870][T14261] ? pci_find_host_bridge+0x3c/0x80 [ 787.724893][T14261] pci_device_probe+0x25b/0x400 [ 787.724908][T14261] ? __pfx_pci_device_probe+0x10/0x10 [ 787.724929][T14261] ? sysfs_create_link+0x68/0xc0 [ 787.724953][T14261] ? __pfx_pci_device_probe+0x10/0x10 [ 787.724971][T14261] really_probe+0x241/0xa60 [ 787.724997][T14261] __driver_probe_device+0x210/0x460 [ 787.725023][T14261] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 787.725045][T14261] driver_probe_device+0x4a/0x140 [ 787.725070][T14261] __device_attach_driver+0x1df/0x320 [ 787.725091][T14261] ? __pfx___device_attach_driver+0x10/0x10 [ 787.725115][T14261] bus_for_each_drv+0x159/0x1e0 [ 787.725136][T14261] ? __pfx_bus_for_each_drv+0x10/0x10 [ 787.725183][T14261] ? lockdep_hardirqs_on+0x7d/0x110 [ 787.725204][T14261] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 787.725227][T14261] __device_attach+0x1e4/0x4c0 [ 787.725251][T14261] ? __pfx___device_attach+0x10/0x10 [ 787.725276][T14261] ? do_raw_spin_unlock+0x145/0x1e0 [ 787.725300][T14261] device_initial_probe+0xaf/0xf0 [ 787.725325][T14261] pci_bus_add_device+0xc5/0x100 [ 787.725347][T14261] pci_bus_add_devices+0x9a/0x1f0 [ 787.725371][T14261] pci_rescan_bus+0x2a/0x40 [ 787.725396][T14261] rescan_store+0xfb/0x130 [ 787.725420][T14261] ? __pfx_rescan_store+0x10/0x10 [ 787.725437][T14261] ? sysfs_file_kobj+0xe4/0x290 [ 787.725461][T14261] ? __pfx_rescan_store+0x10/0x10 [ 787.725478][T14261] bus_attr_store+0x74/0xb0 [ 787.725497][T14261] ? __pfx_bus_attr_store+0x10/0x10 [ 787.725517][T14261] sysfs_kf_write+0xf2/0x150 [ 787.725540][T14261] kernfs_fop_write_iter+0x3e0/0x5f0 [ 787.725558][T14261] ? __pfx_sysfs_kf_write+0x10/0x10 [ 787.725581][T14261] vfs_write+0x6af/0x1050 [ 787.725599][T14261] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 787.725619][T14261] ? __pfx_vfs_write+0x10/0x10 [ 787.725636][T14261] ? find_held_lock+0x2b/0x80 [ 787.725667][T14261] ksys_write+0x12a/0x250 [ 787.725685][T14261] ? __pfx_ksys_write+0x10/0x10 [ 787.725705][T14261] __do_fast_syscall_32+0x14b/0x8c0 [ 787.725732][T14261] do_fast_syscall_32+0x32/0x70 [ 787.725754][T14261] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 787.725777][T14261] RIP: 0023:0xf73eefbc [ 787.725791][T14261] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 787.725808][T14261] RSP: 002b:00000000f53c450c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 787.725826][T14261] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000300 [ 787.725837][T14261] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 787.725848][T14261] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 787.725858][T14261] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 787.725869][T14261] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 787.725886][T14261] [ 787.725893][T14261] [ 787.725896][T14261] Allocated by task 1: [ 787.725905][T14261] kasan_save_stack+0x30/0x50 [ 787.725923][T14261] kasan_save_track+0x14/0x30 [ 787.725939][T14261] __kasan_slab_alloc+0x89/0x90 [ 787.725956][T14261] kmem_cache_alloc_noprof+0x269/0x6a0 [ 787.725979][T14261] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 787.726001][T14261] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 787.726024][T14261] acpi_ds_build_internal_object+0x173/0x790 [ 787.726047][T14261] acpi_ds_create_node+0xe3/0x280 [ 787.726067][T14261] acpi_ds_exec_end_op+0x10cf/0x1e60 [ 787.726089][T14261] acpi_ps_parse_loop+0x5e1/0x26e0 [ 787.726113][T14261] acpi_ps_parse_aml+0x81e/0x1120 [ 787.726136][T14261] acpi_ps_execute_table+0x393/0x500 [ 787.726152][T14261] acpi_ns_execute_table+0x596/0x970 [ 787.726171][T14261] acpi_ns_parse_table+0xcb/0x160 [ 787.726191][T14261] acpi_ns_load_table+0xc9/0x490 [ 787.726207][T14261] acpi_tb_load_namespace+0x2b0/0x8f0 [ 787.726229][T14261] acpi_load_tables+0x89/0x160 [ 787.726249][T14261] acpi_init+0x146/0x840 [ 787.726264][T14261] do_one_initcall+0x11c/0x6f0 [ 787.726281][T14261] kernel_init_freeable+0x6ea/0x7b0 [ 787.726301][T14261] kernel_init+0x21/0x1e0 [ 787.726324][T14261] ret_from_fork+0x730/0xd60 [ 787.726340][T14261] ret_from_fork_asm+0x1a/0x30 [ 787.726357][T14261] [ 787.726361][T14261] Freed by task 7486: [ 787.726370][T14261] kasan_save_stack+0x30/0x50 [ 787.726387][T14261] kasan_save_track+0x14/0x30 [ 787.726410][T14261] kasan_save_free_info+0x3b/0x70 [ 787.726432][T14261] __kasan_slab_free+0x5f/0x80 [ 787.726448][T14261] kmem_cache_free+0x127/0x6c0 [ 787.726470][T14261] acpi_os_release_object+0x1c/0x30 [ 787.726487][T14261] acpi_ut_delete_object_desc+0xea/0x130 [ 787.726510][T14261] acpi_ut_update_ref_count.part.0+0x510/0x2250 [ 787.726528][T14261] acpi_ut_update_object_reference+0x5f9/0x800 [ 787.726546][T14261] acpi_ut_remove_reference+0x192/0x1d0 [ 787.726564][T14261] acpi_rs_get_prt_method_data+0xcd/0x150 [ 787.726584][T14261] acpi_get_irq_routing_table+0xb8/0x140 [ 787.726603][T14261] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 787.726622][T14261] acpi_pci_irq_lookup+0x8e/0x6b0 [ 787.726639][T14261] acpi_pci_irq_disable+0x1a8/0x360 [ 787.726658][T14261] pcibios_disable_device+0x89/0xb0 [ 787.726677][T14261] do_pci_disable_device+0x9f/0x100 [ 787.726695][T14261] pci_disable_device+0x130/0x270 [ 787.726710][T14261] virtio_pci_remove+0xcf/0x110 [ 787.726727][T14261] pci_device_remove+0xb2/0x1d0 [ 787.726750][T14261] device_remove+0xcb/0x180 [ 787.726772][T14261] device_release_driver_internal+0x441/0x610 [ 787.726799][T14261] pci_stop_bus_device+0x120/0x160 [ 787.726814][T14261] pci_stop_and_remove_bus_device+0x58/0xa0 [ 787.726830][T14261] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 787.726847][T14261] remove_store+0x123/0x140 [ 787.726866][T14261] dev_attr_store+0x58/0x80 [ 787.726881][T14261] sysfs_kf_write+0xf2/0x150 [ 787.726899][T14261] kernfs_fop_write_iter+0x3e0/0x5f0 [ 787.726915][T14261] vfs_write+0x6af/0x1050 [ 787.726931][T14261] ksys_write+0x12a/0x250 [ 787.726945][T14261] __do_fast_syscall_32+0x14b/0x8c0 [ 787.726966][T14261] do_fast_syscall_32+0x32/0x70 [ 787.726987][T14261] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 787.727008][T14261] [ 787.727011][T14261] The buggy address belongs to the object at ffff888022a0e000 [ 787.727011][T14261] which belongs to the cache Acpi-Operand of size 72 [ 787.727025][T14261] The buggy address is located 8 bytes inside of [ 787.727025][T14261] freed 72-byte region [ffff888022a0e000, ffff888022a0e048) [ 787.727042][T14261] [ 787.727047][T14261] The buggy address belongs to the physical page: [ 787.727055][T14261] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888022a0e0d0 pfn:0x22a0e [ 787.727072][T14261] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 787.727087][T14261] page_type: f5(slab) [ 787.727102][T14261] raw: 00fff00000000200 ffff88801d44da40 ffffea00008a8910 ffffea00008a8b50 [ 787.727118][T14261] raw: ffff888022a0e0d0 0000000200270015 00000000f5000000 0000000000000000 [ 787.727127][T14261] page dumped because: kasan: bad access detected [ 787.727164][T14261] page_owner tracks the page as allocated [ 787.727172][T14261] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2842355547 [ 787.727198][T14261] post_alloc_hook+0xfd/0x120 [ 787.727219][T14261] get_page_from_freelist+0x1113/0x35e0 [ 787.727243][T14261] __alloc_frozen_pages_noprof+0x2bd/0x3280 [ 787.727266][T14261] new_slab+0xb1/0x6d0 [ 787.727287][T14261] refill_objects+0xe3/0x410 [ 787.727309][T14261] __pcs_replace_empty_main+0x35e/0x650 [ 787.727329][T14261] kmem_cache_alloc_noprof+0x4bf/0x6a0 [ 787.727354][T14261] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 787.727376][T14261] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 787.727403][T14261] acpi_ds_build_internal_object+0x173/0x790 [ 787.727424][T14261] acpi_ds_build_internal_package_obj+0x481/0xe60 [ 787.727447][T14261] acpi_ds_eval_data_object_operands+0x2fd/0x640 [ 787.727468][T14261] acpi_ds_exec_end_op+0xe41/0x1e60 [ 787.727491][T14261] acpi_ps_parse_loop+0x5e1/0x26e0 [ 787.727513][T14261] acpi_ps_parse_aml+0x81e/0x1120 [ 787.727537][T14261] acpi_ps_execute_table+0x393/0x500 [ 787.727553][T14261] page_owner free stack trace missing [ 787.727559][T14261] [ 787.727563][T14261] Memory state around the buggy address: [ 787.727570][T14261] ffff888022a0df00: fc fa fb fb fb fb fb fb fb fb fc fc fc fc fa fb [ 787.727582][T14261] ffff888022a0df80: fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc [ 787.727593][T14261] >ffff888022a0e000: fa fb fb fb fb fb fb fb fb fc fc fc fc fa fb fb [ 787.727602][T14261] ^ [ 787.727611][T14261] ffff888022a0e080: fb fb fb fb fb fb fc fc fc fc fa fb fb fb fb fb [ 787.727622][T14261] ffff888022a0e100: fb fb fb fc fc fc fc fa fb fb fb fb fb fb fb fb [ 787.727630][T14261] ================================================================== [ 787.735091][T14261] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 788.264979][T14261] CPU: 1 UID: 0 PID: 14261 Comm: syz.2.1835 Not tainted syzkaller #0 PREEMPT(full) [ 788.268857][T14261] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 788.273020][T14261] Call Trace: [ 788.274441][T14261] [ 788.275703][T14261] dump_stack_lvl+0x100/0x190 [ 788.277720][T14261] vpanic+0x2dc/0x6f8 [ 788.279406][T14261] panic+0xd1/0xe0 [ 788.280995][T14261] ? __pfx_panic+0x10/0x10 [ 788.282474][T14261] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 788.284340][T14261] ? preempt_schedule+0x57/0xd0 [ 788.285883][T14261] check_panic_on_warn.cold+0x19/0x34 [ 788.287553][T14261] end_report.part.0+0x3a/0x90 [ 788.289065][T14261] kasan_report.cold+0xe/0x18 [ 788.290548][T14261] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 788.292409][T14261] acpi_ns_get_attached_object+0x148/0x1b0 [ 788.294222][T14261] acpi_ex_resolve_node_to_value+0xb7/0x9a0 [ 788.296061][T14261] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 788.297668][T14261] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 788.299698][T14261] ? acpi_ds_create_operand+0x267/0xc20 [ 788.301428][T14261] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 788.303146][T14261] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 788.305036][T14261] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 788.306671][T14261] ? __asan_memset+0x23/0x50 [ 788.308139][T14261] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 788.310019][T14261] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 788.311793][T14261] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 788.313746][T14261] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 788.315557][T14261] ? acpi_ut_trace_ptr+0x111/0x2a0 [ 788.317143][T14261] acpi_ds_exec_end_op+0xb78/0x1e60 [ 788.318781][T14261] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 788.320529][T14261] acpi_ps_parse_loop+0x5e1/0x26e0 [ 788.322133][T14261] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 788.323859][T14261] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 788.325611][T14261] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 788.327471][T14261] ? acpi_ut_create_thread_state+0x6d/0x170 [ 788.329334][T14261] acpi_ps_parse_aml+0x81e/0x1120 [ 788.330917][T14261] acpi_ps_execute_method+0x5c4/0xe90 [ 788.332611][T14261] acpi_ns_evaluate+0x640/0x1670 [ 788.334211][T14261] acpi_ut_evaluate_object+0xf7/0x610 [ 788.335883][T14261] acpi_rs_get_prt_method_data+0xa0/0x150 [ 788.337665][T14261] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 788.339625][T14261] ? acpi_ut_status_exit+0x111/0x1c0 [ 788.341275][T14261] ? acpi_rs_validate_parameters+0x104/0x210 [ 788.343146][T14261] acpi_get_irq_routing_table+0xb8/0x140 [ 788.344866][T14261] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 788.346812][T14261] ? do_raw_spin_lock+0x128/0x260 [ 788.348364][T14261] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 788.350186][T14261] ? mark_held_locks+0x40/0x70 [ 788.351686][T14261] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 788.353656][T14261] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 788.355474][T14261] ? pci_conf1_read+0x138/0x240 [ 788.357000][T14261] acpi_pci_irq_lookup+0x8e/0x6b0 [ 788.358605][T14261] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 788.360349][T14261] ? __pfx_pci_bus_read_config_word+0x10/0x10 [ 788.362249][T14261] ? __driver_probe_device+0x210/0x460 [ 788.363947][T14261] ? __device_attach_driver+0x1df/0x320 [ 788.365690][T14261] ? bus_for_each_drv+0x159/0x1e0 [ 788.367260][T14261] ? __device_attach+0x1e4/0x4c0 [ 788.368809][T14261] acpi_pci_irq_enable+0x1f5/0x6f0 [ 788.370418][T14261] ? __pfx_acpi_pci_irq_enable+0x10/0x10 [ 788.372159][T14261] ? __pfx_pci_enable_resources+0x10/0x10 [ 788.373932][T14261] ? __pfx___pci_set_power_state+0x10/0x10 [ 788.375740][T14261] pcibios_enable_device+0xb6/0xe0 [ 788.377335][T14261] do_pci_enable_device+0x21f/0x4a0 [ 788.378966][T14261] ? __pfx_do_pci_enable_device+0x10/0x10 [ 788.380730][T14261] ? pci_update_current_state+0x102/0x240 [ 788.382503][T14261] ? __pfx_pci_update_current_state+0x10/0x10 [ 788.384384][T14261] ? write_protect_page.constprop.0+0x80/0x1d10 [ 788.386323][T14261] ? __kasan_kmalloc+0xaa/0xb0 [ 788.387824][T14261] pci_enable_device_flags+0x27c/0x370 [ 788.389558][T14261] ? __pfx_virtio_pci_probe+0x10/0x10 [ 788.391224][T14261] virtio_pci_probe+0x1d5/0x410 [ 788.392751][T14261] local_pci_probe+0xdd/0x1b0 [ 788.394230][T14261] pci_call_probe+0x176/0x800 [ 788.395707][T14261] ? pci_match_device+0x147/0x7d0 [ 788.397289][T14261] ? __pfx_pci_call_probe+0x10/0x10 [ 788.398917][T14261] ? __pfx_pci_match_device+0x10/0x10 [ 788.400595][T14261] ? pci_find_host_bridge+0x3c/0x80 [ 788.402223][T14261] pci_device_probe+0x25b/0x400 [ 788.403751][T14261] ? __pfx_pci_device_probe+0x10/0x10 [ 788.405450][T14261] ? sysfs_create_link+0x68/0xc0 [ 788.407013][T14261] ? __pfx_pci_device_probe+0x10/0x10 [ 788.408704][T14261] really_probe+0x241/0xa60 [ 788.410146][T14261] __driver_probe_device+0x210/0x460 [ 788.411797][T14261] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 788.413624][T14261] driver_probe_device+0x4a/0x140 [ 788.415205][T14261] __device_attach_driver+0x1df/0x320 [ 788.416904][T14261] ? __pfx___device_attach_driver+0x10/0x10 [ 788.418752][T14261] bus_for_each_drv+0x159/0x1e0 [ 788.420276][T14261] ? __pfx_bus_for_each_drv+0x10/0x10 [ 788.421956][T14261] ? lockdep_hardirqs_on+0x7d/0x110 [ 788.423574][T14261] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 788.425389][T14261] __device_attach+0x1e4/0x4c0 [ 788.426897][T14261] ? __pfx___device_attach+0x10/0x10 [ 788.428558][T14261] ? do_raw_spin_unlock+0x145/0x1e0 [ 788.430179][T14261] device_initial_probe+0xaf/0xf0 [ 788.431751][T14261] pci_bus_add_device+0xc5/0x100 [ 788.433304][T14261] pci_bus_add_devices+0x9a/0x1f0 [ 788.434881][T14261] pci_rescan_bus+0x2a/0x40 [ 788.436302][T14261] rescan_store+0xfb/0x130 [ 788.437719][T14261] ? __pfx_rescan_store+0x10/0x10 [ 788.439298][T14261] ? sysfs_file_kobj+0xe4/0x290 [ 788.440818][T14261] ? __pfx_rescan_store+0x10/0x10 [ 788.442390][T14261] bus_attr_store+0x74/0xb0 [ 788.443813][T14261] ? __pfx_bus_attr_store+0x10/0x10 [ 788.445446][T14261] sysfs_kf_write+0xf2/0x150 [ 788.446903][T14261] kernfs_fop_write_iter+0x3e0/0x5f0 [ 788.448552][T14261] ? __pfx_sysfs_kf_write+0x10/0x10 [ 788.450183][T14261] vfs_write+0x6af/0x1050 [ 788.451651][T14261] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 788.453498][T14261] ? __pfx_vfs_write+0x10/0x10 [ 788.455015][T14261] ? find_held_lock+0x2b/0x80 [ 788.456510][T14261] ksys_write+0x12a/0x250 [ 788.457920][T14261] ? __pfx_ksys_write+0x10/0x10 [ 788.459462][T14261] __do_fast_syscall_32+0x14b/0x8c0 [ 788.461100][T14261] do_fast_syscall_32+0x32/0x70 [ 788.462638][T14261] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 788.464599][T14261] RIP: 0023:0xf73eefbc [ 788.465911][T14261] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 788.471854][T14261] RSP: 002b:00000000f53c450c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 788.474427][T14261] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000300 [ 788.476885][T14261] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 788.479328][T14261] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 788.481789][T14261] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 788.484071][T14261] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 788.486378][T14261] [ 788.488085][T14261] Kernel Offset: disabled [ 788.489440][T14261] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:22:43 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000200 RDX=0000000000000102 RSI=ffffffff8e5fe1f5 RDI=ffffffff8c835a80 RBP=ffffffff9cc7e588 RSP=ffffc9000041fa18 R8 =0000000000061982 R9 =0000000000000059 R10=0000000000000001 R11=0000000000000001 R12=0000000000000002 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8bef98e0 RFL=00000096 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809527e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f047d7f3e9c CR3=000000000fd96000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020000002 Opmask01=0000000000000001 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e9f52cb3e79be6e f2b7552c0542820f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 342468bf6969b4d5 f3bfc4dd042a2163 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 84d81925705f0475 34125687d2b61901 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9bb2fbc42c08c642 bbbef5e9cfb2f977 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002880 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 003b7915040d051a 000001de00000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fe43c4880112386a 0997359a00f80a5b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 015e84e2000001de 000001dd00000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001de00000000 0531748c000001dd ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 691ae7c9586b63ff 9e2a6e8751dd4d3e ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e46ae0b6d1fac546 cda1c15af376066d ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e75006465696669 63657073206e6f69 74706f20676e6f6c 207974706d65000a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 636572696420746f 6f722065676e6168 632074276e616300 7269646863660027 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4640574c4105514a 4a570540424b444d 460551024b444600 574c414d46430002 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000003a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85c112f5 RDI=ffffffff9cf3d5a0 RBP=ffffffff9cf3d560 RSP=ffffc900030be520 R8 =000000000000001f R9 =0000000000000000 R10=0000000000000003 R11=203a4e415341205b R12=0000000000000000 R13=000000000000003a R14=0000000000000003 R15=ffffc900030be838 RIP=ffffffff85c1131f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809537e000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3be618 CR3=0000000077f49000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000014000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000001 RDX=ffff88801eff8000 RSI=ffffffff81ebdcf7 RDI=0000000000000001 RBP=ffffc900006bfda8 RSP=ffffc900006bfa40 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000003 R11=53414b203a475542 R12=0000000000000000 R13=1ffff920000d7f52 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81ebdcf9 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809547e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000800bd01c CR3=0000000073346000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000014000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000007 RBX=ffff8880229afd00 RCX=0000000001000000 RDX=0000000000000000 RSI=ffffffff81ecba88 RDI=ffff8880229afd3c RBP=0000000000200080 RSP=ffffc900005e8ed8 R8 =0000000000000000 R9 =0000000000000000 R10=ffff88802a5548ab R11=0000000000000000 R12=ffffed10054aa90f R13=dffffc0000000000 R14=ffff88802a554800 R15=0000000000000000 RIP=ffffffff81ecbab0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f066478e300 ffffffff 00c00000 GS =0000 ffff88809557e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000564c4bfb3f40 CR3=000000004ca23000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=19265144c36ea9df 94e1b08e30e74220 19265144c36ea9df 94e1b08e30e74220 19265144c36ea9df 94e1b08e30e74220 19265144c36ea9df 94e1b08e30e74220 ZMM18=ed3f08d8b1296612 661bdb58e9b3486f ed3f08d8b1296612 661bdb58e9b3486f ed3f08d8b1296612 661bdb58e9b3486f ed3f08d8b1296612 661bdb58e9b3486f ZMM19=a516000000000000 0000000000000004 a516000000000000 0000000000000003 a516000000000000 0000000000000002 a516000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 757165732f766564 2f01ffffffffffff ffffdf0802800300 04000008000e8002 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010800080147f400 73636f72702e7075 6f7267632f757063 2e70756f7267632f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e01ffffffffffff ffffcb080e800300 040040908008000f ffffffff0201c708 ZMM24=e9b3486fe9b3486f e9b3486fe9b3486f e9b3486fe9b3486f e9b3486fe9b3486f e9b3486fe9b3486f e9b3486fe9b3486f e9b3486fe9b3486f e9b3486fe9b3486f ZMM25=661bdb58661bdb58 661bdb58661bdb58 661bdb58661bdb58 661bdb58661bdb58 661bdb58661bdb58 661bdb58661bdb58 661bdb58661bdb58 661bdb58661bdb58 ZMM26=b1296612b1296612 b1296612b1296612 b1296612b1296612 b1296612b1296612 b1296612b1296612 b1296612b1296612 b1296612b1296612 b1296612b1296612 ZMM27=ed3f08d8ed3f08d8 ed3f08d8ed3f08d8 ed3f08d8ed3f08d8 ed3f08d8ed3f08d8 ed3f08d8ed3f08d8 ed3f08d8ed3f08d8 ed3f08d8ed3f08d8 ed3f08d8ed3f08d8 ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=a3160000a3160000 a3160000a3160000 a3160000a3160000 a3160000a3160000 a3160000a3160000 a3160000a3160000 a3160000a3160000 a3160000a3160000