last executing test programs: 5.877122985s ago: executing program 0 (id=1164): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001800d0001007564703a73797a30000000002c0004001400010002004e0f7f00000100000000000000001400020002"], 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x58, &(0x7f0000000280)={&(0x7f0000000a80)={0x78, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, '1234567890123456'}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "00172233f60ad0b992422bc1ccddeeff13596dbe548e3414b3da8002d1d36b2c9fcfea65"}}]}]}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x68}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4090}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000080), 0x12) connect$x25(r4, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/events/kmem/kmalloc/filter\x00', 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000010e1feff28bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="30050400b5a105001800128008000100736974000c00028008000100", @ANYRES32=r7, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x24004804}, 0x44000) write(r5, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r9 = socket$inet(0x2, 0x3, 0x1b) getsockopt$MRT(r9, 0x0, 0xd0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x845c5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sync_file_range(r8, 0xc, 0x2000000006, 0x6) write$vhost_msg_v2(r5, 0x0, 0x0) 5.101494985s ago: executing program 0 (id=1168): r0 = openat$autofs(0xffffff9c, &(0x7f0000001a00), 0x210000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001a40), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000001a80)='./file0\x00', &(0x7f0000001ac0), 0x404, &(0x7f0000001b00)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000001b80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000003bc0)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000003c40)="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", 0x2000, &(0x7f0000005c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005cc0)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x4000, 0x4, r3, r4, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000005d80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r4}}, './sys/bus/platform\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform\x00', 0x0, 0x0) r6 = syz_io_uring_setup(0x3383, &(0x7f00000001c0)={0x0, 0xd3f7, 0x2, 0x4, 0x223}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r6, 0x12, 0x0, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000380)={0x1e0, 0x50, 0x300, 0x40, 0xa, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x1, 0x1, 0x4, 0x4, 0x3, 0x1ff, 0x803d, 0x1, 0x9, 0x5f, 0x202, 0x1, 0x3}) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_read_local_version={{0x63}, {0x6, 0xf7, 0x8, 0x9, 0x10, 0x8000}}}}, 0xf) r8 = openat$vicodec0(0xffffff9c, &(0x7f0000005dc0), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r8, 0xc0185647, &(0x7f0000005e00)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000005e40)={0x98f90b, 0x8000000, '\x00', @string=&(0x7f0000005e80)=0xfe}}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r9 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r9, &(0x7f0000001840)={&(0x7f0000000440)=@l2tp6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x7, 0x2}, 0x80, &(0x7f0000000680)=[{&(0x7f00000004c0)="1a028e195b26e9e7749bc939005b1bc31445786b04115e65c91d0e0bacd61bcb873b661ebdbfde6e36783add38e919d25902994208eac881b2086af37c72367db35b50541f699e374126971b0758343196b0d4531cbc02d2a33484244000ee7446466d14cb83ddcb922c95ce3ad6be88cd4f2caea82276483a554c34cafafc7fdbf329d0928dc09c19a190e2431953c46cee285cd5c663b0db7b099738afc1d8dd7b51fe53979987e45e252be69f17e923c31c1eff4b72429332b2e58621273b4ca17a12865a55ff036d36ef936a22a8a15f741baa7a8e91e0f6248f8dbebe055dc62e2b0101e0c2d39c", 0xea}, {&(0x7f0000000640)="3776a3117005f9528f7ce6660769b3f5b41c9180971b336a", 0x18}], 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1164}, 0x81) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r10, &(0x7f0000005ec0)={0x0, 0x0, &(0x7f0000005f00)={&(0x7f0000005f40)={0x2c, 0x140f, 0x1, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000940) r11 = openat(r5, &(0x7f0000000100)='drivers_probe\x00', 0x1, 0x0) write(r11, &(0x7f0000000180)='PNP0103:00\n\x00', 0xb) r12 = socket$inet6_udp(0xa, 0x2, 0x0) r13 = socket(0x10, 0x3, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000001880)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001940)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r15, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x1, 0x1, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x198e, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x29, 0x4, 0x3, 0x9, 0x2e, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x20, 0x8, 0x100, 0x4632}}) 3.995958245s ago: executing program 0 (id=1175): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) init_module(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/425], 0x1b4, &(0x7f0000001040)='debugfs\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x20001, 0x9684}}, 0x20}, 0x1, 0x0, 0x0, 0x20000050}, 0x2000c006) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x0, 0x8e09, 0x0, 0x2, 0xeb}, &(0x7f0000000900)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe81, 0x2, 0x3, 0x178}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a87, 0x1, 0x10000, 0x39f}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x49eb, 0x100, 0x0, 0x25c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x903c, 0x1, 0x0, 0x2f0}}], 0x4, &(0x7f0000002840)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x3}, 0x0, 0x0, '\x00', {0x4, 0x93e, 0x0, &(0x7f0000001840)=@buf_4k="46647b94d41b689c3c5c07a10b26ce8dab070c146694f852099ce588f794ad08006a07b38db6f31a24277bce3cd9cb00b6711fc5be1806fda7517515dad0435ca7649c6e8b7d3112e1919529c01d5be27140ed8ec48faf4ceebd6d50f9185be56caf85020775674510adfe796011a5adeaeeffc206cec6795244f4337381c8bf9645ae6a83f51c8f6601fd533d0c1e80daafaaeb3499ddaa30b76c5a4be2b3e73a8380c97f1a71fce53936a09baffdd897234578bcd027b200db8ae0e39e241a631df5a307d86a77d7119c38e94f7788f4466439f0b188ab54eadca9b84fc3bfad1f3839c53cb3754e3eca6d81b862ec32048fde6a7b9481e4d543151df9601831681596b1a0682c97d891cf3dae588d2fd4123e36a02b7767c539b9c19777b3f87d949540fa52692f7237fda5de634a109cc4a694a3b0085cb3f4302f1e73e0a4141bdc7c47954940682fe7953298439c2380ffd45de220d7d7b580708914269414dddf08fa63077119e5e9e11ab7b0707c902052a0e865e5fd000d3675e74db2dfef6431ed6d43092e6595b2168e87c9b814c58f875c481ca8571791701f4a103d0282931f7ae2db3afa95c7bc0b73b33c5846ba158bb691c93be32d8473209388a59407cf643c604bc2357aeea9905a85b58da5a720bde14ce68c8db27fc1eee7c37f0dfefd624ea94b0956c03892a4b89eac207d766745b91bd09600d69a04ca8c0cf8e03d3bacc8147421dd227801f414e5ea3d6cf3e20dcbea92f3ebf967ca379dba281c4b2581ea5c392829851ad0c0652807e249645ffc07c86c173b30c77709d5079f54c992b9488e4bcc27bbaf05b073bd4656f5d163ed2eb141dfa718b7551a3dfa1e7cde79c1a63e16c02da0284474014d6ca356a1dd7d8fbbb71a77301ed746bb0c8d60cb3ce602759ebfd2a5ad7d38eb14947f444066f57335ec66269f43c1993ed9b2d21734ed52918bfdccc612436b68a0498af3ae23a17823393f60bc225a9b6390429cf4d2325d0e924aab63ce48b681547e35b743ae3fd509ef3883c23787bedfa02398ab33597199d2f719eaa82d19ba0397eb09a7721624821dc7917a5ca17b59b77f94d96ebd494349dd1f933e1636a9f71346f78696f6971bbe55b443057e45b53a0a7ce03fcb04284e43d47035012aa2acfde7d6a4520985a2db7c30872fcd7dbf2a584a3fc0a6e1856a89842a0da8d741ef63fe90d146b750dbeadd2e86a1a09b863e70b4ba56eef546b462e4b6983a581df20e3dc235683ec76a7ddfdb5447bbe0dacc53de1dc4c2884e17c08290fa5b5ae21ab2daae21f512812c7cc366d973fe3910596c65fbfd26e171168f3243a04914e6a569ddd4c1754add8185326c0d65d312f5b35a9200a4883f99649d7911dc20e53dfef77c99d01152e5e7ea304c45cb77f8e9ce7fc0df0a532f16f63294b8f64396731c661693cd8467134fcb53f77d5baf6f6b3c3252480b25dd5e863cf2b46cf763de4a18415cf389d96b24e6bcd6510c4b843dc3df139690eb0ad268b9cc6ac8024b12264ca5221a810a8163e5908c8f42fe29031843c2e9a300637e96c55c15cccd9ec2c3a6354d3e82c9b4646864f2a4b631f5bccfcceafa7134948780a63beb5711171191d9e3cf13d26381a20cdffd285e702010cfdcdbe21cb3d31b0b93cbe8f3cc61dc18a979cb1e4628829ecab88b22df3c6976fedfb0948ab4dde12811c18038f8455e508f50d981b7094286cead51d50ee2ee342362affbc91dee8a25d232d8bbb116a064a1847c877bdfb7e2ab75b485e5a6d129275026c07bb7dd1f8912415a1de405022d2b1fe649824062392ea982fb6dcdf207fdeef56fa095eecf285f8deeac9b687953596e50c3ff420e421961f8dd48070e236794fcab5bfb840700fa66d175310fa37e9b133d049bfa64fcce79bedd1d19f68b0a58a6b01160c5bb7d74e53e435b80f7570582a65815aabe5501bd6bf6369510abeafe5b89c07586aa00d44a30b0ab3e1067c0724013a654eb82c7db0e72c0cf4a58465fe883ca3aed5098fea959a1460c1e5bcb39ac6e5e55e5072551500c0ea926136f1070dbfdc91998fd9f804c1ac924928b7fffb7c6ed5a2915e8caa8f674c64705bc37eb193f8bc2c9886a1e90d69571cda7e994ba26d27198305ffddf5fa12eba6604a18735b1626938029b4e60d0d424421a863823cb33733845ce7534ccefeb1d37fba4f45f7df2005e1563c2086454ef80d0cde7cd871139e28a3079538dc1f7bea8132ab4ddc532385b68330bf495297b44e70b4e96e76c63a35b75deaab0200110f7ca52e1d22de96ded086607161c4e931803899ac29cc99772acc4fce685a32eeb1a488a96d71a1c51e6fdf649dfc78354994090bf550318650a7b2fc2bd523af2f90d9c49e590d5a55fd6e7895e1287e27daf393cfe0dd7370b69332798d76e31048a3246a71b0470760d19b826416597cc9604926ed314d39b6f607df39116c958c73df928bb2d2a9981a5452d1ba70b290e689daca41ef2ace1293cb69bb6f5963f7ceb634fa52561fd6be74588e3ddf1acaf411acc8d4f2c41f9e5e6c2537e7d811bc3c311c7867e7653bd996f0c0986e393a055af5ade80b0928a2621588c7ffd6decb2be5f11ac580b6f6d6c722df8d08507ed825f1ce4eae8141e3cbc9f05ef539815988389a5f81f0dea4eaa93f33720d3da2ad7625ca8fbf6e545ad2007b024023bf02305c370c33ef4c7bc8fe3f89192a5fa82b04e9258f2cde7c77ebb6bb6c1cff882b379477fcabd224f086bb8ebba62dc1ce0fd0687f9e924ce055663ee7c987e042f3c8e108c3d4395c332c1f6297c3d2baf5b7468a3789bc810cfa1e035431a12253b5be2a09199e5024c20a24c6be88a7882e0e08dc8f755955cc20d12f74deb2a1007ad62e824f90bdb9e65cd3b705d4f4c756c7c572186adf789a94fc267e75774bedd79e59e8940d8a797048d6c083b4cc67b10f584884b9548ad1c0a74403174f17e3a74badb7f5ef1969e4caf9dbeb3da1371730ef4a8de5a3abd0a88d1bfecb80f2b2ea475df6a39638bdee40db75694e43d44e5f29ff3702a2031ef8e996ac1fceb77b61295ed8fc15ee5c6219c595032bafd9ddae643c1bdc3ca0063b5bb4327826d12ced2cc515323257254f89223f8a0ccce1a195b4c8b18a3cfc92446051da4477c3dd18ef1258b462ff1b1f33974952f6b2eb00cbc57ce44998f12ad51be486afcf06250286036385c801da06a1d9ff2cb8bdf0fe86988dd418eea4f696a3ea04fdad34595ff0c1fcf85f794442f463a5756fe960ee40de940e0d45c652d92bdbdb95243fb1c1722d73a82c7d43cd00afc67e10816a1bfbfbb96a1bdf10ba82c9c90b25afee659c12867ec129e2d34d52aaf72bfdbdcf9edf2d5ffbb1ec159fa57ece5548e9c558a97d7fd01e69ef5ed8223f36185fd269da56a8c2daa527dac50ef7982861180d08cce0e4afd4c220cd04291935a7b731c44d8cdf564c09f2770cad3b7c9c8aa462a1c47a0a45745be29b1d4c120ea69bba8fcf9f0b131e2ef77610d507c2065437b3226cd42fb03e9f59d4481b2f3617b6935b421b777695debfa12a99d4ffcc9c74adda405438b2f317babcd07ea2f2fba0ff9652035dbc242d4f798fba3cc64f9218bf1d76353636e5431363312978b24fec286a4d06d8ad01b88bf8d38614a15f03b48c509a62e85cd51f32430603235fc75dda974cd69f0feb301aa630da8493318829d7fd3a08132ec756710dda6ad5377f4c0001659cf368b1024a8186a4b412174289a197a8004e36ffede5ebc71ef4bbcde5f849377c3fc9af8898a93a5e1b652a8ba4702359c85c22fa31cf410bd4200c937c0dde84fa18329f9c823ba028ba708d633ae1b18a92ef287d23218e90900afcf85ea33081c0d24acc84dc95f528ed5ee75c8e116547e7b9c5254d1149de8ca2d72b9fc8a8ad34311d9289d058f055472750738d23ed3676119fd2c7c0520cb88b19efe0448fc202a10a283b2a11d5dc001a9dc5b30442313479c2d1d68900e7baad0a040e3225cbe58c67cd6f2fbfb3affd8b8802745175b7cfad9279d8d060e73a21ee71e7a545a69bcb2529de0fb496799f5d00e9c6b33404e36348282ecdc1f237a557781747330ad2ca5e8bc23073b6dafcdcc99f53192584a1f9e87a2ba58d633d348df8c160135f7f3b620f8ae6a80fb58cb133cb7484629469fa85d51e7e492e8f683a98964455bfdd0e12dfe0ceb8c5a0f7c5f23e6baf8b9beaa6961d08a9a006d38ca47116a0a16eaef9fa5bd070e2669a20a4b496eb8568cfde1529bc5b85b98db90fb6dde22e05f9a34ed3942fb8e1de54fb62d1d006afbf3c5f399e5d10b89079b11a8441a741daa771146da50d2c568e689e6b89e7da3534e40af780aeaacac648956c2cf54ebaa8c11659f6de4c29616bd3ac2fc31f8aa736598ebd3ca29c59414244344b7cca3d1923da51ecab52565848a23ccabb7bd15d60ba96ded69094038973a70c2255ae53f408e78ac8bab930bfe54abee2b8d8d90910b88388c5ad1567ba7488668649048e9dea484c76c0fec4836326dd05f95c6185b7eae5a76774960927942c93c2731f168167e5d5d94862f1199d3f191e24457db21186b3324778d32fb1a2ee64582dc518f7e6f6b162904825956d2c84f233934cb0ac1612b95deee506fa935b82854d0613d1ec87eadef7d9b65e028d1f4ca22929c1147de17d9e7208c1103c9f9a2b4fe7b397c8e6e44c02d2475cd79fdfc7ae36ce0ea15afd7b017f10c7841c308918e5f692748b6dd27d76d3cb5d8feca612af7b805a7efe5d7c78b374c1ce86cd0bd119e9027ae1151c04ad7972b82313caa66c6d64f75260dd66ec9157e177fe8059d318d1c87d5c558d95333d59010e0cf5bcee869ecd27b2a9ee927c78d694a8cb07da4b54e5155cfe5146e7204eb07c6c2ff1bc779a8fa88cf4ecba8fc600e2c8c4ac6a9b89897c7fcc5b51947556cbe8e00d1d1c4345cb6819014981db207a8eeb26064b7cfd8529aa1d0a19d590f24d85dfb81175ffb760f76cb77baa3348d961efe1974db0835ef1707869f0ce7b858c1c751e2f24b7a6c460e26dee0577ca118706ac5d2d2a1de367b659a843db56bb304c39fd84fd61713147236050aa14d0eeb365e1d8f06a4eeedcadc89c0ed273af922b5950007370770a21241c6ef47dd07bcd40de641c37ffd40b6cd3edb471839a2cff22cc6ddf44fa9725d820f6fcead5f352dc58b79c117552e908ad2b16b9616724aa5194384df453b2f7dc591f1e5a6a3aecead22485c8d60783d15b67512b8da91960c9b89e601b0aa09d27be764a0519c74a6408d64a2b4a6cefb95968aff40f2095aed56abf559d6cd194a3994dcd019df4ae20e1da52a283b40354883b7e05e185fbafe32198a7cfd94eb446de8ca4e9269476f0b928f1522e3e80c95477a07554bfe2c3e397808236515b6554e81f48b1f6bfd28527eb9016fe7d43de8f8f7ceecd0c57cfd42eb13bb25d7ca2ec72231a5a8e06337ac6bd01563af3a81154d6effb0d9a6161fadebfe0bf0b8a712333166e760d9656c34d362018ebb1f95bc2d7253c749f6e26bcbb915c3a7a7e78f1f503baa6e4da5ed40eeef5ae35c37e545b698f103db5ec01fe93cd9924df499221256f85cde0f9c5a757d9699d48c7a765ae46e6444fa30364eb3469cc0ca2b52e1e433b46932ed546f985137d9c75f73e26f550b7b229cab6c2d23b212d4054ae2ad212c3b053aa529e732a280ae4c437d3409d6aa0f"}}, &(0x7f00000028c0)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f0000002900)={0xfffffffffffffffa, r1, 0x0, {0x200, 0x81}, 0x4b}, 0x1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) unshare(0x6020400) r8 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) 3.022117285s ago: executing program 3 (id=1178): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x404c019}, 0xc080) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x100, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r3, 0x40047438, &(0x7f0000000040)) ioctl(r3, 0x7434, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001800ffff00000000000000000a000000fd00c8090000000014000500fe8000000000000000000000000000aa0c00090008"], 0x3c}, 0x1, 0x0, 0x0, 0x2048800}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r10 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x1, 0x9}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x7, 0x5, 0x1}, @multicast2, @multicast2, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) write$tun(r7, &(0x7f0000000500)=ANY=[], 0xfdef) sendmmsg(r4, &(0x7f0000001980)=[{{&(0x7f0000000140)=@sco, 0x80, &(0x7f0000001500)=[{&(0x7f00000001c0)="311587347f26abbafc92486b5b6f44ae1e987838", 0x14}, {&(0x7f0000000300)="193a26224090e17accbbec967ada4d5fe87c211487a9a4714bc6aa082b504714e2fd527c083649fa8537eef5341167906ef84e706b87ac443c271dd0abf411dc241fe7515d1e116de04479e75e4f71220bd4d8994fe632227f58ebc59b5a492b5b859c7879cbf4b2d59a61e5b754ef3c4bc3610270859a8c54face114913ea05c553971c238df02a0b0801f8b12d0b9899807da5c8aa094059b9fb6894b541465a0a5b18af27561e60d54ed02621db9870b1da9b6e21b1b385dd5ad48c52e8bda0422931026049207b8cad79", 0xcc}, {&(0x7f0000000440)='G', 0x1}, {&(0x7f00000004c0)="180199482e303d53b5f5677a094c", 0xe}, {&(0x7f0000000500)="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", 0x1000}], 0x5}}, {{&(0x7f0000001840)=@nl=@unspec, 0x80, &(0x7f0000001940)=[{&(0x7f00000018c0)="9cfafce9e0c056f1663b52397733309e636ff77c152589ed2fdcdbddc024d0374bc6f909fecdac433c57a5d5a1897ef4e6b8a995604b", 0x36}], 0x1}}], 0x2, 0x0) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000080)) syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) socket$nl_route(0x10, 0x3, 0x0) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r11, &(0x7f0000000340)={0xf, 0x8, 0xfa00, {r12, 0x10}}, 0x10) 3.001146362s ago: executing program 0 (id=1179): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f00000005c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002600)=ANY=[@ANYBLOB='X\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=r1, @ANYBLOB="0700000000000014"], 0x58) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004081}, 0x4040804) ptrace(0x10, r2) ptrace$ARCH_MAP_VDSO_32(0x1e, r2, 0x5, 0x2002) openat(0xffffffffffffff9c, 0x0, 0x201, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000340)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES8=r7, @ANYBLOB="0500000000000000"], 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000440)={'wlan0\x00', 0x1}) sched_setscheduler(0x0, 0x2, 0x0) getpid() sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000002680)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000002740)={0x3c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f0000002780)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002800)={0x1c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./trace\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r8, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0x2, 0x30, @multicast2}, 0x10, 0x0}}], 0x1, 0x8014) r9 = socket$rxrpc(0x21, 0x2, 0xa) r10 = openat$cdrom(0xffffff9c, &(0x7f0000000200), 0x2000, 0x0) ioctl$CDROMVOLCTRL(r10, 0x31f, &(0x7f0000000240)={0x23, 0xea, 0xe, 0x87}) ppoll(&(0x7f0000000040)=[{r9, 0x100}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./trace/error_log\x00', 0x20000, 0x42) 2.909694538s ago: executing program 2 (id=1180): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x2) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0xfffffffc, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfb, 0x80}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfc, 0x100}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc) r11 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) r12 = socket$netlink(0x10, 0x3, 0xa) bind$netlink(r12, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r13 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r13, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48) r14 = socket$netlink(0x10, 0x3, 0x4) writev(r14, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 2.839629677s ago: executing program 2 (id=1181): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2040) syz_fuse_handle_req(r0, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xfffffffffffffffd, {0x4, 0x3, 0x3, 0x8, 0x3ff, 0x80, {0x5, 0x80000000000, 0x1, 0xfffffffffffffffa, 0x16f, 0xdbf, 0x10, 0xfffffffe, 0x0, 0x8000, 0x2, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x41}}, 0x50) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') syz_fuse_handle_req(r0, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x4, {0x2, 0xffffffffffe, 0x8, 0x0, 0x0, 0x3881fffc, {0x5, 0xfff, 0x47ffff, 0x0, 0x3, 0x0, 0xa, 0x0, 0x10000, 0x8000, 0x80040000, r2, r3, 0xfffffff9, 0x8019}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4f, 0x90, 0x7f, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x3, 0xfa, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x5, 0x3, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x6, 0x7, 0x2}}]}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x7b, 0x0, 0x4d, 0xff, 0x5}, 0xf, &(0x7f0000000240)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x0, 0x10, 0x1}]}, 0x7, [{0x87, &(0x7f0000000540)=@string={0x87, 0x3, "bfdd05ae332d6825f4407cae68e7f70467f95c26baeacd0e6443a76b1a8416b8fb6d71d95cbd04b3cc6335c8a98e002c3aad682716e6a32f556645b339d875ef2adcb27d4db5c18e660bffba3a13d04b025cbb59a57e2e3fd3acc2e06737e4059c727efddf9380da493622d821a3d18c4071d1e66c7fc220a30cdaf77166f948af6aab0dc1"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x6811}}, {0x1e, &(0x7f0000000800)=@string={0x1e, 0x3, "cd1ddb424350f312db2269658baae494ae4fe5e6c85233ce9da36ad6"}}, {0xb4, &(0x7f0000000980)=@string={0xb4, 0x3, "79faa230569b722c3d2abaeaad6ef497b9407cfe64c67df405bd843a15c932de0fa994ccb408dd5d52638a69e2deadbd750b2db0243edd775b01030b8e1419e33ce3ea0473493e22326e2da6519efd6d4c94251896d73185bff5730186f3c9f2d26928c8d02014fed85fe724bc70daffac443d514d502676f100577cad65f767d322ff565c8416c06d3d88dcabbe91cd840116771c67ac4b1b2a9f18c49cef5663772e3a57efc24bf8ee70f12560fbff0510"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x44f}}]}) syz_usb_control_io$printer(r4, &(0x7f0000000bc0)={0xc, &(0x7f0000000b00)={0x54b11ba9e6ce7658, 0x6, 0x73, {0x73, 0xb, "d03d4c286bfd60002aa04d5fed3a2de1a6609a32d153d3f7b1dfff44f9f58ccc8bc46a4fa504c187ac4d31a5f6b6456274497a7cb38ec9c68ce580da4bbab6fe2abd0dd7aa580f00d756f41b625badd6b5705a0d466a643852da5c1e69daa4c48fddbf2b4debe494566a899602787b681b"}}, &(0x7f0000000b80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}}, &(0x7f0000000e80)={0x1c, &(0x7f0000000c00)={0x20, 0xf, 0xaf, "6d64451615a0d4fe51f8c366a0f5814049acda83d7105f26df7c3f1916847b552d5eded2f4146c16f6fdbf8d07cd0d35d87ac7a83f1775c75d27fd3ab8af977c83008b93f5db91c7d69e72ecbb0a13e3860e00b07e5f146c144477515a0392ab53990ae248bf6da7bdb969c7cdae2914c8623ad9afab69de5b9c722ca79029674774c509a1b680957a3883bb9add2d8cc60b2a5b8773bd86303d62ba3fb1ff93a6a374c0677bddfb293f09c149e226"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000d40)={0x20, 0x0, 0x2a, {0x28, "fb76af6cd267ddf24044026669d5cbcea0c2a5b71ba426628cccba812393a83075ad2c118e19aace"}}, &(0x7f0000000d80)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000e40)={0x20, 0x0, 0x1, 0x4}}) r5 = epoll_create1(0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000280)={0x40, 0x1, 0x2}, 0x30, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r7, 0x6, &(0x7f0000000300)={0x1, 0x1, 0x3, 0xdf57}) r8 = syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo/3\x00') read$FUSE(r8, &(0x7f000000c280)={0x2020}, 0x229) sendmsg$nl_route_sched(r6, 0x0, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setxattr$security_capability(&(0x7f000000e2c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f000000e300), &(0x7f000000e340)=@v1={0x1000000, [{0xb0}]}, 0xc, 0x2) connect$bt_l2cap(r9, &(0x7f000000e380)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) openat$snapshot(0xffffffffffffff9c, &(0x7f000000e3c0), 0x400, 0x0) r10 = landlock_create_ruleset(&(0x7f000000e400)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r10, 0xe) close_range(r5, 0xffffffffffffffff, 0x100000000000000) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f000000e440), 0x80000, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f000000e480)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f000000e4c0)={0x0, 0x0, &(0x7f000000e500)={&(0x7f000000e540)=@delqdisc={0x34, 0x26, 0x1, 0x70bd27, 0x25dfdffd, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0xc1}, 0x2400c800) read$snapshot(r11, &(0x7f000000e580)=""/80, 0x50) 2.839084718s ago: executing program 3 (id=1182): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3400000018000100200000000000000002009400ff00fe09008c0000060015000300000010001680"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000bd7000eaffffff00e462", @ANYRES32=r2, @ANYBLOB="8300040000a8000020001280080001007369740014000280080014000600000008000300ac1414aa"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) clock_getres(0x6, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r4, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r4) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="20ec27bd7000fddbdf250200000008000700", @ANYRES32=r4, @ANYBLOB="14000c0000000000000000000000000000000000080009000000000014000b00fc01000000000000000000000000000014000c0000000000000000000000ffff0a01010205000d001d0000000c000300020000000000000008000400ac1e0101"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r6) ioctl$NBD_DO_IT(r3, 0xab03) landlock_restrict_self(0xffffffffffffffff, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x5, 0x14, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a80a3888a82f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x141081, 0x0) read(r9, &(0x7f0000000380)=""/228, 0xe4) clock_settime(0xfffffffb, &(0x7f0000000140)) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x64040) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001100050026bd7000ffdbdf25070fef93", @ANYRES32=r11, @ANYBLOB="cfe819000000000014001a80100005"], 0x34}, 0x1, 0x0, 0x0, 0x2800c895}, 0x20040854) 2.739984474s ago: executing program 0 (id=1183): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@const={0x1, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x28) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000080)=0x6100204) r3 = epoll_create(0xa67) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000000}) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000540)='\x00!', 0x2}], 0x1, 0x739, 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r4, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x2b}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) r8 = fcntl$dupfd(r7, 0x0, r7) write$binfmt_script(r8, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 2.338284713s ago: executing program 3 (id=1185): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setns(0xffffffffffffffff, 0x2000000) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000300)='S', 0x1, 0x4040, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./cgrp\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f00000001c0)='./cgrp\x00', &(0x7f0000000280)='cgroup2\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgrp/cgroup.subtree_control\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0)='+cpuset\n\x00', 0x8) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./cgrp/child\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgrp/child/cpuset.cpus\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='1\n\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./cgrp/child/cpuset.cpus.partition\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='root\n\x00', 0x5) close(r3) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 2.235248971s ago: executing program 2 (id=1187): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x50) mount(0x0, &(0x7f0000001500)='./dev\x00', 0x0, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000280), 0x1, 0x40140) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f00000003c0)={0xd09bbdc8832dbc69, 0x2, @start={0x6, 0x1}}) userfaultfd(0x1) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) io_setup(0x6, &(0x7f0000000040)) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001980)=@newchain={0x24, 0x1e, 0x101, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x4, 0x1}, {0x10, 0xb}}}, 0x24}}, 0x44004) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x21e) ioctl$SIOCX25SENDCALLACCPT(r4, 0x89e9) listns(&(0x7f00000000c0)={0x20, 0x0, 0xc, 0x4000000, 0x0, 0x3}, 0x0, 0xf4240, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.051558097s ago: executing program 3 (id=1188): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="140100002d0001000000000000000000030100800c0000000000000000000000140001000000000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94", @ANYRES32=0x0], 0x114}], 0x1}, 0x11) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x40804) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c000000020603000000000000000000070000001c00078008000840000000e2050015000200000008001240000000040500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e657400"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYRES64=r0, @ANYBLOB="b549ef93cc34ce9782b36588346480d2c3d1fdd5484d81c63867998e20141c0411d62e6cda833bdf43153e12d612e9adabd440781631ece28a8987070714e2eecb4801356386aa99a0736bd5d527ed75426d2987a67e9296ae00d2924f1334293e0858999e7dc702e4ee3dc2fc23c0e83737225c1673efb23ecb74c69d1a91795ef3c152ee96cb6304964580a53d45875e6680c37cf72d6ef04eadc3095ba93c5ed1"], 0x38}, 0x1, 0x0, 0x0, 0x4048090}, 0x8080) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000009060300000000000000000007000000340007800c000180080001407f0000010c001480080001400a010100060004404e24000006000540506400000000050001000600"/83], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/my_zoned_dev\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/my_zoned_dev/memory_backed\x00', 0x101002, 0x0) write(r2, &(0x7f00000001c0)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nullb/my_zoned_dev/zoned\x00', 0x2, 0xb96e0453b2f36300) r4 = socket$inet6(0xa, 0x5, 0x3a) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797afc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000010b615cd89f1b3621c000340000000022c00b3120e0a1f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x8040) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYRES16, @ANYBLOB="c258a9cfeae8b8dca4f51ece5ba102389844d3f4cf267379a6f007931a39db0fbf24747e36d88865a83ffcbe74217c28dd8c426248b37de75848f2f551141d4f61968d68de485a4a020e6431b8e6e57787775bfc84dc86c0edc5b0bc0a97e63b72a228f8a9d21a21e0f9f70ab78ee6cfbdeb8873db5aa48aabb522d5e818a42b95946b5b2ef3ec993e17f7f74fc79533e37aa1ef96964d176f9fe77f80b6125989e55a287a9e2b47a01eaa6d98afb2564140dd80ba64029e2b522eace5d78c02161d4b525665f70b03ed352c4b3082b085ee27cdb79865cbac1eb17e09308d3240ef74ff9e07c066c9534d20cc56b64922cc24dcbd5a8b802222239d", @ANYBLOB="bba249dfe9e1fe4649087e887b0a44d5a5b3d51029", @ANYRESDEC], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x842) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendto$inet6(r4, &(0x7f0000000040)="800037bbfa9ba1ce", 0xe80b, 0x0, 0x0, 0x0) recvfrom$inet6(r4, &(0x7f0000000080)=""/240, 0xfffffffffffffcea, 0x10020, 0x0, 0x0) write(r3, &(0x7f0000000240)='1\x00', 0x1) syz_open_procfs(0x0, 0x0) readv(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/140, 0x8c}], 0x1) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x8946, &(0x7f0000000100)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/my_zoned_dev/power\x00', 0x2, 0x0) write(r7, &(0x7f00000002c0)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) openat(r7, &(0x7f00000006c0)='./config/nullb/my_zoned_dev/zoned\x00', 0xe5c03, 0x0) 1.669045669s ago: executing program 0 (id=1189): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000740)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000780)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e21, 0x4e21, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f00000008c0)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) open(&(0x7f0000000600)='./sys\x00', 0x111040, 0x7e) r1 = open(&(0x7f0000000040)='./file0\x00', 0xa0000, 0x0) mknodat(r1, &(0x7f0000000000)='./file0\x00', 0x11c0, 0x0) r2 = fsopen(&(0x7f0000000140)='gfs2meta\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="020010feff0000000000040000000000000010000000000000002000000000000000"], 0x24, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x0, 0x58) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201}) mkdir(&(0x7f0000000900)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000940)='./sys\x00', &(0x7f00000002c0)='nfsd\x00', 0x8a6, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f0000000a00)='1', 0x1) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000a40)=0x6, 0x8, 0x0) ioctl$XFS_IOC_FSGROWFSDATA(r4, 0x400c586e, &(0x7f0000000a80)={0xb, 0xffffffff}) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f0000000b00)='1', 0x1) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12012f00000000407f04ffff0000000000010902240001000000000904000015030581d748181244535d5fe0d3b3f986afbfae8f2f12de5404ac41b443ae574858a3cbb0efc66ec5bcdd908c592e4904823f51b571e9cb3d080bd9cce9476bc76b98e0e9f6639bc7bac5154267cee4bb05fb681dc93603eaac00fc"], 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000c00), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) socket$kcm(0x2, 0x3, 0x2) 1.617102073s ago: executing program 1 (id=1190): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20102, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8012, r1, 0x2000) r2 = socket(0x840000000002, 0x3, 0x100) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x45, 0x1, 0x80002, 0x25dfdbf9, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x400c0c1}, 0x40080d4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xc, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000540)='mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='mysys\x00', &(0x7f0000000640)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mysys/module/loop/parameters/max_loop\x00', 0x0, 0x0) read(r7, &(0x7f00000006c0), 0x64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000480)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000040)=@fragment={0x5c, 0x0, 0x1, 0x0, 0x0, 0xd, 0x65}, 0x8) sendto$inet6(r4, &(0x7f0000000080)="8a", 0x1, 0x51, &(0x7f00000000c0)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB='!\x00\b\x00\x00\x00\x00\x00'], 0x8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000700)={'syzkaller0\x00', 0x1}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000740)={'syzkaller0\x00', 0x0}) r11 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000780)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x30, 0x24, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000003, 0x6}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r8, &(0x7f00000009c0)=ANY=[@ANYBLOB="000060033f03003000640000ac11"], 0x34) listen(r4, 0x100101) accept4(r4, 0x0, 0x0, 0x80800) connect$inet(r2, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) 1.189563816s ago: executing program 2 (id=1191): socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='1', 0x1) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r6 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000180)={0x3}) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x80000001, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3, 0x6}) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000d00)='krb5\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 1.189164014s ago: executing program 1 (id=1192): r0 = socket$inet_tcp(0x2, 0x1, 0x0) tkill(0xffffffffffffffff, 0xd) syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r4 = socket$kcm(0x29, 0x2, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r6, &(0x7f0000001f80)=""/4102, 0x1006) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "225d84b5b4a5158c", "4fb214a87f68e3b51ff413568b9790a3", "32e77f0f", "db98bd056fa85768"}, 0x28) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r7, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r5, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r5, &(0x7f0000000200)=[{&(0x7f0000000180)="47e75e65875d62a2897c41319b34e4fee798d8b68de8d29d07ea15c0ecc327a81b30446b9e180edb2dc593ed390d4e02ad0415ce6da347af8b12c7b7839029b7896502eceee28fdf", 0x48}, {&(0x7f0000000240)="4aee4320baeb6eddf15148ef3d066d502fc9c002a1605b4458859cc6a543e06f41214c5d3071fd90ff79044d93a2c5af3d7424a3161d3055c62748f0bc5b4648d7e44e08a4440aa003d5098ea04c", 0x4e}, {&(0x7f0000000300)="b4400fd5663606d184bd9187dd98ae014533f3a3726fe86b2dc8d2a047f408bdfcbdd42dbb90882830b6a51b1d81abf62f0541dea6058ad1dd3371509c13368a8dc88de0816014d042982a8327b848837a863544da0d9cd649f262386663b2b10a65079aa09519e65997ded71d2c3eaa", 0x70}, {&(0x7f0000000440)="5797083849bf5c8aec3fad0053a8738fcf1b3339269632ef5635e7c27f92bcbf602b2e4a2b6d43311a2fb8c56695d43d5f18c04514aabe53dd091efd0b577c455b636154b11a31ed54df51ca1e3a2e8b6941aeb19878fb1f7aeeb2cd2f15", 0x5e}], 0x4) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000000c0)=0x688f0d5c, 0x4) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.154631911s ago: executing program 3 (id=1193): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000004c0)={0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./cgroup\x00', &(0x7f0000000540)='gfs2meta\x00', 0x20c400, 0x0) r0 = mq_open(0x0, 0x42, 0x54, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000580)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f0000000640)='100000', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f00000006c0)='1', 0x1) ioctl$XFS_IOC_BULKSTAT(r2, 0x8040587f, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) write(r3, &(0x7f0000000740)='0', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="050000006cbc000036490000c200000001000000", @ANYRES32=r2, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000d3bdefc2b5f45596000000000000000000"], 0x50) connect$netlink(r2, &(0x7f0000000800)=@kern={0x10, 0x0, 0x0, 0x1}, 0xc) preadv2(r0, 0x0, 0x0, 0xff, 0x6, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000008c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000900)={0x13, 0x10, 0xfa00, {&(0x7f0000000940), r5, 0x2}}, 0x18) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x400, 0x1, 0x235}) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x40000001, &(0x7f0000000380)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f00000003c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xc, @local, 0x10}, r8}}, 0x30) 769.335472ms ago: executing program 1 (id=1194): prctl$PR_SET_SECUREBITS(0x1c, 0x4) open(0x0, 0x8000, 0x112) r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r0, 0x80079a0) sendfile(r0, r0, 0x0, 0x7e78a6f1) fcntl$addseals(r0, 0x409, 0xc) 762.636698ms ago: executing program 3 (id=1195): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_disconnect(r0) write$char_usb(r1, 0x0, 0x0) 597.970056ms ago: executing program 1 (id=1196): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000004c0)={0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./cgroup\x00', &(0x7f0000000540)='gfs2meta\x00', 0x20c400, 0x0) r0 = mq_open(0x0, 0x42, 0x54, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000580)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000640)='10000', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f00000006c0)='1', 0x1) ioctl$XFS_IOC_BULKSTAT(r2, 0x8040587f, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) write(r3, &(0x7f0000000740)='0', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="050000006cbc000036490000c200000001000000", @ANYRES32=r2, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000d3bdefc2b5f45596000000000000000000"], 0x50) connect$netlink(r2, &(0x7f0000000800)=@kern={0x10, 0x0, 0x0, 0x1}, 0xc) preadv2(r0, 0x0, 0x0, 0xff, 0x6, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000008c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000900)={0x13, 0x10, 0xfa00, {&(0x7f0000000940), r5, 0x2}}, 0x18) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x400, 0x1, 0x235}) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x40000001, &(0x7f0000000380)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f00000003c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xc, @local, 0x10}, r8}}, 0x30) 406.483497ms ago: executing program 1 (id=1197): mkdir(&(0x7f0000000000)='./file0\x00', 0x130) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_inode_hardlimit=1']) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee01, 0x0) creat(&(0x7f0000000400)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) 309.793221ms ago: executing program 1 (id=1198): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000004c0)={0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./cgroup\x00', &(0x7f0000000540)='gfs2meta\x00', 0x20c400, 0x0) r0 = mq_open(0x0, 0x42, 0x54, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000640)='100000', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f00000006c0)='1', 0x1) ioctl$XFS_IOC_BULKSTAT(r2, 0x8040587f, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) write(r3, &(0x7f0000000740)='0', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="050000006cbc000036490000c200000001000000", @ANYRES32=r2, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000d3bdefc2b5f45596000000000000000000"], 0x50) connect$netlink(r2, &(0x7f0000000800)=@kern={0x10, 0x0, 0x0, 0x1}, 0xc) preadv2(r0, 0x0, 0x0, 0xff, 0x6, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000008c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000900)={0x13, 0x10, 0xfa00, {&(0x7f0000000940), r5, 0x2}}, 0x18) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x400, 0x1, 0x235}) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x40000001, &(0x7f0000000380)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f00000003c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xc, @local, 0x10}, r8}}, 0x30) 304.898122ms ago: executing program 2 (id=1199): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x509600, 0x0) r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) r1 = socket$inet(0x2, 0x1, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000440)={{0x2, 0x0, @remote}, {0x1, @multicast}, 0xc, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='net/arp\x00') ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000500)={{0x0, 0x5b, 0x8000000000000001, 0x2, 0x7, 0x6, 0x8000, 0x1, 0x2, 0x7fffffff, 0x3, 0x4, 0x3, 0xc, 0x200}}) preadv(r2, &(0x7f0000001500)=[{&(0x7f0000001540)=""/119, 0x77}, {&(0x7f0000001c00)=""/4096, 0x1000}], 0x2, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x13) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000015c0)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001600)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f00000017c0)={@multicast1, @local}, 0xc) 0s ago: executing program 2 (id=1200): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) rseq(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/tty/ttyS0/rx_trig_bytes\x00', 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000400)={0x30, 0x5, 0x0, {0x0, 0x2, 0x8000000000000, 0x400}}, 0x30) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f0000000000)='omfs\x00', 0x1028025, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103a42, 0x32) write$P9_RREAD(r1, &(0x7f0000000140)={0xb, 0x75, 0x1}, 0xb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000440)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x2, 0xba, &(0x7f00000005c0)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000006c0)=0x7) socket$inet(0xa, 0x801, 0x84) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000700)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000740)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000840), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000880)=0x2) recvmmsg(r5, &(0x7f00000008c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10040881) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x67) kernel console output (not intermixed with test programs): 4 printk messages dropped ** [ 116.738429][ T8006] FAULT_INJECTION: forcing a failure. [ 116.738429][ T8006] name failslab, interval 1, probability 0, space 0, times 0 [ 116.738456][ T8006] CPU: 0 UID: 0 PID: 8006 Comm: syz.1.649 Tainted: G L syzkaller #0 PREEMPT(full) [ 116.738481][ T8006] Tainted: [L]=SOFTLOCKUP [ 116.738488][ T8006] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.738498][ T8006] Call Trace: [ 116.738505][ T8006] [ 116.738513][ T8006] dump_stack_lvl+0x100/0x190 [ 116.738541][ T8006] should_fail_ex.cold+0x5/0xa [ 116.738563][ T8006] should_failslab+0xc2/0x120 [ 116.738590][ T8006] kmem_cache_alloc_noprof+0x92/0x6a0 [ 116.738615][ T8006] ? __kernfs_new_node+0xd2/0xa10 [ 116.738637][ T8006] __kernfs_new_node+0xd2/0xa10 [ 116.738657][ T8006] ? __pfx___kernfs_new_node+0x10/0x10 [ 116.738676][ T8006] ? lock_acquire+0x1d1/0x380 [ 116.738700][ T8006] ? kernfs_root+0x23/0x2a0 [ 116.738724][ T8006] ? find_held_lock+0x2b/0x80 [ 116.738743][ T8006] ? kernfs_root+0xee/0x2a0 [ 116.738765][ T8006] ? kernfs_root+0xee/0x2a0 [ 116.738799][ T8006] kernfs_new_node+0x117/0x150 [ 116.738819][ T8006] __kernfs_create_file+0x53/0x350 [ 116.738842][ T8006] sysfs_add_file_mode_ns+0x207/0x3c0 [ 116.738871][ T8006] sysfs_merge_group+0x194/0x340 [ 116.738896][ T8006] ? __pfx_sysfs_merge_group+0x10/0x10 [ 116.738921][ T8006] ? bus_add_device+0x2e2/0x6c0 [ 116.738941][ T8006] ? __pfx_bus_add_device+0x10/0x10 ** 92 printk messages dropped ** ** 109 printk messages dropped ** ** 124 printk messages dropped ** ** 52 printk messages dropped ** ** 129 printk messages dropped ** [ 116.831222][ T8011] : entered promiscuous mode [ 118.351806][ T5820] libceph: connect (1)[c::]:6789 error -99 [ 118.351960][ T5820] libceph: mon0 (1)[c::]:6789 connect error [ 118.353185][ T5820] libceph: connect (1)[c::]:6789 error -99 [ 118.353368][ T5820] libceph: mon0 (1)[c::]:6789 connect error [ 118.474314][ T8033] ceph: No mds server is up or the cluster is laggy [ 118.761964][ C3] net_ratelimit: 40 callbacks suppressed [ 118.924066][ T5736] Bluetooth: hci0: command 0x0401 tx timeout [ 118.924591][ T5747] Bluetooth: hci0: Opcode 0x0401 failed: -110 ** 13 printk messages dropped ** [ 120.330027][ T8030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'. [ 121.291755][ T8069] fuse: Bad value for 'fd' [ 121.434677][ T5747] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 121.434821][ T5747] Bluetooth: hci3: Injecting HCI hardware error event [ 121.436273][ T5747] Bluetooth: hci3: hardware error 0x00 ** 278 printk messages dropped ** ** 538 printk messages dropped ** [ 122.012048][ T8073] kvm: requested 7542 ns i8254 timer period limited to 200000 ns ** 1889 printk messages dropped ** ** 103 printk messages dropped ** [ 122.949714][ T8081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium ** 14 printk messages dropped ** [ 123.465052][ T8091] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1500) ! [ 123.504822][ T5736] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 123.559910][ T8091] syzkaller0: entered promiscuous mode [ 123.559919][ T8091] syzkaller0: entered allmulticast mode [ 123.787768][ C0] net_ratelimit: 36 callbacks suppressed [ 123.867936][ T5747] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 123.980405][ T8097] syzkaller0: entered promiscuous mode [ 123.980414][ T8097] syzkaller0: entered allmulticast mode ** 304 printk messages dropped ** ** 908 printk messages dropped ** ** 753 printk messages dropped ** ** 30 printk messages dropped ** ** 93 printk messages dropped ** ** 86 printk messages dropped ** ** 83 printk messages dropped ** ** 98 printk messages dropped ** ** 93 printk messages dropped ** ** 156 printk messages dropped ** ** 91 printk messages dropped ** ** 89 printk messages dropped ** ** 88 printk messages dropped ** ** 85 printk messages dropped ** ** 625 printk messages dropped ** [ 125.548369][ T8115] kvm: requested 7542 ns i8254 timer period limited to 200000 ns ** 965 printk messages dropped ** ** 120 printk messages dropped ** ** 70 printk messages dropped ** [ 125.646155][ T8117] syzkaller0: entered promiscuous mode [ 125.646164][ T8117] syzkaller0: entered allmulticast mode ** 109 printk messages dropped ** ** 38 printk messages dropped ** ** 29 printk messages dropped ** [ 125.965738][ T8133] netlink: 'syz.3.682': attribute type 11 has an invalid length. [ 126.102288][ T8133] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue ** 2297 printk messages dropped ** ** 7 printk messages dropped ** ** 36 printk messages dropped ** ** 18 printk messages dropped ** ** 71 printk messages dropped ** ** 83 printk messages dropped ** ** 83 printk messages dropped ** ** 169 printk messages dropped ** ** 98 printk messages dropped ** [ 126.464509][ T8144] netlink: 'syz.1.687': attribute type 8 has an invalid length. [ 126.464524][ T8144] netlink: 636 bytes leftover after parsing attributes in process `syz.1.687'. [ 126.624723][ T8139] rxe_eth0 speed is unknown, defaulting to 1000 [ 126.776631][ T8146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.684'. ** 1648 printk messages dropped ** ** 103 printk messages dropped ** ** 78 printk messages dropped ** ** 61 printk messages dropped ** ** 17 printk messages dropped ** ** 54 printk messages dropped ** ** 14 printk messages dropped ** ** 23 printk messages dropped ** ** 35 printk messages dropped ** ** 11 printk messages dropped ** ** 911 printk messages dropped ** ** 79 printk messages dropped ** ** 41 printk messages dropped ** ** 956 printk messages dropped ** ** 97 printk messages dropped ** ** 19 printk messages dropped ** [ 128.837857][ C3] net_ratelimit: 137 callbacks suppressed [ 129.307875][ T5736] Bluetooth: hci2: command 0x0406 tx timeout [ 130.067106][ T8164] syzkaller0: entered promiscuous mode [ 130.067114][ T8164] syzkaller0: entered allmulticast mode [ 130.195502][ T8184] jffs2: notice: (8184) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 130.405370][ T8190] FAULT_INJECTION: forcing a failure. [ 130.405370][ T8190] name failslab, interval 1, probability 0, space 0, times 0 [ 130.405390][ T8190] CPU: 0 UID: 0 PID: 8190 Comm: syz.1.698 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.405408][ T8190] Tainted: [L]=SOFTLOCKUP [ 130.405413][ T8190] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.405420][ T8190] Call Trace: [ 130.405425][ T8190] [ 130.405430][ T8190] dump_stack_lvl+0x100/0x190 [ 130.405451][ T8190] should_fail_ex.cold+0x5/0xa [ 130.405468][ T8190] should_failslab+0xc2/0x120 [ 130.405488][ T8190] __kmalloc_noprof+0xfc/0x840 [ 130.405505][ T8190] ? process_preds+0x4a2/0x1d90 [ 130.405527][ T8190] process_preds+0x4a2/0x1d90 [ 130.405552][ T8190] apply_subsystem_event_filter+0x4a0/0x17a0 [ 130.405576][ T8190] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 130.405599][ T8190] ? _copy_from_user+0x59/0xd0 [ 130.405613][ T8190] subsystem_filter_write+0x95/0x120 [ 130.405635][ T8190] vfs_write+0x2aa/0x1050 [ 130.405651][ T8190] ? __pfx_subsystem_filter_write+0x10/0x10 [ 130.405669][ T8190] ? lock_acquire+0x1d1/0x380 [ 130.405691][ T8190] ? __fget_files+0x34/0x3d0 [ 130.405706][ T8190] ? __pfx_vfs_write+0x10/0x10 [ 130.405720][ T8190] ? find_held_lock+0x2b/0x80 [ 130.405735][ T8190] ? __fget_files+0x215/0x3d0 [ 130.405754][ T8190] ? __fget_files+0x21f/0x3d0 [ 130.405775][ T8190] ksys_write+0x12a/0x250 [ 130.405791][ T8190] ? __pfx_ksys_write+0x10/0x10 [ 130.405812][ T8190] __do_fast_syscall_32+0x13a/0x8b0 [ 130.405827][ T8190] do_fast_syscall_32+0x32/0x70 [ 130.405840][ T8190] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 130.405855][ T8190] RIP: 0023:0xf7fc2fec [ 130.405869][ T8190] Code: Unable to access opcode bytes at 0xf7fc2fc2. ** 232 printk messages dropped ** ** 108 printk messages dropped ** ** 97 printk messages dropped ** ** 108 printk messages dropped ** ** 99 printk messages dropped ** ** 167 printk messages dropped ** ** 88 printk messages dropped ** ** 78 printk messages dropped ** ** 78 printk messages dropped ** ** 72 printk messages dropped ** ** 89 printk messages dropped ** ** 96 printk messages dropped ** ** 104 printk messages dropped ** ** 72 printk messages dropped ** ** 86 printk messages dropped ** ** 84 printk messages dropped ** ** 77 printk messages dropped ** ** 81 printk messages dropped ** ** 81 printk messages dropped ** ** 80 printk messages dropped ** ** 81 printk messages dropped ** ** 77 printk messages dropped ** ** 81 printk messages dropped ** ** 76 printk messages dropped ** ** 85 printk messages dropped ** ** 74 printk messages dropped ** ** 92 printk messages dropped ** ** 167 printk messages dropped ** ** 156 printk messages dropped ** ** 141 printk messages dropped ** ** 154 printk messages dropped ** ** 162 printk messages dropped ** ** 107 printk messages dropped ** ** 78 printk messages dropped ** ** 79 printk messages dropped ** ** 81 printk messages dropped ** ** 73 printk messages dropped ** ** 150 printk messages dropped ** ** 85 printk messages dropped ** ** 78 printk messages dropped ** ** 78 printk messages dropped ** ** 90 printk messages dropped ** ** 80 printk messages dropped ** ** 81 printk messages dropped ** ** 77 printk messages dropped ** ** 78 printk messages dropped ** ** 90 printk messages dropped ** [ 130.940279][ T8194] syzkaller0: entered promiscuous mode [ 130.940288][ T8194] syzkaller0: entered allmulticast mode [ 131.224339][ T8199] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input12 ** 12837 printk messages dropped ** [ 132.364657][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.483004][ T8226] tipc: Started in network mode [ 132.483019][ T8226] tipc: Node identity d6ee278cc3ee, cluster identity 4711 [ 132.483146][ T8226] tipc: Enabled bearer , priority 0 [ 132.483897][ T8226] syzkaller0: entered promiscuous mode [ 132.483907][ T8226] syzkaller0: entered allmulticast mode [ 132.499771][ T8226] tipc: Resetting bearer [ 132.504916][ T8224] tipc: Resetting bearer [ 132.512695][ T8224] tipc: Disabling bearer [ 132.969785][ T8234] netlink: 'syz.2.713': attribute type 11 has an invalid length. [ 132.993219][ T8234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.994192][ T8234] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.996670][ T8234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.018707][ T8234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.019802][ T8234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.022981][ T8234] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 133.022991][ T8234] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 133.025674][ T8234] veth1_vlan: left promiscuous mode [ 133.026297][ T8234] veth0_vlan: left promiscuous mode [ 133.027140][ T8234] veth0_vlan: entered promiscuous mode [ 133.046452][ T8234] veth1_vlan: entered promiscuous mode [ 133.050651][ T8234] veth1_macvtap: left promiscuous mode [ 133.051276][ T8234] veth0_macvtap: left promiscuous mode [ 133.051855][ T8234] veth0_macvtap: entered promiscuous mode [ 133.052420][ T8234] veth1_macvtap: entered promiscuous mode [ 133.066309][ T8234] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 133.066858][ T8234] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 133.067650][ T8234] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 133.077672][ T8234] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 133.084298][ T8234] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 133.095999][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.096060][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.097565][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.097625][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.157998][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.158021][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.158039][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.158056][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.467842][ T5736] Bluetooth: hci2: command 0x0406 tx timeout [ 134.027827][ C3] net_ratelimit: 146 callbacks suppressed [ 135.407080][ T5093] Bluetooth: hci2: unexpected event for opcode 0x0403 [ 135.407402][ T8269] netlink: 'syz.0.723': attribute type 11 has an invalid length. [ 135.427304][ T8269] 8021q: adding VLAN 0 to HW filter on device eth0 [ 135.697968][ T35] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 135.847786][ T35] usb 8-1: Using ep0 maxpacket: 32 [ 135.848245][ T35] usb 8-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 3.02 [ 135.848709][ T35] usb 8-1: config 0 has no interfaces? [ 135.850236][ T35] usb 8-1: New USB device strings: Mfr=19, Product=95, SerialNumber=25 [ 135.850246][ T35] usb 8-1: Product: syz [ 135.850254][ T35] usb 8-1: Manufacturer: syz [ 135.850261][ T35] usb 8-1: SerialNumber: syz [ 135.854178][ T35] usb 8-1: config 0 descriptor?? [ 136.074031][ T35] usb 8-1: USB disconnect, device number 14 [ 136.702772][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.732'. [ 136.758062][ T8299] netlink: 104 bytes leftover after parsing attributes in process `syz.2.732'. [ 136.758074][ T8299] netlink: 104 bytes leftover after parsing attributes in process `syz.2.732'. [ 136.924777][ T44] audit: type=1326 audit(1792087824.641:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.3.734" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 136.924887][ T44] audit: type=1326 audit(1792087824.641:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.3.734" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 136.928013][ T44] audit: type=1326 audit(1792087824.641:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.3.734" exe="/syz-executor" sig=0 arch=40000003 syscall=36 compat=1 ip=0xf746efec code=0x7ffc0000 [ 137.065551][ T44] audit: type=1326 audit(1792087824.781:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.3.734" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 137.065578][ T44] audit: type=1326 audit(1792087824.781:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.3.734" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 137.331927][ T5810] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 137.498079][ T5810] usb 8-1: Using ep0 maxpacket: 8 [ 137.499321][ T5810] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 137.500489][ T5810] usb 8-1: config 0 has no interfaces? [ 137.500533][ T5810] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.518806][ T5810] usb 8-1: config 0 descriptor?? [ 137.761003][ T44] audit: type=1326 audit(1792087825.481:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.3.734" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf746efec code=0x7ffc0000 [ 137.761392][ T44] audit: type=1326 audit(1792087825.481:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.3.734" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 137.761512][ T44] audit: type=1326 audit(1792087825.481:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.3.734" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 137.769011][ T44] audit: type=1326 audit(1792087825.491:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.3.734" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf746efec code=0x7ffc0000 [ 137.769649][ T857] usb 8-1: USB disconnect, device number 15 [ 137.775725][ T44] audit: type=1326 audit(1792087825.491:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.3.734" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 138.023058][ T8325] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 138.075216][ T8327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.744'. [ 138.076454][ T8327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.744'. [ 138.088777][ T8325] md: could not open device unknown-block(1,0). [ 138.149357][ T8330] afs: Unknown parameter 'dy' [ 138.227994][ T5810] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 138.411489][ T5810] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 138.414401][ T5810] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 138.414427][ T5810] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64 [ 138.414449][ T5810] usb 6-1: config 0 interface 0 has no altsetting 0 [ 138.417243][ T5810] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 138.417260][ T5810] usb 6-1: Product: syz [ 138.417273][ T5810] usb 6-1: Manufacturer: syz [ 138.417286][ T5810] usb 6-1: SerialNumber: syz [ 138.445264][ T5810] usb 6-1: config 0 descriptor?? [ 138.450470][ T8322] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 138.461606][ T5810] usb 6-1: selecting invalid altsetting 0 [ 138.726207][ T8322] usb 6-1: BOGUS urb xfer, pipe 0 != type 1 [ 138.781389][ T8343] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 138.850094][ T8343] md: could not open device unknown-block(1,0). [ 139.067837][ C0] net_ratelimit: 287 callbacks suppressed [ 139.144742][ T2365] usb 6-1: USB disconnect, device number 12 [ 139.145258][ T8322] usb 6-1: cannot submit urb 0, error -19: no device [ 139.145606][ T8322] usb 6-1: cannot submit urb 0, error -19: no device [ 139.145939][ T8322] usb 6-1: cannot submit urb 0, error -19: no device [ 139.203633][ T8348] rxe_eth0 speed is unknown, defaulting to 1000 [ 139.388082][ C0] ipvlan_process_outbound: 3 callbacks suppressed [ 139.517990][ T5820] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 139.668221][ T5820] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 139.669010][ T5820] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 139.669023][ T5820] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.669033][ T5820] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 139.669066][ T5820] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.670446][ T5820] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 139.670462][ T5820] usb 8-1: Product: syz [ 139.670474][ T5820] usb 8-1: Manufacturer: syz [ 139.679059][ T5820] cdc_wdm 8-1:1.0: skipping garbage [ 139.679066][ T5820] cdc_wdm 8-1:1.0: skipping garbage [ 139.706974][ T5820] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 139.706983][ T5820] cdc_wdm 8-1:1.0: Unknown control protocol [ 139.981055][ T8357] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 140.613712][ T5820] usb 8-1: USB disconnect, device number 16 [ 141.231922][ T8371] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 141.608879][ T8378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.758'. [ 141.613066][ T8378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.758'. [ 141.893681][ T8383] syzkaller0: entered promiscuous mode [ 141.893696][ T8383] syzkaller0: entered allmulticast mode [ 141.998813][ T8375] syz.0.756 (8375) used greatest stack depth: 18536 bytes left [ 142.369544][ T8392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.764'. [ 142.370542][ T8392] ======================================================= [ 142.370542][ T8392] WARNING: The mand mount option has been deprecated and [ 142.370542][ T8392] and is ignored by this kernel. Remove the mand [ 142.370542][ T8392] option from the mount to silence this warning. [ 142.370542][ T8392] ======================================================= [ 142.624726][ T8395] Bluetooth: ISO socket layer initialized [ 142.994198][ T8405] rxe_eth0 speed is unknown, defaulting to 1000 [ 143.032178][ T44] kauditd_printk_skb: 1 callbacks suppressed [ 143.049787][ T44] audit: type=1800 audit(1792088086.797:34): pid=8409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.767" name="file0" dev="overlay" ino=1107 res=0 errno=0 [ 143.409412][ T35] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 143.482819][ T8418] netlink: 'syz.0.771': attribute type 12 has an invalid length. [ 143.588154][ T35] usb 8-1: Using ep0 maxpacket: 32 [ 143.588788][ T35] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 143.589647][ T35] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.589659][ T35] usb 8-1: config 0 has no interfaces? [ 143.592387][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.592398][ T35] usb 8-1: Product: syz [ 143.592406][ T35] usb 8-1: Manufacturer: syz [ 143.592414][ T35] usb 8-1: SerialNumber: syz [ 143.597326][ T35] usb 8-1: config 0 descriptor?? [ 143.879323][ T8410] e1000e 0000:00:02.0 eth1: removed PHC [ 144.031746][ T8410] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 144.108065][ C3] net_ratelimit: 147 callbacks suppressed [ 144.368019][ T8441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.773'. [ 144.369305][ T8441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.773'. [ 144.662370][ T2365] usb 8-1: USB disconnect, device number 17 [ 144.665901][ T8451] 0x0000000000ec-0x0000000000f2 : "" [ 144.713970][ T8451] ftl_cs: FTL header corrupt! [ 144.826934][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.775'. [ 145.290831][ T8479] rxe_eth0 speed is unknown, defaulting to 1000 [ 145.304619][ T8485] FAULT_INJECTION: forcing a failure. [ 145.304619][ T8485] name fail_futex, interval 1, probability 0, space 0, times 0 [ 145.304645][ T8485] CPU: 0 UID: 0 PID: 8485 Comm: syz.0.778 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.304661][ T8485] Tainted: [L]=SOFTLOCKUP [ 145.304665][ T8485] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.304672][ T8485] Call Trace: [ 145.304677][ T8485] [ 145.304683][ T8485] dump_stack_lvl+0x100/0x190 [ 145.304702][ T8485] should_fail_ex.cold+0x5/0xa [ 145.304718][ T8485] get_futex_key+0x1d0/0x14f0 [ 145.304733][ T8485] ? __pfx_get_futex_key+0x10/0x10 [ 145.304745][ T8485] ? find_held_lock+0x2b/0x80 [ 145.304759][ T8485] ? futex_wake+0x4ea/0x5e0 [ 145.304779][ T8485] futex_wake+0xf4/0x5e0 [ 145.304794][ T8485] ? futex_wait+0x11e/0x370 [ 145.304811][ T8485] ? __pfx_futex_wake+0x10/0x10 [ 145.304827][ T8485] ? rcu_read_lock_any_held+0x6a/0x90 [ 145.304842][ T8485] ? locks_remove_posix+0xff/0x4d0 [ 145.304854][ T8485] ? find_held_lock+0x2b/0x80 [ 145.304880][ T8485] ? __pfx_locks_remove_posix+0x10/0x10 [ 145.304893][ T8485] ? ksys_write+0x190/0x250 [ 145.304909][ T8485] do_futex+0x2b2/0x440 [ 145.304923][ T8485] ? __pfx_do_futex+0x10/0x10 [ 145.304940][ T8485] __ia32_sys_futex_time32+0x2f4/0x470 [ 145.304957][ T8485] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 145.304978][ T8485] __do_fast_syscall_32+0x13a/0x8b0 [ 145.304994][ T8485] do_fast_syscall_32+0x32/0x70 [ 145.305006][ T8485] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 145.305021][ T8485] RIP: 0023:0xf7fc5fec [ 145.305034][ T8485] Code: Unable to access opcode bytes at 0xf7fc5fc2. [ 145.305040][ T8485] RSP: 002b:00000000f54345cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 145.305052][ T8485] RAX: ffffffffffffffda RBX: 00000000f74850bc RCX: 0000000000000081 [ 145.305060][ T8485] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 145.305068][ T8485] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 145.305076][ T8485] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 145.305083][ T8485] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 145.305099][ T8485] [ 145.641961][ T5644] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 145.838483][ T5644] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 145.838517][ T5644] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 145.845967][ T5644] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 145.845989][ T5644] usb 8-1: config 1 has no interface number 0 [ 145.846019][ T5644] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 145.846042][ T5644] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 145.846072][ T5644] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.848889][ T5644] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 145.848912][ T5644] usb 8-1: config 1 has no interface number 0 [ 145.848950][ T5644] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 145.848972][ T5644] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 145.848993][ T5644] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.852946][ T5644] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 145.852964][ T5644] usb 8-1: config 1 has no interface number 0 [ 145.852998][ T5644] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 145.853020][ T5644] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 145.853039][ T5644] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.854052][ T5644] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 145.854072][ T5644] usb 8-1: config 1 has no interface number 0 [ 145.854102][ T5644] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 145.854122][ T5644] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 145.854143][ T5644] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.855163][ T5644] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 145.855180][ T5644] usb 8-1: config 1 has no interface number 0 [ 145.855208][ T5644] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 145.855227][ T5644] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 145.855246][ T5644] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.856335][ T5644] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 145.856353][ T5644] usb 8-1: config 1 has no interface number 0 [ 145.856381][ T5644] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 145.856402][ T5644] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 145.856421][ T5644] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.857393][ T5644] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 145.857416][ T5644] usb 8-1: config 1 has no interface number 0 [ 145.857446][ T5644] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 145.857467][ T5644] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 145.857489][ T5644] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.858549][ T5644] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 145.858568][ T5644] usb 8-1: config 1 has no interface number 0 [ 145.858602][ T5644] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 145.858623][ T5644] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 145.858643][ T5644] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.860984][ T5644] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.861001][ T5644] usb 8-1: Product: syz [ 145.861015][ T5644] usb 8-1: Manufacturer: syz [ 145.861027][ T5644] usb 8-1: SerialNumber: syz [ 145.987567][ T8482] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 146.308443][ T8482] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 146.371694][ T44] audit: type=1326 audit(1792088090.147:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8493 comm="syz.2.781" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befec code=0x7ffc0000 [ 146.371741][ T44] audit: type=1326 audit(1792088090.147:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8493 comm="syz.2.781" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befec code=0x7ffc0000 [ 146.373098][ T44] audit: type=1326 audit(1792088090.147:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8493 comm="syz.2.781" exe="/syz-executor" sig=0 arch=40000003 syscall=36 compat=1 ip=0xf73befec code=0x7ffc0000 [ 146.683180][ T5644] usb 8-1: Incompatible driver and firmware versions [ 147.195956][ T44] audit: type=1326 audit(1792088090.967:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8493 comm="syz.2.781" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befec code=0x7ffc0000 [ 147.208825][ T44] audit: type=1326 audit(1792088090.987:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8493 comm="syz.2.781" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befec code=0x7ffc0000 [ 147.258598][ T44] audit: type=1326 audit(1792088091.037:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8503 comm="syz.1.783" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2fec code=0x7ffc0000 [ 147.258709][ T44] audit: type=1326 audit(1792088091.037:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8503 comm="syz.1.783" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2fec code=0x7ffc0000 [ 147.261182][ T44] audit: type=1326 audit(1792088091.037:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8503 comm="syz.1.783" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7fc2fec code=0x7ffc0000 [ 147.261257][ T44] audit: type=1326 audit(1792088091.037:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8503 comm="syz.1.783" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2fec code=0x7ffc0000 [ 147.532507][ T8510] null_blk: nullb1: using native zone append [ 148.023301][ T8510] null_blk: disk nullb1 created [ 148.038851][ T44] kauditd_printk_skb: 217 callbacks suppressed [ 148.038912][ T44] audit: type=1326 audit(1792088091.817:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8503 comm="syz.1.783" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fc2fec code=0x7ffc0000 [ 148.039695][ T44] audit: type=1326 audit(1792088091.817:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8503 comm="syz.1.783" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fc3017 code=0x7ffc0000 [ 148.040491][ T44] audit: type=1326 audit(1792088091.817:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8503 comm="syz.1.783" exe="/syz-executor" sig=0 arch=40000003 syscall=449 compat=1 ip=0xf7fc2fec code=0x7ffc0000 [ 148.049300][ T44] audit: type=1326 audit(1792088091.827:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8503 comm="syz.1.783" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fc2fec code=0x7ffc0000 [ 148.049572][ T44] audit: type=1326 audit(1792088091.827:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8503 comm="syz.1.783" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fc3017 code=0x7ffc0000 [ 148.049708][ T44] audit: type=1326 audit(1792088091.827:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8503 comm="syz.1.783" exe="/syz-executor" sig=0 arch=40000003 syscall=449 compat=1 ip=0xf7fc2fec code=0x7ffc0000 [ 148.058055][ T44] audit: type=1326 audit(1792088091.837:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8503 comm="syz.1.783" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fc2fec code=0x7ffc0000 [ 148.058246][ T44] audit: type=1326 audit(1792088091.837:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8503 comm="syz.1.783" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fc3017 code=0x7ffc0000 [ 148.058439][ T44] audit: type=1326 audit(1792088091.837:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8503 comm="syz.1.783" exe="/syz-executor" sig=0 arch=40000003 syscall=449 compat=1 ip=0xf7fc2fec code=0x7ffc0000 [ 148.067981][ T44] audit: type=1326 audit(1792088091.847:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8503 comm="syz.1.783" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fc2fec code=0x7ffc0000 [ 148.601321][ T5820] usb 8-1: USB disconnect, device number 18 [ 149.307803][ C3] net_ratelimit: 112 callbacks suppressed [ 149.649450][ T8547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.792'. [ 150.703352][ T5644] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 150.942884][ T5644] usb 8-1: Using ep0 maxpacket: 32 [ 150.953718][ T5644] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 150.974380][ T5644] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 150.974404][ T5644] usb 8-1: config 0 has no interface number 0 [ 150.987851][ T5644] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.987868][ T5644] usb 8-1: Product: syz [ 150.987881][ T5644] usb 8-1: Manufacturer: syz [ 150.987893][ T5644] usb 8-1: SerialNumber: syz [ 150.991088][ T5644] usb 8-1: config 0 descriptor?? [ 151.025882][ T5644] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 151.025945][ T5644] usb 8-1: selecting invalid altsetting 1 [ 151.025958][ T5644] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 151.058536][ T5644] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 151.059018][ T5644] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 151.059061][ T5644] usb 8-1: media controller created [ 151.225689][ T5644] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 151.608620][ T8562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.609170][ T8562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.361991][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 152.429533][ T5644] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 152.429554][ T5644] zl10353_read_register: readreg error (reg=127, ret==-110) [ 152.508103][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 152.508545][ T10] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 152.508963][ T10] usb 6-1: config 0 has no interfaces? [ 152.508989][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.510323][ T10] usb 6-1: config 0 descriptor?? [ 152.723840][ T10] usb 6-1: USB disconnect, device number 13 [ 152.889889][ T8587] overlayfs: failed to clone upperpath [ 153.652774][ T8594] ip6gre1: left promiscuous mode [ 153.652790][ T8594] ip6gre1: left allmulticast mode [ 153.785068][ T8599] 0x0000000000ec-0x0000000000f2 : "" [ 153.795471][ T8599] ftl_cs: FTL header corrupt! [ 153.830138][ T8601] netlink: 'syz.0.808': attribute type 1 has an invalid length. [ 154.077941][ T8607] netlink: 28 bytes leftover after parsing attributes in process `syz.3.810'. [ 154.244798][ T1040] usb 8-1: USB disconnect, device number 19 [ 154.408024][ T35] net_ratelimit: 170 callbacks suppressed [ 156.138114][ T8601] mmap: syz.0.808 (8601) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 156.420686][ T8626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.503807][ T8626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.777656][ T8626] ip6gre1: left promiscuous mode [ 156.777670][ T8626] ip6gre1: left allmulticast mode [ 156.818013][ T5811] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.818045][ T5811] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.818063][ T5811] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.818081][ T5811] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.072384][ T8635] fuse: fd is not a fuse device [ 157.119040][ T8633] syzkaller0: entered promiscuous mode [ 157.119049][ T8633] syzkaller0: entered allmulticast mode [ 158.238661][ T35] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 158.408178][ T35] usb 6-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 158.408963][ T35] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.408983][ T35] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 158.411889][ T35] usb 6-1: string descriptor 0 read error: -22 [ 158.411952][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.422808][ T35] etas_es58x 6-1:1.0: Starting (null) (null) (Serial Number (null)) [ 158.767465][ T1164] IPVS: starting estimator thread 0... [ 158.849360][ T8660] IPVS: using max 27 ests per chain, 64800 per kthread [ 158.878067][ T5093] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 159.065845][ T8662] rxe_eth0 speed is unknown, defaulting to 1000 [ 159.872553][ T1164] net_ratelimit: 158 callbacks suppressed [ 160.061975][ T8668] futex_wake_op: syz.3.825 tries to shift op by 144; fix this program [ 160.062090][ T8668] futex_wake_op: syz.3.825 tries to shift op by 144; fix this program [ 160.517415][ T1164] rpcbind: server 127.0.0.1 not responding, timed out [ 160.719746][ T8678] netlink: 64 bytes leftover after parsing attributes in process `syz.0.827'. [ 160.719765][ T8678] netlink: 64 bytes leftover after parsing attributes in process `syz.0.827'. [ 160.719778][ T8678] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 160.990132][ T8680] FAULT_INJECTION: forcing a failure. [ 160.990132][ T8680] name failslab, interval 1, probability 0, space 0, times 0 [ 160.990153][ T8680] CPU: 0 UID: 0 PID: 8680 Comm: syz.3.828 Tainted: G L syzkaller #0 PREEMPT(full) [ 160.990170][ T8680] Tainted: [L]=SOFTLOCKUP [ 160.990175][ T8680] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 160.990183][ T8680] Call Trace: [ 160.990187][ T8680] [ 160.990192][ T8680] dump_stack_lvl+0x100/0x190 [ 160.990212][ T8680] should_fail_ex.cold+0x5/0xa [ 160.990227][ T8680] should_failslab+0xc2/0x120 [ 160.990246][ T8680] __kmalloc_noprof+0xfc/0x840 [ 160.990263][ T8680] ? hash_ipmark4_add+0x1876/0x26a0 [ 160.990280][ T8680] hash_ipmark4_add+0x1876/0x26a0 [ 160.990301][ T8680] ? __pfx_hash_ipmark4_add+0x10/0x10 [ 160.990315][ T8680] ? __lock_acquire+0x5c0/0x1f40 [ 160.990335][ T8680] hash_ipmark4_uadt+0x704/0x950 [ 160.990347][ T8680] ? __pfx_hash_ipmark4_add+0x10/0x10 [ 160.990362][ T8680] ? __pfx_hash_ipmark4_uadt+0x10/0x10 [ 160.990378][ T8680] ? find_held_lock+0x2b/0x80 [ 160.990391][ T8680] ? is_bpf_text_address+0x8a/0x1a0 [ 160.990410][ T8680] ? is_bpf_text_address+0x8a/0x1a0 [ 160.990429][ T8680] call_ad.isra.0+0x171/0x950 [ 160.990449][ T8680] ? __pfx_call_ad.isra.0+0x10/0x10 [ 160.990471][ T8680] ? __pfx___nla_validate_parse+0x10/0x10 [ 160.990495][ T8680] ? __nla_parse+0x40/0x60 [ 160.990519][ T8680] ip_set_ad.isra.0+0x3f1/0x8b0 [ 160.990533][ T8680] ? __pfx_ip_set_ad.isra.0+0x10/0x10 [ 160.990544][ T8680] ? trace_contention_end+0x126/0x160 [ 160.990574][ T8680] ? find_held_lock+0x2b/0x80 [ 160.990608][ T8680] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 160.990632][ T8680] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 160.990661][ T8680] ? skb_release_data+0x65e/0x860 [ 160.990678][ T8680] ? kfree_skbmem+0x19f/0x210 [ 160.990709][ T8680] ? __pfx___dev_queue_xmit+0x10/0x10 [ 160.990722][ T8680] netlink_rcv_skb+0x159/0x420 [ 160.990735][ T8680] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 160.990751][ T8680] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 160.990770][ T8680] ? ns_capable+0xd2/0xf0 [ 160.990788][ T8680] nfnetlink_rcv+0x1b3/0x440 [ 160.990803][ T8680] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 160.990818][ T8680] ? netlink_deliver_tap+0x1ae/0xcc0 [ 160.990832][ T8680] netlink_unicast+0x65f/0x950 [ 160.990846][ T8680] ? __pfx_netlink_unicast+0x10/0x10 [ 160.990858][ T8680] ? aa_sk_perm+0x389/0xab0 [ 160.990875][ T8680] netlink_sendmsg+0x8b0/0xda0 [ 160.990890][ T8680] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.990904][ T8680] ? apparmor_socket_sendmsg+0x165/0x280 [ 160.990922][ T8680] ____sys_sendmsg+0xa4d/0xbe0 [ 160.990956][ T8680] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.990977][ T8680] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.991017][ T8680] ___sys_sendmsg+0x190/0x1e0 [ 160.991048][ T8680] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.991068][ T8680] ? futex_wait+0x11e/0x370 [ 160.991090][ T8680] ? find_held_lock+0x2b/0x80 [ 160.991112][ T8680] __sys_sendmsg+0x160/0x210 [ 160.991126][ T8680] ? __pfx___sys_sendmsg+0x10/0x10 [ 160.991148][ T8680] __do_fast_syscall_32+0x13a/0x8b0 [ 160.991162][ T8680] do_fast_syscall_32+0x32/0x70 [ 160.991174][ T8680] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 160.991189][ T8680] RIP: 0023:0xf746efec [ 160.991203][ T8680] Code: Unable to access opcode bytes at 0xf746efc2. [ 160.991209][ T8680] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 160.991220][ T8680] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000300 [ 160.991228][ T8680] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 160.991234][ T8680] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 160.991241][ T8680] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 160.991248][ T8680] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 160.991262][ T8680] [ 161.168214][ T5820] usb 6-1: USB disconnect, device number 14 [ 161.516330][ T8699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.833'. [ 161.745316][ T8701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.834'. [ 164.444839][ T8732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.842'. [ 164.493777][ T8734] 0x0000000000ec-0x0000000000f2 : "" [ 164.501420][ T8734] ftl_cs: FTL header corrupt! [ 164.599696][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.843'. [ 164.990603][ T74] net_ratelimit: 84 callbacks suppressed [ 165.123679][ T44] kauditd_printk_skb: 140 callbacks suppressed [ 165.123693][ T44] audit: type=1326 audit(1792088109.895:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8749 comm="syz.3.845" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 165.123878][ T44] audit: type=1326 audit(1792088109.895:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8749 comm="syz.3.845" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 165.126737][ T44] audit: type=1326 audit(1792088109.895:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8749 comm="syz.3.845" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf746efec code=0x7ffc0000 [ 165.126945][ T44] audit: type=1326 audit(1792088109.895:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8749 comm="syz.3.845" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 165.127126][ T44] audit: type=1326 audit(1792088109.895:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8749 comm="syz.3.845" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 165.131270][ T44] audit: type=1326 audit(1792088109.895:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8749 comm="syz.3.845" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf746efec code=0x7ffc0000 [ 165.131311][ T44] audit: type=1326 audit(1792088109.905:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8749 comm="syz.3.845" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 165.131352][ T44] audit: type=1326 audit(1792088109.905:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8749 comm="syz.3.845" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 165.138000][ T44] audit: type=1326 audit(1792088109.905:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8749 comm="syz.3.845" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf746efec code=0x7ffc0000 [ 165.138043][ T44] audit: type=1326 audit(1792088109.905:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8749 comm="syz.3.845" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf746efec code=0x7ffc0000 [ 165.147932][ T5093] Bluetooth: hci2: command 0x0406 tx timeout [ 165.149505][ T5093] Bluetooth: hci0: command 0x0401 tx timeout [ 166.392744][ T8781] hsr0: entered allmulticast mode [ 166.392765][ T8781] hsr_slave_0: entered allmulticast mode [ 166.392782][ T8781] hsr_slave_1: entered allmulticast mode [ 166.393323][ T8780] hsr0: left allmulticast mode [ 166.393340][ T8780] hsr_slave_0: left allmulticast mode [ 166.393388][ T8780] hsr_slave_1: left allmulticast mode [ 166.542826][ T8788] Invalid ELF header magic: != ELF [ 166.908436][ C2] ipvlan_process_outbound: 4 callbacks suppressed [ 166.994624][ T8795] CIFS: Attempting to mount //127.0.0.1/share [ 167.656492][ T8795] CIFS: VFS: Error connecting to socket. Aborting operation. [ 167.656624][ T8795] CIFS: VFS: cifs_mount failed w/return code = -4 [ 168.208849][ T5820] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 168.357814][ T5820] usb 6-1: Using ep0 maxpacket: 16 [ 168.358570][ T5820] usb 6-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 168.359701][ T5820] usb 6-1: config 4 has an invalid interface number: 51 but max is 0 [ 168.359714][ T5820] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 168.359724][ T5820] usb 6-1: config 4 has no interface number 0 [ 168.359741][ T5820] usb 6-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 168.359754][ T5820] usb 6-1: config 4 interface 51 has no altsetting 0 [ 168.361783][ T5820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.361793][ T5820] usb 6-1: Product: syz [ 168.361800][ T5820] usb 6-1: Manufacturer: syz [ 168.361808][ T5820] usb 6-1: SerialNumber: syz [ 168.366117][ T5820] cdc_eem 6-1:4.51: probe with driver cdc_eem failed with error -22 [ 169.552882][ T8826] 0x0000000000ec-0x0000000000f2 : "" [ 169.571162][ T8826] ftl_cs: FTL header corrupt! [ 169.656176][ T5820] usb 6-1: USB disconnect, device number 15 [ 169.671739][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.862'. [ 170.107981][ T1164] net_ratelimit: 199 callbacks suppressed [ 170.381493][ T8840] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 170.407838][ T8834] kvm: pic: non byte read [ 170.409392][ T8834] kvm: pic: level sensitive irq not supported [ 170.409830][ T8834] kvm: pic: non byte read [ 170.412430][ T8834] kvm: pic: level sensitive irq not supported [ 170.412808][ T8834] kvm: pic: non byte read [ 170.415428][ T8834] kvm: pic: level sensitive irq not supported [ 170.415698][ T8834] kvm: pic: non byte read [ 170.422244][ T8844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.507980][ T8845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.593813][ T8844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.572559][ T8850] futex_wake_op: syz.1.867 tries to shift op by 144; fix this program [ 171.572633][ T8850] futex_wake_op: syz.1.867 tries to shift op by 144; fix this program [ 171.826314][ T8864] netlink: 24 bytes leftover after parsing attributes in process `syz.0.873'. [ 171.847243][ T8864] veth0_macvtap: left promiscuous mode [ 172.237041][ T74] IPVS: starting estimator thread 0... [ 172.282833][ T5447] veth0_macvtap: entered promiscuous mode [ 172.326888][ T8875] IPVS: using max 23 ests per chain, 55200 per kthread [ 172.727016][ T8878] rxe_eth0 speed is unknown, defaulting to 1000 [ 172.791168][ T8884] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 172.842845][ T8884] kvm: pic: non byte read [ 172.853064][ T8884] kvm: pic: level sensitive irq not supported [ 172.854378][ T8884] kvm: pic: non byte read [ 172.867765][ T8884] kvm: pic: level sensitive irq not supported [ 172.868178][ T8884] kvm: pic: non byte read [ 172.874080][ T8884] kvm: pic: level sensitive irq not supported [ 172.874355][ T8884] kvm: pic: non byte read [ 173.725505][ T8899] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.726030][ T8899] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.283322][ T8899] vxlan1: left promiscuous mode [ 174.424897][ T8912] futex_wake_op: syz.2.881 tries to shift op by 144; fix this program [ 174.425069][ T8912] futex_wake_op: syz.2.881 tries to shift op by 144; fix this program [ 174.508718][ T5837] netdevsim netdevsim10 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.508737][ T5837] netdevsim netdevsim10 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.508757][ T5837] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.508771][ T5837] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.508788][ T5837] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.508802][ T5837] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.508819][ T5837] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.508837][ T5837] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.508865][ T5837] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.508888][ T5837] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.639591][ T8926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.725158][ T8931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.810400][ T8926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.235522][ T8941] net_ratelimit: 165 callbacks suppressed [ 176.250195][ T8963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.349538][ T8967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.409222][ T8963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.266017][ T8979] mac80211_hwsim hwsim4 ..ãc¤±: renamed from wlan1 [ 177.318007][ T8981] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.318520][ T8981] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.402952][ T8981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.409310][ T8981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.558980][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.559003][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.559021][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.559038][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.589693][ T8992] netlink: 16 bytes leftover after parsing attributes in process `syz.1.896'. [ 177.837811][ T43] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 178.018753][ T43] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 178.019905][ T43] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 178.019928][ T43] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 178.019945][ T43] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 178.020104][ T43] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 178.020126][ T43] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 178.021807][ T43] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 178.021823][ T43] usb 6-1: Product: syz [ 178.021835][ T43] usb 6-1: Manufacturer: syz [ 178.025988][ T43] cdc_wdm 6-1:1.0: skipping garbage [ 178.025995][ T43] cdc_wdm 6-1:1.0: skipping garbage [ 178.035148][ T43] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 178.035164][ T43] cdc_wdm 6-1:1.0: Unknown control protocol [ 178.299602][ T9000] CIFS: Attempting to mount //127.0.0.1/share [ 178.301406][ T9000] CIFS: VFS: Error connecting to socket. Aborting operation. [ 178.301440][ T9000] CIFS: VFS: cifs_mount failed w/return code = -101 [ 178.634700][ T9006] tps6598x 1-0003: failed to read vendor ID: -5, vid: 0x0 [ 178.644312][ T9006] i2c i2c-1: new_device: Instantiated device tps6598x at 0x03 [ 180.624745][ T35] usb 6-1: USB disconnect, device number 16 [ 181.607977][ T5447] net_ratelimit: 87 callbacks suppressed [ 182.559894][ T9073] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 182.559908][ T9073] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 182.561043][ T9073] vhci_hcd vhci_hcd.0: Device attached [ 183.065972][ T43] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 183.149420][ T43] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 183.335455][ T9074] vhci_hcd: connection reset by peer [ 183.338050][ T12] vhci_hcd vhci_hcd.0: stop threads [ 183.338604][ T12] vhci_hcd vhci_hcd.0: release socket [ 183.341154][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 183.547806][ T35] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 183.728554][ T35] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 183.729536][ T35] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.729554][ T35] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 183.729596][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.616653][ T9107] jffs2: notice: (9107) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 184.874335][ T9115] rxe_eth0 speed is unknown, defaulting to 1000 [ 185.613340][ T9135] 0x0000000000ec-0x0000000000f2 : "" [ 185.626488][ T9135] ftl_cs: FTL header corrupt! [ 185.726869][ T9144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.922'. [ 186.390560][ T5644] usb 6-1: USB disconnect, device number 17 [ 186.620739][ T9159] team0: Port device bridge0 removed [ 186.620939][ T9159] net_ratelimit: 127 callbacks suppressed [ 186.620946][ T9159] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 186.625552][ T9159] team0: Device xfrm0 is of different type [ 186.635716][ T9159] tipc: Enabled bearer , priority 0 [ 186.680505][ T9157] netlink: 'syz.2.926': attribute type 12 has an invalid length. [ 187.402251][ T9169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.929'. [ 187.740592][ T9172] random: crng reseeded on system resumption [ 187.751628][ T5644] tipc: Node number set to 352331660 [ 188.110602][ T9189] loop8: detected capacity change from 0 to 16384 [ 188.263060][ T43] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 188.321044][ T9193] binder: 9185:9193 ioctl 84009422 80000500 returned -22 [ 188.323413][ T9193] binder: 9185:9193 ioctl 50009403 80000900 returned -22 [ 188.347659][ T9186] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 188.347676][ T9186] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 188.347877][ T9186] vhci_hcd vhci_hcd.0: Device attached [ 188.466570][ T9191] loop8: detected capacity change from 16384 to 16383 [ 188.527873][ T5644] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 188.590837][ T5644] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 188.850200][ T9194] vhci_hcd: connection reset by peer [ 188.852016][ T12] vhci_hcd vhci_hcd.3: stop threads [ 188.852030][ T12] vhci_hcd vhci_hcd.3: release socket [ 188.852524][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 188.924998][ T9198] fuse: Bad value for 'fd' ** 3609 printk messages dropped ** [ 189.735874][ T44] kauditd_printk_skb: 529 callbacks suppressed [ 189.736344][ T44] audit: type=1326 audit(1792088134.495:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.3.937" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 189.738607][ T44] audit: type=1326 audit(1792088134.495:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.3.937" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 189.738649][ T44] audit: type=1326 audit(1792088134.495:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.3.937" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf746efec code=0x7ffc0000 [ 189.738684][ T44] audit: type=1326 audit(1792088134.495:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.3.937" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 189.738718][ T44] audit: type=1326 audit(1792088134.495:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.3.937" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 189.738752][ T44] audit: type=1326 audit(1792088134.505:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.3.937" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71c77eb code=0x7ffc0000 [ 189.738788][ T44] audit: type=1326 audit(1792088134.505:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.3.937" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71c77eb code=0x7ffc0000 [ 189.738826][ T44] audit: type=1326 audit(1792088134.505:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.3.937" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 189.738864][ T44] audit: type=1326 audit(1792088134.505:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.3.937" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 189.738908][ T44] audit: type=1326 audit(1792088134.505:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.3.937" exe="/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf746efec code=0x7ffc0000 [ 190.185769][ T9211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.940'. [ 190.915250][ T9231] CIFS: Attempting to mount //127.0.0.1/share [ 190.915521][ T9231] CIFS: VFS: Error connecting to socket. Aborting operation. [ 190.915541][ T9231] CIFS: VFS: cifs_mount failed w/return code = -101 [ 191.209434][ T9234] VFS: Warning: syz.0.945 using old stat() call. Recompile your binary. [ 191.433475][ T9240] Invalid ELF header magic: != ELF [ 191.440466][ T9240] overlay: Unknown parameter '/' [ 191.869015][ T62] net_ratelimit: 70 callbacks suppressed [ 193.319508][ T9270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.950'. [ 193.710314][ T5644] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 193.728462][ T9280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.953'. [ 193.790562][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.919236][ T9312] 0x0000000000ec-0x0000000000f2 : "" [ 195.954534][ T9312] ftl_cs: FTL header corrupt! [ 196.031956][ T9317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.962'. [ 196.827655][ T9331] netlink: 'syz.0.965': attribute type 10 has an invalid length. [ 196.832375][ T9331] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 196.834596][ T9331] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 196.848130][ T9331] netlink: 14 bytes leftover after parsing attributes in process `syz.0.965'. [ 196.859427][ T9331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.862804][ T9331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.865972][ T9331] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 196.869556][ T9331] bond0 (unregistering): Released all slaves [ 196.905111][ T9332] syz.0.965: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 196.905462][ T9332] CPU: 2 UID: 0 PID: 9332 Comm: syz.0.965 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.905492][ T9332] Tainted: [L]=SOFTLOCKUP [ 196.905499][ T9332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 196.905512][ T9332] Call Trace: [ 196.905518][ T9332] [ 196.905526][ T9332] dump_stack_lvl+0x100/0x190 [ 196.905557][ T9332] warn_alloc.cold+0x9e/0xb2 [ 196.905579][ T9332] ? __pfx_warn_alloc+0x10/0x10 [ 196.905601][ T9332] ? pointer+0x39c/0xe50 [ 196.905634][ T9332] ? __bfs+0x150/0x2a0 [ 196.905658][ T9332] ? __bfs+0x150/0x2a0 [ 196.905690][ T9332] __vmalloc_node_range_noprof+0x123b/0x1420 [ 196.905727][ T9332] ? check_noncircular+0x97/0x160 [ 196.905755][ T9332] ? do_replace+0x1c6/0x490 [ 196.905782][ T9332] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 196.905814][ T9332] ? __lock_acquire+0x5c0/0x1f40 [ 196.905847][ T9332] ? __lock_acquire+0x5c0/0x1f40 [ 196.905880][ T9332] ? do_replace+0x1c6/0x490 [ 196.905902][ T9332] __vmalloc_node_noprof+0xad/0xf0 [ 196.905932][ T9332] ? do_replace+0x1c6/0x490 [ 196.905957][ T9332] __vmalloc_noprof+0xa3/0x120 [ 196.905974][ T9332] ? __pfx___vmalloc_noprof+0x10/0x10 [ 196.906000][ T9332] do_replace+0x1c6/0x490 [ 196.906023][ T9332] ? __pfx_do_replace+0x10/0x10 [ 196.906054][ T9332] ? register_lock_class+0x3f/0x7b0 [ 196.906087][ T9332] compat_do_replace+0x589/0x7a0 [ 196.906113][ T9332] ? __pfx_compat_do_replace+0x10/0x10 [ 196.906152][ T9332] ? bpf_lsm_capable+0x9/0x10 [ 196.906172][ T9332] ? security_capable+0x80/0x260 [ 196.906205][ T9332] do_ebt_set_ctl+0x3f4/0x4a0 [ 196.906231][ T9332] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 196.906256][ T9332] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 196.906273][ T9332] ? futex_wake+0x4ea/0x5e0 [ 196.906302][ T9332] ? nf_sockopt_find.isra.0+0x222/0x290 [ 196.906330][ T9332] nf_setsockopt+0x8d/0xf0 [ 196.906354][ T9332] ip_setsockopt+0xcb/0xf0 [ 196.906374][ T9332] tcp_setsockopt+0xa7/0x100 [ 196.906399][ T9332] smc_setsockopt+0x1b6/0xa40 [ 196.906422][ T9332] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 196.906452][ T9332] ? __pfx_smc_setsockopt+0x10/0x10 [ 196.906479][ T9332] ? aa_sock_opt_perm+0x114/0x1e0 [ 196.906508][ T9332] ? __pfx_smc_setsockopt+0x10/0x10 [ 196.906535][ T9332] do_sock_setsockopt+0xf3/0x1d0 [ 196.906563][ T9332] __sys_setsockopt+0x119/0x190 [ 196.906590][ T9332] __ia32_sys_setsockopt+0xbc/0x160 [ 196.906611][ T9332] ? __do_fast_syscall_32+0xb3/0x8b0 [ 196.906631][ T9332] ? lockdep_hardirqs_on+0x7d/0x110 [ 196.906660][ T9332] __do_fast_syscall_32+0x13a/0x8b0 [ 196.906682][ T9332] do_fast_syscall_32+0x32/0x70 [ 196.906702][ T9332] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 196.906725][ T9332] RIP: 0023:0xf7fc5fec [ 196.906746][ T9332] Code: Unable to access opcode bytes at 0xf7fc5fc2. [ 196.906755][ T9332] RSP: 002b:00000000f545550c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 196.906772][ T9332] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000000 [ 196.906785][ T9332] RDX: 0000000000000080 RSI: 0000000080000400 RDI: 0000000000000108 [ 196.906798][ T9332] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 196.906810][ T9332] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 196.906822][ T9332] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 196.906853][ T9332] [ 196.906902][ T9332] Mem-Info: [ 196.906912][ T9332] active_anon:8369 inactive_anon:6273 isolated_anon:0 [ 196.906912][ T9332] active_file:3407 inactive_file:40477 isolated_file:0 [ 196.906912][ T9332] unevictable:1000 dirty:480 writeback:0 [ 196.906912][ T9332] slab_reclaimable:7472 slab_unreclaimable:56791 [ 196.906912][ T9332] mapped:26693 shmem:10482 pagetables:1085 [ 196.906912][ T9332] sec_pagetables:298 bounce:0 [ 196.906912][ T9332] kernel_misc_reclaimable:0 [ 196.906912][ T9332] free:22568 free_pcp:12033 free_cma:0 [ 196.907002][ T9332] Node 0 active_anon:36kB inactive_anon:248kB active_file:284kB inactive_file:0kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:172kB dirty:8kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7552kB pagetables:1132kB sec_pagetables:1100kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 196.907094][ T9332] Node 1 active_anon:33440kB inactive_anon:24844kB active_file:13344kB inactive_file:161908kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:106600kB dirty:1912kB writeback:0kB shmem:39928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6280kB pagetables:3208kB sec_pagetables:92kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 196.907181][ T9332] Node 0 DMA free:3076kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:0kB free_cma:0kB [ 196.907288][ T9332] lowmem_reserve[]: 0 259 259 259 259 [ 196.917565][ T9332] Node 0 DMA32 free:17736kB boost:4096kB min:15800kB low:18724kB high:21648kB reserved_highatomic:0kB free_highatomic:0kB active_anon:36kB inactive_anon:248kB active_file:284kB inactive_file:0kB unevictable:2000kB writepending:8kB zspages:0kB present:1032196kB managed:265356kB mlocked:0kB bounce:0kB free_pcp:10008kB local_pcp:2352kB free_cma:0kB [ 196.925752][ T9332] lowmem_reserve[]: 0 0 0 0 0 [ 196.925793][ T9332] Node 1 DMA32 free:69460kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:33440kB inactive_anon:24844kB active_file:13344kB inactive_file:161908kB unevictable:2000kB writepending:1912kB zspages:1720kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:38408kB local_pcp:12772kB free_cma:0kB [ 196.925850][ T9332] lowmem_reserve[]: 0 0 0 0 0 [ 196.925882][ T9332] Node 0 DMA: 105*4kB (U) 16*8kB (U) 18*16kB (U) 36*32kB (U) 7*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 3076kB [ 196.926043][ T9332] Node 0 DMA32: 2*4kB (UE) 114*8kB (UE) 7*16kB (UME) 114*32kB (UE) 24*64kB (UME) 4*128kB (UE) 5*256kB (M) 3*512kB (M) 2*1024kB (M) 1*2048kB (M) 1*4096kB (U) = 17736kB [ 196.926188][ T9332] Node 1 DMA32: 23*4kB (U) 48*8kB (UE) 1*16kB (M) 41*32kB (UME) 67*64kB (UME) 57*128kB (ME) 31*256kB (UME) 18*512kB (UME) 12*1024kB (UME) 9*2048kB (UM) 2*4096kB (UM) = 69452kB [ 196.926336][ T9332] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 196.926351][ T9332] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 196.926367][ T9332] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 196.926382][ T9332] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 196.926397][ T9332] 55311 total pagecache pages [ 196.926406][ T9332] 949 pages in swap cache [ 196.926413][ T9332] Free swap = 118612kB [ 196.926420][ T9332] Total swap = 124996kB [ 196.926427][ T9332] 524155 pages RAM [ 196.926435][ T9332] 0 pages HighMem/MovableOnly [ 196.926442][ T9332] 216924 pages reserved [ 196.926449][ T9332] 0 pages cma reserved [ 197.295989][ T9327] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 197.364139][ T9336] netlink: 40 bytes leftover after parsing attributes in process `syz.0.967'. [ 197.365376][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.967'. [ 197.365390][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.967'. [ 197.565309][ T9345] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 197.628082][ T38] net_ratelimit: 89 callbacks suppressed [ 199.307857][ T5747] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 199.308112][ T5747] Bluetooth: hci0: command 0x0401 tx timeout [ 199.477033][ T9377] netlink: 28 bytes leftover after parsing attributes in process `syz.2.975'. ** 7582 printk messages dropped ** ** 152 printk messages dropped ** ** 1361 printk messages dropped ** ** 658 printk messages dropped ** ** 116 printk messages dropped ** ** 236 printk messages dropped ** ** 532 printk messages dropped ** ** 179 printk messages dropped ** ** 250 printk messages dropped ** ** 221 printk messages dropped ** ** 206 printk messages dropped ** ** 194 printk messages dropped ** ** 212 printk messages dropped ** ** 521 printk messages dropped ** ** 1706 printk messages dropped ** ** 752 printk messages dropped ** ** 176 printk messages dropped ** ** 167 printk messages dropped ** ** 173 printk messages dropped ** ** 161 printk messages dropped ** ** 164 printk messages dropped ** ** 164 printk messages dropped ** ** 158 printk messages dropped ** ** 165 printk messages dropped ** ** 176 printk messages dropped ** ** 170 printk messages dropped ** ** 164 printk messages dropped ** ** 185 printk messages dropped ** ** 170 printk messages dropped ** ** 161 printk messages dropped ** [ 201.363696][ T9402] 0x0000000000ec-0x0000000000f2 : "" [ 201.467853][ T9406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.981'. [ 201.477063][ T9402] ftl_cs: FTL header corrupt! [ 203.388110][ T37] net_ratelimit: 35 callbacks suppressed [ 204.075184][ T44] kauditd_printk_skb: 26 callbacks suppressed [ 204.075289][ T44] audit: type=1326 audit(1792088148.815:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9432 comm="syz.1.988" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2fec code=0x7ffc0000 [ 204.076065][ T44] audit: type=1326 audit(1792088148.815:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9432 comm="syz.1.988" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2fec code=0x7ffc0000 [ 204.076847][ T44] audit: type=1326 audit(1792088148.815:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9432 comm="syz.1.988" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71b77eb code=0x7ffc0000 [ 204.077927][ T44] audit: type=1326 audit(1792088148.815:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9432 comm="syz.1.988" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2fec code=0x7ffc0000 [ 204.078715][ T44] audit: type=1326 audit(1792088148.815:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9432 comm="syz.1.988" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2fec code=0x7ffc0000 [ 204.078820][ T44] audit: type=1326 audit(1792088148.815:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9432 comm="syz.1.988" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc2fec code=0x7ffc0000 [ 204.079406][ T44] audit: type=1326 audit(1792088148.815:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9432 comm="syz.1.988" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2fec code=0x7ffc0000 [ 204.079576][ T44] audit: type=1326 audit(1792088148.815:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9432 comm="syz.1.988" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2fec code=0x7ffc0000 [ 204.079983][ T44] audit: type=1326 audit(1792088148.815:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9432 comm="syz.1.988" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fc2fec code=0x7ffc0000 [ 204.080425][ T44] audit: type=1326 audit(1792088148.815:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9432 comm="syz.1.988" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2fec code=0x7ffc0000 [ 205.968629][ T9466] Invalid ELF header magic: != ELF [ 205.981668][ T9466] overlay: Unknown parameter '/' [ 206.402297][ T9470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.994'. [ 206.901681][ T9474] 0x0000000000ec-0x0000000000f2 : "" [ 206.914671][ T9474] ftl_cs: FTL header corrupt! [ 207.011976][ T9474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.996'. [ 207.192494][ T9487] fuse: Unknown parameter '00000000000000000000' [ 207.809376][ T38] IPVS: starting estimator thread 0... [ 207.898145][ T9502] IPVS: using max 43 ests per chain, 103200 per kthread [ 208.507909][ T38] net_ratelimit: 47 callbacks suppressed [ 209.619642][ T9516] netlink: 'syz.3.1004': attribute type 1 has an invalid length. [ 209.619653][ T9516] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1004'. [ 209.619661][ T9516] netlink: 'syz.3.1004': attribute type 2 has an invalid length. [ 209.619668][ T9516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1004'. [ 209.701457][ T9518] null_blk: my_zoned_dev: using native zone append [ 209.729009][ T9518] null_blk: disk my_zoned_dev created [ 210.130819][ T9527] rxe_eth0 speed is unknown, defaulting to 1000 [ 210.145456][ T9529] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1006'. [ 210.484871][ T9534] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1007'. [ 210.597920][ T9536] all (unregistering): Released all slaves [ 210.943817][ T9550] netlink: 'syz.1.1011': attribute type 10 has an invalid length. [ 210.943829][ T9550] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1011'. [ 211.093337][ T9555] 0x0000000000ec-0x0000000000f2 : "" [ 211.123479][ T9555] ftl_cs: FTL header corrupt! [ 211.224883][ T9555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1012'. [ 211.338680][ T9560] random: crng reseeded on system resumption [ 211.347481][ T9563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1014'. [ 211.399679][ T9563] ovs-dp0: entered promiscuous mode [ 211.489138][ T9563] ovs-dp0: left promiscuous mode ** 8211 printk messages dropped ** [ 212.426173][ T9575] kernel profiling enabled (shift: 17) [ 212.426712][ T9575] binder_alloc: 9574: binder_alloc_buf, no vma [ 212.481469][ T9577] overlay: ./file1 is not a directory [ 212.487102][ T44] kauditd_printk_skb: 27 callbacks suppressed [ 212.487112][ T44] audit: type=1800 audit(1792088157.255:1023): pid=9577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1018" name="bus" dev="9p" ino=71827925 res=0 errno=0 [ 213.550057][ T38] net_ratelimit: 67 callbacks suppressed [ 213.882635][ T9606] 9p: Bad value for 'version' [ 214.083978][ T9608] sctp: [Deprecated]: syz.0.1025 (pid 9608) Use of struct sctp_assoc_value in delayed_ack socket option. [ 214.083978][ T9608] Use struct sctp_sack_info instead [ 214.368109][ T9614] Bluetooth: MGMT ver 1.23 [ 214.807318][ T9628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1030'. [ 216.335852][ T9643] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.494251][ T9643] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 216.494279][ T9643] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.596343][ T9643] veth1_vlan: left promiscuous mode [ 216.599994][ T9643] veth0_vlan: left promiscuous mode [ 216.600775][ T9643] veth0_vlan: entered promiscuous mode [ 216.612339][ T9643] veth1_vlan: entered promiscuous mode [ 216.649381][ T9643] veth1_macvtap: left promiscuous mode [ 216.650837][ T9643] veth1_macvtap: entered promiscuous mode [ 216.690049][ T9643] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 216.690762][ T9643] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 216.693215][ T9643] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 216.694038][ T9643] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 216.695325][ T9643] 8021q: adding VLAN 0 to HW filter on device eth0 [ 216.701278][ T9643] 8021q: adding VLAN 0 to HW filter on device eth1 [ 216.745637][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.745678][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.746875][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.746915][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.889680][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.889699][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.889719][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.889733][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.889750][ T12] netdevsim netdevsim12 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.889769][ T12] netdevsim netdevsim12 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.889787][ T12] netdevsim netdevsim10 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.889800][ T12] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.889817][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.889831][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.889848][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.889862][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.967916][ T9661] 0x0000000000ec-0x0000000000f2 : "" [ 217.189244][ T44] audit: type=1800 audit(1792088161.965:1024): pid=9667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1038" name="file0" dev="overlay" ino=1455 res=0 errno=0 [ 217.237276][ T9668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1039'. [ 217.310779][ T9661] ftl_cs: FTL header corrupt! [ 218.071222][ T9658] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 218.071234][ T9658] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 218.747853][ T38] net_ratelimit: 124 callbacks suppressed [ 220.620368][ T9695] futex_wake_op: syz.1.1045 tries to shift op by 144; fix this program [ 222.778186][ T9717] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1048'. ** 24368 printk messages dropped ** ** 62 printk messages dropped ** ** 59 printk messages dropped ** ** 59 printk messages dropped ** ** 64 printk messages dropped ** ** 60 printk messages dropped ** ** 116 printk messages dropped ** ** 29 printk messages dropped ** ** 54 printk messages dropped ** ** 61 printk messages dropped ** ** 68 printk messages dropped ** ** 75 printk messages dropped ** ** 60 printk messages dropped ** ** 62 printk messages dropped ** ** 64 printk messages dropped ** ** 73 printk messages dropped ** ** 65 printk messages dropped ** ** 70 printk messages dropped ** ** 70 printk messages dropped ** ** 37 printk messages dropped ** ** 56 printk messages dropped ** ** 64 printk messages dropped ** ** 76 printk messages dropped ** ** 56 printk messages dropped ** ** 55 printk messages dropped ** ** 62 printk messages dropped ** ** 56 printk messages dropped ** ** 60 printk messages dropped ** ** 61 printk messages dropped ** ** 55 printk messages dropped ** ** 58 printk messages dropped ** ** 63 printk messages dropped ** ** 64 printk messages dropped ** ** 61 printk messages dropped ** ** 35 printk messages dropped ** ** 52 printk messages dropped ** ** 62 printk messages dropped ** ** 55 printk messages dropped ** ** 56 printk messages dropped ** ** 57 printk messages dropped ** ** 57 printk messages dropped ** ** 65 printk messages dropped ** ** 56 printk messages dropped ** ** 64 printk messages dropped ** ** 55 printk messages dropped ** ** 60 printk messages dropped ** ** 65 printk messages dropped ** ** 77 printk messages dropped ** ** 60 printk messages dropped ** ** 34 printk messages dropped ** ** 75 printk messages dropped ** ** 61 printk messages dropped ** ** 75 printk messages dropped ** ** 68 printk messages dropped ** ** 62 printk messages dropped ** ** 56 printk messages dropped ** ** 69 printk messages dropped ** ** 76 printk messages dropped ** ** 77 printk messages dropped ** ** 55 printk messages dropped ** ** 44 printk messages dropped ** ** 48 printk messages dropped ** ** 43 printk messages dropped ** ** 50 printk messages dropped ** ** 41 printk messages dropped ** ** 53 printk messages dropped ** ** 54 printk messages dropped ** ** 59 printk messages dropped ** ** 60 printk messages dropped ** ** 55 printk messages dropped ** ** 56 printk messages dropped ** ** 55 printk messages dropped ** ** 54 printk messages dropped ** ** 44 printk messages dropped ** ** 41 printk messages dropped ** ** 44 printk messages dropped ** ** 62 printk messages dropped ** ** 56 printk messages dropped ** ** 56 printk messages dropped ** ** 54 printk messages dropped ** ** 57 printk messages dropped ** ** 59 printk messages dropped ** ** 46 printk messages dropped ** ** 54 printk messages dropped ** ** 57 printk messages dropped ** ** 11 printk messages dropped ** [ 224.491928][ T9733] 0x0000000000ec-0x0000000000f2 : "" [ 224.508809][ T38] net_ratelimit: 105 callbacks suppressed [ 224.540691][ T9733] ftl_cs: FTL header corrupt! [ 224.768643][ T9737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1053'. [ 225.593489][ T9749] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input14 [ 225.704726][ T9749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1055'. [ 225.707666][ T9749] syz_tun: left allmulticast mode [ 225.707687][ T9749] syz_tun: left promiscuous mode [ 225.708394][ T9749] bridge0: port 3(syz_tun) entered disabled state [ 226.006718][ T9749] bridge_slave_1: left allmulticast mode [ 226.006736][ T9749] bridge_slave_1: left promiscuous mode [ 226.006915][ T9749] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.020462][ T9749] bridge_slave_0: left allmulticast mode [ 226.020480][ T9749] bridge_slave_0: left promiscuous mode [ 226.022962][ T9749] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.060789][ T9756] block device autoloading is deprecated and will be removed. [ 227.037865][ T6035] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 227.198709][ T6035] usb 8-1: not running at top speed; connect to a high speed hub [ 227.198725][ T6035] usb 8-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 227.199625][ T6035] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 227.199637][ T6035] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.199670][ T6035] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 227.199819][ T6035] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.538024][ T9778] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1061'. [ 227.561654][ T6035] usb 8-1: string descriptor 0 read error: -71 [ 227.561715][ T6035] uvcvideo 8-1:1.0: Found UVC 1.00 device (046d:0825) [ 227.561729][ T6035] uvcvideo 8-1:1.0: No valid video chain found. [ 227.564555][ T6035] usb 8-1: USB disconnect, device number 20 [ 228.134477][ T9788] 0x0000000000ec-0x0000000000f2 : "" [ 228.150771][ T9788] ftl_cs: FTL header corrupt! [ 228.183334][ T9785] pci_bus 0000:01: busn_res: [bus 01] is released [ 228.209095][ T9786] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 228.213085][ T9790] jffs2: notice: (9790) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 228.228910][ T9786] pci 0000:00:02.0: BAR 0 [mem 0x80040000-0x8005ffff] [ 228.228971][ T9786] pci 0000:00:02.0: BAR 1 [mem 0x80060000-0x8007ffff] [ 228.229026][ T9786] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f] [ 228.229080][ T9786] pci 0000:00:02.0: BAR 3 [mem 0x80080000-0x80083fff] [ 228.229219][ T9786] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 228.229523][ T9786] pci 0000:00:02.0: enabling Extended Tags [ 228.248553][ T9788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1064'. [ 228.272194][ T9786] pci 0000:00:02.0: Adding to iommu group 2 [ 228.284099][ T9786] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 228.292265][ T9786] pci 0000:00:04.0: PCI bridge to [bus 01] [ 228.292454][ T9786] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 228.292584][ T9786] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 228.294465][ T9786] pci 0000:00:04.0: bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 228.295065][ T9786] pci 0000:00:04.0: enabling Extended Tags [ 228.338581][ T9786] pci 0000:00:04.0: Adding to iommu group 4 [ 228.359246][ T9786] pci 0000:00:04.0: PCI bridge to [bus 01] [ 228.363621][ T9786] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 228.363670][ T9786] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 228.365208][ T9786] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff]: assigned [ 228.365241][ T9786] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 228.365269][ T9786] pci 0000:00:02.0: ROM [mem 0x80200000-0x8023ffff pref]: assigned [ 228.365295][ T9786] pci 0000:00:02.0: BAR 0 [mem 0x80240000-0x8025ffff]: assigned [ 228.366967][ T9786] pci 0000:00:02.0: BAR 1 [mem 0x80260000-0x8027ffff]: assigned [ 228.369418][ T9786] pci 0000:00:02.0: BAR 3 [mem 0x80280000-0x80283fff]: assigned [ 228.370695][ T9786] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 228.370725][ T9786] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 228.371120][ T9786] pci 0000:00:04.0: PCI bridge to [bus 01] [ 228.371211][ T9786] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 228.373417][ T9786] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff] [ 228.374938][ T9786] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 228.435436][ T9786] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 228.529871][ T9786] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 228.619758][ T9786] e1000e 0000:00:02.0 eth1: (PCI Express:2.5GT/s:Width x1) 52:54:00:12:34:56 [ 228.619773][ T9786] e1000e 0000:00:02.0 eth1: Intel(R) PRO/1000 Network Connection [ 228.619939][ T9786] e1000e 0000:00:02.0 eth1: MAC: 3, PHY: 8, PBA No: 000000-000 [ 228.691862][ T9786] irq 31: Affinity broken due to vector space exhaustion. [ 228.695527][ T9786] pcieport 0000:00:04.0: PME: Signaling with IRQ 31 [ 228.718882][ T9786] irq 32: Affinity broken due to vector space exhaustion. [ 228.720935][ T9786] pcieport 0000:00:04.0: AER: enabled with IRQ 32 [ 229.115850][ T5447] irq 25: Affinity broken due to vector space exhaustion. [ 229.119358][ T5447] irq 26: Affinity broken due to vector space exhaustion. [ 229.119726][ T5447] irq 30: Affinity broken due to vector space exhaustion. [ 229.204734][ T5447] 8021q: adding VLAN 0 to HW filter on device eth1 [ 229.609472][ T5644] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 229.618667][ T9825] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 229.685282][ T391] IPVS: starting estimator thread 0... [ 229.746454][ T9825] md/raid:md0: PPL space too small on ram0 [ 229.777911][ T9830] IPVS: using max 43 ests per chain, 103200 per kthread [ 230.107844][ C2] net_ratelimit: 71 callbacks suppressed [ 230.317037][ T9843] loop7: detected capacity change from 0 to 7 [ 230.749100][ T9843] Dev loop7: unable to read RDB block 7 [ 230.749135][ T9843] loop7: unable to read partition table [ 230.749309][ T9843] loop7: partition table beyond EOD, truncated [ 230.749324][ T9843] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 230.777461][ T9850] fuse: Unknown parameter 'fd0x0000000000000003' [ 230.981212][ T9856] fuse: fd is not a fuse device [ 231.018709][ T9853] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 231.774628][ T9865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1076'. [ 231.882901][ T9867] Device name cannot be null; rc = [-22] [ 232.122135][ T44] audit: type=1326 audit(1792088176.895:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9870 comm="syz.2.1079" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73befec code=0x0 [ 232.255164][ T44] audit: type=1800 audit(1792088177.025:1026): pid=9860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1075" name="file1" dev="sda1" ino=2040 res=0 errno=0 [ 232.267893][ T5807] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 232.445855][ T5807] usb 6-1: unable to get BOS descriptor or descriptor too short [ 232.446054][ T5807] usb 6-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=9c.8d [ 232.455356][ T5807] usb 6-1: config 254 has an invalid interface number: 213 but max is 0 [ 232.455405][ T5807] usb 6-1: config 254 has no interface number 0 [ 232.455479][ T5807] usb 6-1: config 254 interface 213 has no altsetting 0 [ 232.472703][ T5807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.472749][ T5807] usb 6-1: Product: syz [ 232.472835][ T5807] usb 6-1: Manufacturer: syz [ 232.472877][ T5807] usb 6-1: SerialNumber: syz [ 233.133516][ T9892] loop0: detected capacity change from 0 to 32768 [ 233.316954][ T5736] Bluetooth: hci1: connection err: -111 [ 233.339793][ T5807] usb_ehset_test 6-1:254.213: probe with driver usb_ehset_test failed with error -32 [ 233.356575][ T5807] usb 6-1: USB disconnect, device number 18 [ 233.539135][ T9892] block device autoloading is deprecated and will be removed. [ 233.695124][ T9892] device-mapper: thin: Data device (loop1) discard unsupported: Disabling discard passdown. [ 233.855196][ T44] audit: type=1804 audit(1792088178.625:1027): pid=9906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1086" name="bus" dev="ramfs" ino=33993 res=1 errno=0 [ 233.855771][ T44] audit: type=1804 audit(1792088178.625:1028): pid=9906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1086" name="bus" dev="ramfs" ino=33993 res=1 errno=0 [ 233.940508][ T9904] netlink: 'syz.2.1085': attribute type 2 has an invalid length. [ 235.266961][ T9928] net_ratelimit: 161 callbacks suppressed [ 235.371301][ T9917] capability: warning: `syz.0.1088' uses 32-bit capabilities (legacy support in use) [ 236.487838][ T5807] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 236.707784][ T5807] usb 6-1: Using ep0 maxpacket: 16 [ 236.712349][ T5807] usb 6-1: unable to get BOS descriptor or descriptor too short [ 236.712372][ T5807] usb 6-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 236.714833][ T5807] usb 6-1: config 1 has an invalid interface number: 232 but max is 0 [ 236.714846][ T5807] usb 6-1: config 1 has no interface number 0 [ 236.714865][ T5807] usb 6-1: config 1 interface 232 has no altsetting 0 [ 236.771372][ T5807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.771382][ T5807] usb 6-1: Product: syz [ 236.771389][ T5807] usb 6-1: Manufacturer: syz [ 236.771397][ T5807] usb 6-1: SerialNumber: syz [ 236.984330][ T9941] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1093'. [ 236.986752][ T9936] rxe_eth0 speed is unknown, defaulting to 1000 [ 237.275439][ T5807] hub 6-1:1.232: bad descriptor, ignoring hub [ 237.275459][ T5807] hub 6-1:1.232: probe with driver hub failed with error -5 [ 237.278821][ T5807] option 6-1:1.232: GSM modem (1-port) converter detected [ 237.385979][ T5807] usb 6-1: USB disconnect, device number 19 [ 237.387855][ T5807] option 6-1:1.232: device disconnected [ 238.895852][ T44] audit: type=1804 audit(1792088183.665:1029): pid=9961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1098" name="bus" dev="ramfs" ino=34102 res=1 errno=0 [ 238.896896][ T44] audit: type=1804 audit(1792088183.665:1030): pid=9961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1098" name="bus" dev="ramfs" ino=34102 res=1 errno=0 ** 29664 printk messages dropped ** [ 239.823574][ T9972] jffs2: notice: (9972) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 239.826227][ T9970] pci_bus 0000:01: busn_res: [bus 01] is released [ 240.100675][ T9979] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1102'. [ 240.100686][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1102'. [ 240.248700][ T9971] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 240.286830][ T9971] pci 0000:00:04.0: PCI bridge to [bus 01] [ 240.286971][ T9971] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 240.287074][ T9971] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff] [ 240.296007][ T9971] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 240.296595][ T9971] pci 0000:00:04.0: enabling Extended Tags [ 240.349474][ T44] audit: type=1326 audit(1792088185.115:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9991 comm="syz.2.1104" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73befec code=0x0 [ 240.351228][ T9971] pci 0000:00:04.0: Adding to iommu group 4 [ 240.354159][ T5447] net_ratelimit: 118 callbacks suppressed [ 240.384601][ T9971] pci 0000:00:04.0: PCI bridge to [bus 01] [ 240.392135][ T9971] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 240.392172][ T9971] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 240.392243][ T9971] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff]: assigned [ 240.392266][ T9971] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 240.392293][ T9971] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 240.392381][ T9971] pci 0000:00:04.0: PCI bridge to [bus 01] [ 240.392480][ T9971] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 240.402878][ T9971] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff] [ 240.412299][ T9971] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 240.486641][ T9971] irq 31: Affinity broken due to vector space exhaustion. [ 240.487178][ T9971] pcieport 0000:00:04.0: PME: Signaling with IRQ 31 [ 240.505761][ T9971] aer 0000:00:04.0:pcie002: error -EINTR: request_irq(32) aer_irq aer_isr aerdrv [ 240.505821][ T9971] pcieport 0000:00:04.0: AER: request AER IRQ 32 failed [ 240.505832][ T9971] aer 0000:00:04.0:pcie002: probe with driver aer failed with error -4 [ 240.723863][ T44] audit: type=1326 audit(1792088185.495:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9997 comm="syz.3.1105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 240.724022][ T44] audit: type=1326 audit(1792088185.495:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9997 comm="syz.3.1105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 240.724103][ T44] audit: type=1326 audit(1792088185.495:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9997 comm="syz.3.1105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 240.724183][ T44] audit: type=1326 audit(1792088185.495:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9997 comm="syz.3.1105" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf746efec code=0x7ffc0000 [ 240.724264][ T44] audit: type=1326 audit(1792088185.495:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9997 comm="syz.3.1105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 240.724345][ T44] audit: type=1326 audit(1792088185.495:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9997 comm="syz.3.1105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 240.724434][ T44] audit: type=1326 audit(1792088185.495:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9997 comm="syz.3.1105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efec code=0x7ffc0000 [ 241.464011][T10013] ALSA: mixer_oss: invalid OSS volume 'OGAI‡' [ 241.464053][T10013] ALSA: mixer_oss: invalid OSS volume 'Šä:&ÇBŠG¤`TÝoÄD^z¿‡F?!k'' [ 241.464098][T10013] ALSA: mixer_oss: invalid OSS volume '' [ 241.464723][T10013] ALSA: mixer_oss: invalid OSS volume '' [ 241.660727][T10026] netlink: 'syz.3.1109': attribute type 12 has an invalid length. [ 243.277881][ T1040] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 243.440810][ T1040] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 243.442194][ T1040] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 243.442217][ T1040] usb 6-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 243.442236][ T1040] usb 6-1: config 0 interface 0 has no altsetting 0 [ 243.446079][ T1040] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 243.446096][ T1040] usb 6-1: Product: syz [ 243.446109][ T1040] usb 6-1: Manufacturer: syz [ 243.446122][ T1040] usb 6-1: SerialNumber: syz [ 243.451806][ T1040] usb 6-1: config 0 descriptor?? [ 243.458909][T10051] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 243.473157][ T1040] usb 6-1: selecting invalid altsetting 0 [ 245.557860][ C0] net_ratelimit: 62 callbacks suppressed [ 245.662633][T10051] snd-usb-audio 6-1:0.0: Runtime PM usage count underflow! [ 245.663456][ T1040] usb 6-1: USB disconnect, device number 20 [ 246.023860][T10078] binder: 10075:10078 ioctl 4018620d 0 returned -22 [ 246.604716][T10069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1121'. [ 246.834442][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1126'. [ 246.837973][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1126'. [ 246.838183][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1126'. [ 246.838844][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1126'. [ 246.838988][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1126'. [ 247.280581][T10095] bond2: entered allmulticast mode [ 247.282586][T10095] 8021q: adding VLAN 0 to HW filter on device bond2 [ 247.458050][T10098] ip6gretap1: entered allmulticast mode [ 247.458417][T10098] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 247.556778][T10095] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1128'. [ 247.563984][T10095] bond0 (unregistering): left promiscuous mode [ 247.563998][T10095] bond_slave_0: left promiscuous mode [ 247.564138][T10095] @0Ù: left promiscuous mode [ 247.565679][T10095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.582237][T10095] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 247.590772][T10095] bond0 (unregistering): Released all slaves [ 248.342855][T10108] CUSE: DEVNAME unspecified [ 248.376323][T10108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1132'. [ 248.405295][T10110] CacheFiles: No cache directory specified [ 248.598814][T10115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1133'. [ 248.703409][T10118] rxe_eth0 speed is unknown, defaulting to 1000 [ 248.899569][T10112] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 248.914345][T10119] netlink: 'syz.1.1133': attribute type 5 has an invalid length. [ 249.448046][ T1040] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 249.608669][ T1040] usb 8-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 249.609692][ T1040] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 249.609707][ T1040] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 249.611697][ T1040] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.611959][ T1040] usb 8-1: Product: syz [ 249.611968][ T1040] usb 8-1: Manufacturer: syz [ 249.611976][ T1040] usb 8-1: SerialNumber: syz [ 249.653861][T10135] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 249.655064][T10135] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 249.675088][ T1040] usbserial_generic 8-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 249.675146][ T1040] usbserial_generic 8-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 249.675380][ T1040] usbserial_generic 8-1:1.0: generic converter detected [ 249.920081][ T1040] usb 8-1: generic converter now attached to ttyUSB0 [ 250.233806][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 250.233849][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 250.235415][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 250.235471][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 250.237050][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 250.237100][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 250.237356][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 250.237400][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 250.237646][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 250.237670][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 250.245543][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 250.245695][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 250.251142][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 250.251220][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 250.251375][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 250.251459][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 250.251611][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 250.251694][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 250.251842][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 250.251927][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 250.252073][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 250.252150][ C3] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 250.468020][T10149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1139'. [ 250.496897][T10143] hugetlbfs: Unknown parameter 'ns_inoles' [ 250.649246][ T5644] usb 8-1: USB disconnect, device number 21 [ 250.694409][ T5644] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 250.723813][ T5644] usbserial_generic 8-1:1.0: device disconnected [ 250.747879][ T37] net_ratelimit: 104 callbacks suppressed [ 250.754712][T10153] syz.2.1141 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 251.235917][T10159] tipc: Can't bind to reserved service type 0 [ 252.145319][T10174] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1146'. [ 252.420444][T10179] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 252.448256][ T5644] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 252.524774][T10186] jffs2: notice: (10186) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 252.727299][T10193] input: syz1 as /devices/virtual/input/input15 [ 253.107230][T10202] jffs2: notice: (10202) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 253.237871][ T5644] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 253.875275][T10210] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20001 [ 254.238611][ T5644] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 254.369069][T10225] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 254.369086][T10225] CIFS: Attempting to mount //172.20.20.170/share [ 254.374959][T10225] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 254.997766][ T5644] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 255.049739][ T5644] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 255.049755][ T5644] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 255.049767][ T5644] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.134699][ T5644] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.134709][ T5644] usb 8-1: Product: syz [ 255.134717][ T5644] usb 8-1: Manufacturer: syz [ 255.134724][ T5644] usb 8-1: SerialNumber: syz [ 255.150372][T10234] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 255.150391][T10234] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 255.150414][T10234] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 255.165385][T10234] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 255.175856][T10234] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 255.228933][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.235618][T10225] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 255.237072][T10225] CIFS: VFS: Error connecting to socket. Aborting operation. [ 255.237107][T10225] CIFS: VFS: cifs_mount failed w/return code = -4 [ 255.248801][ T5644] hub 8-1:1.0: bad descriptor, ignoring hub [ 255.248811][ T5644] hub 8-1:1.0: probe with driver hub failed with error -5 [ 255.338735][T10238] tipc: New replicast peer: 0.0.0.0 [ 255.340866][T10238] tipc: Enabled bearer , priority 10 [ 255.453268][ T5644] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 255.686540][T10245] lo: entered allmulticast mode [ 255.694016][T10245] tunl0: entered allmulticast mode [ 255.694349][T10245] gre0: entered allmulticast mode [ 255.694657][T10245] gretap0: entered allmulticast mode [ 255.695043][T10245] erspan0: entered allmulticast mode [ 255.695354][T10245] ip_vti0: entered allmulticast mode [ 255.695665][T10245] ip6_vti0: entered allmulticast mode [ 255.695982][T10245] sit0: entered allmulticast mode [ 255.696543][T10245] ip6tnl0: entered allmulticast mode [ 255.696990][T10245] ip6gre0: entered allmulticast mode [ 255.697420][T10245] ip6gretap0: entered allmulticast mode [ 255.714583][T10246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.721078][T10246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.725870][ T6035] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 255.736888][T10245] bridge0: entered allmulticast mode [ 255.740263][T10245] bond0: entered allmulticast mode [ 255.740282][T10245] bond_slave_0: entered allmulticast mode [ 255.740299][T10245] bond_slave_1: entered allmulticast mode [ 255.758370][ T1040] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 255.778154][T10245] net_ratelimit: 95 callbacks suppressed [ 255.820164][ T6035] usb 8-1: USB disconnect, device number 22 [ 255.821217][T10245] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1166'. [ 255.821231][T10245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1166'. [ 255.821238][T10245] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1166'. [ 255.823791][ T6035] usblp0: removed [ 255.927575][T10250] fuse: fd is not a fuse device [ 255.931179][ T5736] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 256.109590][ T6035] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 256.252279][ T5736] Bluetooth: hci0: unexpected event for opcode 0x1001 ** 18754 printk messages dropped ** ** 52 printk messages dropped ** ** 103 printk messages dropped ** ** 191 printk messages dropped ** ** 108 printk messages dropped ** ** 113 printk messages dropped ** ** 106 printk messages dropped ** ** 107 printk messages dropped ** ** 107 printk messages dropped ** ** 106 printk messages dropped ** ** 106 printk messages dropped ** ** 108 printk messages dropped ** ** 107 printk messages dropped ** ** 106 printk messages dropped ** ** 107 printk messages dropped ** ** 108 printk messages dropped ** ** 133 printk messages dropped ** ** 106 printk messages dropped ** ** 107 printk messages dropped ** ** 107 printk messages dropped ** ** 107 printk messages dropped ** ** 113 printk messages dropped ** ** 106 printk messages dropped ** ** 107 printk messages dropped ** ** 105 printk messages dropped ** ** 102 printk messages dropped ** ** 186 printk messages dropped ** ** 106 printk messages dropped ** ** 110 printk messages dropped ** ** 102 printk messages dropped ** ** 145 printk messages dropped ** ** 102 printk messages dropped ** ** 107 printk messages dropped ** ** 106 printk messages dropped ** ** 106 printk messages dropped ** ** 108 printk messages dropped ** ** 107 printk messages dropped ** ** 106 printk messages dropped ** ** 111 printk messages dropped ** ** 107 printk messages dropped ** ** 108 printk messages dropped ** ** 105 printk messages dropped ** ** 107 printk messages dropped ** ** 107 printk messages dropped ** ** 153 printk messages dropped ** ** 107 printk messages dropped ** ** 124 printk messages dropped ** ** 197 printk messages dropped ** ** 145 printk messages dropped ** ** 111 printk messages dropped ** ** 107 printk messages dropped ** ** 106 printk messages dropped ** ** 105 printk messages dropped ** ** 107 printk messages dropped ** ** 107 printk messages dropped ** ** 109 printk messages dropped ** ** 105 printk messages dropped ** ** 145 printk messages dropped ** ** 104 printk messages dropped ** ** 105 printk messages dropped ** ** 107 printk messages dropped ** ** 107 printk messages dropped ** ** 106 printk messages dropped ** ** 107 printk messages dropped ** ** 171 printk messages dropped ** ** 113 printk messages dropped ** ** 107 printk messages dropped ** ** 106 printk messages dropped ** ** 108 printk messages dropped ** ** 104 printk messages dropped ** ** 106 printk messages dropped ** ** 143 printk messages dropped ** ** 105 printk messages dropped ** ** 118 printk messages dropped ** ** 106 printk messages dropped ** ** 107 printk messages dropped ** ** 105 printk messages dropped ** ** 105 printk messages dropped ** ** 104 printk messages dropped ** ** 106 printk messages dropped ** ** 105 printk messages dropped ** ** 108 printk messages dropped ** ** 115 printk messages dropped ** ** 107 printk messages dropped ** ** 107 printk messages dropped ** ** 152 printk messages dropped ** ** 107 printk messages dropped ** ** 105 printk messages dropped ** ** 106 printk messages dropped ** ** 106 printk messages dropped ** ** 105 printk messages dropped ** ** 108 printk messages dropped ** ** 107 printk messages dropped ** ** 100 printk messages dropped ** ** 105 printk messages dropped ** ** 106 printk messages dropped ** ** 106 printk messages dropped ** ** 109 printk messages dropped ** ** 105 printk messages dropped ** ** 106 printk messages dropped ** ** 135 printk messages dropped ** [ 256.924226][T10263] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 256.924722][T10263] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 256.940727][T10263] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 256.941302][T10263] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 256.941400][T10263] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 256.958620][T10263] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 257.300607][T10278] : renamed from bond_slave_0 [ 257.456692][T10281] Invalid ELF header type: 3 != 1 [ 258.221063][T10293] CUSE: DEVNAME unspecified [ 258.295878][T10293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1179'. [ 258.399507][T10301] block nbd3: shutting down sockets [ 258.616650][T10309] kvm: requested 4190 ns i8254 timer period limited to 200000 ns ** 916 printk messages dropped ** [ 258.750986][T10301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1182'. [ 258.962328][T10318] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 258.987793][ T5736] Bluetooth: hci1: command 0x0c1a tx timeout [ 258.987832][ T5736] Bluetooth: hci2: command 0x0406 tx timeout [ 258.987854][ T5736] Bluetooth: hci0: command 0x0401 tx timeout [ 259.129130][T10316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1183'. [ 259.197643][T10325] jffs2: notice: (10325) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 259.395629][T10324] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1188'. [ 259.634604][T10335] uhci_hcd 0000:00:1d.0: remove, state 4 [ 259.634679][T10335] usb usb2: USB disconnect, device number 1 [ 259.791209][T10335] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 259.884250][T10337] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 259.887196][T10337] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 259.895649][T10337] pci 0000:00:1d.0: Adding to iommu group 7 [ 259.901128][T10337] pci 0000:00:1d.0: BAR 4 [io 0x2020-0x203f]: assigned [ 259.955376][T10337] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 51871 usecs [ 260.004225][T10343] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1192'. [ 260.056550][T10337] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 260.068275][T10337] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 2 [ 260.068437][T10337] uhci_hcd 0000:00:1d.0: detected 2 ports [ 260.077270][T10337] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002020 [ 260.084567][T10337] usb usb2: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.03 [ 260.085891][T10337] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 260.085902][T10337] usb usb2: Product: UHCI Host Controller [ 260.085911][T10337] usb usb2: Manufacturer: Linux syzkaller uhci_hcd [ 260.085919][T10337] usb usb2: SerialNumber: 0000:00:1d.0 [ 260.141350][T10337] hub 2-0:1.0: USB hub found [ 260.152024][T10337] hub 2-0:1.0: 2 ports detected [ 260.647869][ T6035] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 260.684572][T10357] syz.1.1196: vmalloc error: size 12288, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 260.684617][T10357] CPU: 2 UID: 0 PID: 10357 Comm: syz.1.1196 Tainted: G L syzkaller #0 PREEMPT(full) [ 260.684634][T10357] Tainted: [L]=SOFTLOCKUP [ 260.684639][T10357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 260.684647][T10357] Call Trace: [ 260.684652][T10357] [ 260.684657][T10357] dump_stack_lvl+0x100/0x190 [ 260.684677][T10357] warn_alloc.cold+0x9e/0xb2 [ 260.684690][T10357] ? __pfx_warn_alloc+0x10/0x10 [ 260.684704][T10357] ? policy_nodemask+0xed/0x4f0 [ 260.684718][T10357] ? alloc_pages_mpol+0x260/0x550 [ 260.684730][T10357] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 260.684742][T10357] ? find_held_lock+0x2b/0x80 [ 260.684757][T10357] ? rcu_read_unlock+0x17/0x60 [ 260.684773][T10357] __vmalloc_node_range_noprof+0x111c/0x1420 [ 260.684798][T10357] ? kvm_dev_ioctl+0x154/0x1b50 [ 260.684813][T10357] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 260.684824][T10357] ? __pfx_vsnprintf+0x10/0x10 [ 260.684842][T10357] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 260.684860][T10357] ? lock_acquire+0x1d1/0x380 [ 260.684877][T10357] ? rcu_is_watching+0x13/0xc0 [ 260.684894][T10357] __kvmalloc_node_noprof+0x3da/0x9b0 [ 260.684910][T10357] ? kvm_dev_ioctl+0x154/0x1b50 [ 260.684922][T10357] ? alloc_fd+0x471/0x7a0 [ 260.684938][T10357] ? kvm_dev_ioctl+0x154/0x1b50 [ 260.684953][T10357] kvm_dev_ioctl+0x154/0x1b50 [ 260.684967][T10357] ? __fget_files+0x34/0x3d0 [ 260.684982][T10357] ? find_held_lock+0x2b/0x80 [ 260.684996][T10357] ? hook_file_ioctl_common+0x140/0x440 [ 260.685011][T10357] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 260.685025][T10357] ? __fget_files+0x21f/0x3d0 [ 260.685052][T10357] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 260.685066][T10357] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 260.685085][T10357] __do_fast_syscall_32+0x13a/0x8b0 [ 260.685100][T10357] do_fast_syscall_32+0x32/0x70 [ 260.685113][T10357] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 260.685127][T10357] RIP: 0023:0xf7fc2fec [ 260.685141][T10357] Code: Unable to access opcode bytes at 0xf7fc2fc2. [ 260.685147][T10357] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 260.685158][T10357] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae01 [ 260.685166][T10357] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 260.685172][T10357] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 260.685179][T10357] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 260.685186][T10357] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 260.685200][T10357] [ 260.685205][T10357] Mem-Info: [ 260.685211][T10357] active_anon:4253 inactive_anon:13365 isolated_anon:0 [ 260.685211][T10357] active_file:4613 inactive_file:25155 isolated_file:0 [ 260.685211][T10357] unevictable:1001 dirty:492 writeback:0 [ 260.685211][T10357] slab_reclaimable:7689 slab_unreclaimable:58687 [ 260.685211][T10357] mapped:30975 shmem:12893 pagetables:1261 [ 260.685211][T10357] sec_pagetables:303 bounce:0 [ 260.685211][T10357] kernel_misc_reclaimable:0 [ 260.685211][T10357] free:22200 free_pcp:19120 free_cma:0 [ 260.685238][T10357] Node 0 active_anon:36kB inactive_anon:248kB active_file:284kB inactive_file:0kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:172kB dirty:12kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7456kB pagetables:1132kB sec_pagetables:1096kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 260.685267][T10357] Node 1 active_anon:16976kB inactive_anon:53212kB active_file:18168kB inactive_file:100620kB unevictable:2004kB isolated(anon):0kB isolated(file):0kB mapped:123728kB dirty:1956kB writeback:0kB shmem:49572kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6896kB pagetables:3912kB sec_pagetables:116kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 260.685296][T10357] Node 0 DMA free:3076kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:88kB local_pcp:0kB free_cma:0kB [ 260.685328][T10357] lowmem_reserve[]: 0 259 259 259 259 [ 260.685348][T10357] Node 0 DMA32 free:17744kB boost:8192kB min:19896kB low:22820kB high:25744kB reserved_highatomic:0kB free_highatomic:0kB active_anon:36kB inactive_anon:248kB active_file:284kB inactive_file:0kB unevictable:2000kB writepending:12kB zspages:0kB present:1032196kB managed:265356kB mlocked:0kB bounce:0kB free_pcp:11172kB local_pcp:2660kB free_cma:0kB [ 260.685382][T10357] lowmem_reserve[]: 0 0 0 0 0 [ 260.685401][T10357] Node 1 DMA32 free:67980kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:16976kB inactive_anon:53212kB active_file:18168kB inactive_file:100620kB unevictable:2004kB writepending:1956kB zspages:1680kB present:1048432kB managed:948208kB mlocked:4kB bounce:0kB free_pcp:65220kB local_pcp:18284kB free_cma:0kB [ 260.685433][T10357] lowmem_reserve[]: 0 0 0 0 0 [ 260.685451][T10357] Node 0 DMA: 105*4kB (U) 16*8kB (U) 18*16kB (U) 36*32kB (U) 7*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 3076kB [ 260.685524][T10357] Node 0 DMA32: 148*4kB (UME) 136*8kB (UME) 30*16kB (UME) 117*32kB (UME) 27*64kB (UME) 7*128kB (UME) 2*256kB (M) 5*512kB (M) 2*1024kB (M) 2*2048kB (M) 0*4096kB = 17744kB [ 260.685605][T10357] Node 1 DMA32: 3*4kB (UME) 56*8kB (UME) 29*16kB (UE) 231*32kB (UME) 120*64kB (UE) 41*128kB (UE) 28*256kB (UME) 37*512kB (UME) 18*1024kB (UME) 1*2048kB (U) 0*4096kB = 67836kB [ 260.685728][T10357] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 260.685738][T10357] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 260.685748][T10357] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 260.685758][T10357] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 260.685767][T10357] 43642 total pagecache pages [ 260.685771][T10357] 985 pages in swap cache [ 260.685776][T10357] Free swap = 118628kB [ 260.685780][T10357] Total swap = 124996kB [ 260.685785][T10357] 524155 pages RAM [ 260.685789][T10357] 0 pages HighMem/MovableOnly [ 260.685794][T10357] 216924 pages reserved [ 260.685798][T10357] 0 pages cma reserved [ 260.829346][ T6035] usb 8-1: Using ep0 maxpacket: 32 [ 260.834840][ T6035] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 260.835883][ T6035] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 260.835905][ T6035] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 260.835918][ T6035] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 260.835931][ T6035] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 260.838363][ T6035] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.838372][ T6035] usb 8-1: Product: syz [ 260.838380][ T6035] usb 8-1: Manufacturer: syz [ 260.838387][ T6035] usb 8-1: SerialNumber: syz [ 260.870630][ C3] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 260.882933][ T6035] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input16 [ 260.987880][ T74] net_ratelimit: 135 callbacks suppressed [ 261.068288][ T5736] Bluetooth: hci1: command 0x0c1a tx timeout [ 261.068376][ T5747] Bluetooth: hci0: command 0x0401 tx timeout [ 261.089239][ T6035] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 261.089252][ T6035] (id 0x00) [ 261.137845][ T6035] rc_core: IR keymap rc-imon-pad not found [ 261.137854][ T6035] Registered IR keymap rc-empty [ 261.137911][ T6035] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 261.137919][ T6035] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 261.289761][ T6035] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 261.293822][ T6035] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input17 [ 261.295881][ T6035] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:23> initialized [ 261.472231][ T857] usb 8-1: USB disconnect, device number 23 [ 261.681053][T10353] ================================================================== [ 261.681068][T10353] BUG: KASAN: slab-use-after-free in __dynamic_dev_dbg+0x2fc/0x310 [ 261.681098][T10353] Read of size 8 at addr ffff888000fb60c8 by task syz.3.1195/10353 [ 261.681114][T10353] [ 261.681125][T10353] CPU: 2 UID: 0 PID: 10353 Comm: syz.3.1195 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.681151][T10353] Tainted: [L]=SOFTLOCKUP [ 261.681159][T10353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 261.681171][T10353] Call Trace: [ 261.681194][T10353] [ 261.681202][T10353] dump_stack_lvl+0x100/0x190 [ 261.681229][T10353] print_report+0x13d/0x4b0 [ 261.681256][T10353] ? __virt_addr_valid+0x239/0x430 [ 261.681286][T10353] ? __dynamic_dev_dbg+0x2fc/0x310 [ 261.681309][T10353] kasan_report+0xdf/0x1c0 [ 261.681338][T10353] ? __dynamic_dev_dbg+0x2fc/0x310 [ 261.681365][T10353] __dynamic_dev_dbg+0x2fc/0x310 [ 261.681388][T10353] ? trace_contention_end+0x126/0x160 [ 261.681418][T10353] ? __pfx___dynamic_dev_dbg+0x10/0x10 [ 261.681443][T10353] ? display_close+0x43/0x150 [ 261.681468][T10353] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 261.681503][T10353] ? locks_remove_file+0xd1/0x600 [ 261.681523][T10353] ? __pfx_locks_remove_file+0x10/0x10 [ 261.681545][T10353] display_close+0x103/0x150 [ 261.681570][T10353] ? __pfx_display_close+0x10/0x10 [ 261.681595][T10353] __fput+0x400/0xb60 [ 261.681625][T10353] task_work_run+0x150/0x240 [ 261.681650][T10353] ? __pfx_task_work_run+0x10/0x10 [ 261.681677][T10353] exit_to_user_mode_loop+0x1d8/0x700 [ 261.681701][T10353] ? rcu_is_watching+0x13/0xc0 [ 261.681724][T10353] __do_fast_syscall_32+0x59f/0x8b0 [ 261.681747][T10353] do_fast_syscall_32+0x32/0x70 [ 261.681767][T10353] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 261.681791][T10353] RIP: 0023:0xf746efec [ 261.681811][T10353] Code: Unable to access opcode bytes at 0xf746efc2. [ 261.681820][T10353] RSP: 002b:00000000ffd68a3c EFLAGS: 00000202 ORIG_RAX: 00000000000001b4 [ 261.681839][T10353] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 261.681851][T10353] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 261.681863][T10353] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 261.681875][T10353] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 261.681886][T10353] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 261.681905][T10353] [ 261.681912][T10353] [ 261.681916][T10353] Allocated by task 6035: [ 261.681925][T10353] kasan_save_stack+0x30/0x50 [ 261.681950][T10353] kasan_save_track+0x14/0x30 [ 261.681974][T10353] __kasan_kmalloc+0xaa/0xb0 [ 261.681997][T10353] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 261.682017][T10353] usb_set_configuration+0x10d0/0x1dc0 [ 261.682041][T10353] usb_generic_driver_probe+0xa1/0xe0 [ 261.682060][T10353] usb_probe_device+0xef/0x400 [ 261.682082][T10353] really_probe+0x241/0xa60 [ 261.682101][T10353] __driver_probe_device+0x210/0x460 [ 261.682120][T10353] driver_probe_device+0x4a/0x140 [ 261.682138][T10353] __device_attach_driver+0x1df/0x320 [ 261.682157][T10353] bus_for_each_drv+0x159/0x1e0 [ 261.682182][T10353] __device_attach+0x1e4/0x4d0 [ 261.682200][T10353] device_initial_probe+0xaf/0xd0 [ 261.682220][T10353] bus_probe_device+0x64/0x160 [ 261.682235][T10353] device_add+0x121d/0x1970 [ 261.682256][T10353] usb_new_device.part.0+0xcc2/0x1686 [ 261.682280][T10353] hub_event.cold+0x1e3/0xe90 [ 261.682302][T10353] process_one_work+0xac7/0x1b10 [ 261.682324][T10353] worker_thread+0x5ef/0xe50 [ 261.682345][T10353] kthread+0x373/0x450 [ 261.682364][T10353] ret_from_fork+0x730/0xd60 [ 261.682380][T10353] ret_from_fork_asm+0x1a/0x30 [ 261.682396][T10353] [ 261.682400][T10353] Freed by task 857: [ 261.682409][T10353] kasan_save_stack+0x30/0x50 [ 261.682433][T10353] kasan_save_track+0x14/0x30 [ 261.682456][T10353] kasan_save_free_info+0x3b/0x70 [ 261.682476][T10353] __kasan_slab_free+0x5f/0x80 [ 261.682501][T10353] kfree+0x22b/0x6d0 [ 261.682517][T10353] device_release+0xd2/0x270 [ 261.682541][T10353] kobject_put+0x1f7/0x640 [ 261.682560][T10353] put_device+0x1f/0x30 [ 261.682584][T10353] usb_disable_device+0x44a/0x810 [ 261.682605][T10353] usb_disconnect+0x2e2/0x9a0 [ 261.682626][T10353] hub_event+0x1bb1/0x4420 [ 261.682647][T10353] process_one_work+0xac7/0x1b10 [ 261.682668][T10353] worker_thread+0x5ef/0xe50 [ 261.682693][T10353] kthread+0x373/0x450 [ 261.682710][T10353] ret_from_fork+0x730/0xd60 [ 261.682726][T10353] ret_from_fork_asm+0x1a/0x30 [ 261.682742][T10353] [ 261.682746][T10353] The buggy address belongs to the object at ffff888000fb6000 [ 261.682746][T10353] which belongs to the cache kmalloc-2k of size 2048 [ 261.682761][T10353] The buggy address is located 200 bytes inside of [ 261.682761][T10353] freed 2048-byte region [ffff888000fb6000, ffff888000fb6800) [ 261.682779][T10353] [ 261.682784][T10353] The buggy address belongs to the physical page: [ 261.682792][T10353] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xfb0 [ 261.682808][T10353] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 261.682822][T10353] flags: 0x7ff00000000040(head|node=0|zone=0|lastcpupid=0x7ff) [ 261.682839][T10353] page_type: f5(slab) [ 261.682855][T10353] raw: 007ff00000000040 ffff88801d042f00 dead000000000100 dead000000000122 [ 261.682871][T10353] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 261.682888][T10353] head: 007ff00000000040 ffff88801d042f00 dead000000000100 dead000000000122 [ 261.682904][T10353] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 261.682921][T10353] head: 007ff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 261.682958][T10353] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 261.682970][T10353] page dumped because: kasan: bad access detected [ 261.682979][T10353] page_owner tracks the page as allocated [ 261.682986][T10353] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5743, tgid 5743 (syz-executor), ts 39112219974 [ 261.683015][T10353] post_alloc_hook+0xfd/0x120 [ 261.683035][T10353] get_page_from_freelist+0x110d/0x35d0 [ 261.683055][T10353] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 261.683078][T10353] new_slab+0xa9/0x6e0 [ 261.683096][T10353] refill_objects+0xe3/0x410 [ 261.683115][T10353] __pcs_replace_empty_main+0x35e/0x650 [ 261.683135][T10353] __kmalloc_node_track_caller_noprof+0x6a8/0x870 [ 261.683160][T10353] kmalloc_reserve+0xe8/0x350 [ 261.683184][T10353] __alloc_skb+0x185/0x710 [ 261.683202][T10353] rtmsg_ifinfo_build_skb+0x81/0x260 [ 261.683227][T10353] rtmsg_ifinfo+0xa4/0x1b0 [ 261.683250][T10353] register_netdevice+0x1e5b/0x25a0 [ 261.683273][T10353] __ip_tunnel_create+0x52b/0x670 [ 261.683296][T10353] ip_tunnel_init_net+0x230/0x780 [ 261.683320][T10353] ops_init+0x1e2/0x5f0 [ 261.683340][T10353] setup_net+0x118/0x3a0 [ 261.683360][T10353] page last free pid 1 tgid 1 ts 8951498921 stack trace: [ 261.683372][T10353] __free_frozen_pages+0x79f/0x10f0 [ 261.683389][T10353] qlist_free_all+0x47/0xf0 [ 261.683410][T10353] kasan_quarantine_reduce+0x1a0/0x1f0 [ 261.683434][T10353] __kasan_kmalloc+0x8a/0xb0 [ 261.683457][T10353] __kmalloc_node_noprof+0x342/0x880 [ 261.683480][T10353] __vmalloc_node_range_noprof+0x3d4/0x1420 [ 261.683508][T10353] __vmalloc_node_noprof+0xad/0xf0 [ 261.683534][T10353] tpg_alloc+0x166/0x9b0 [ 261.683557][T10353] vivid_probe.cold+0x2166/0x921e [ 261.683580][T10353] platform_probe+0x106/0x1d0 [ 261.683605][T10353] really_probe+0x241/0xa60 [ 261.683623][T10353] __driver_probe_device+0x210/0x460 [ 261.683641][T10353] driver_probe_device+0x4a/0x140 [ 261.683660][T10353] __driver_attach+0x21f/0x5b0 [ 261.683678][T10353] bus_for_each_dev+0x13e/0x1d0 [ 261.683707][T10353] bus_add_driver+0x305/0x5b0 [ 261.683722][T10353] [ 261.683727][T10353] Memory state around the buggy address: [ 261.683736][T10353] ffff888000fb5f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 261.683749][T10353] ffff888000fb6000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 261.683762][T10353] >ffff888000fb6080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 261.683772][T10353] ^ [ 261.683782][T10353] ffff888000fb6100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 261.683795][T10353] ffff888000fb6180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 261.683804][T10353] ================================================================== [ 261.683853][T10353] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 261.954110][T10353] CPU: 2 UID: 0 PID: 10353 Comm: syz.3.1195 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.957386][T10353] Tainted: [L]=SOFTLOCKUP [ 261.958687][T10353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 261.961709][T10353] Call Trace: [ 261.962745][T10353] [ 261.963685][T10353] dump_stack_lvl+0x100/0x190 [ 261.965108][T10353] vpanic+0x553/0x970 [ 261.966336][T10353] ? __pfx_vpanic+0x10/0x10 [ 261.967742][T10353] ? mark_held_locks+0x40/0x70 [ 261.969183][T10353] ? irqentry_exit+0x24d/0xa10 [ 261.970683][T10353] ? __dynamic_dev_dbg+0x2fc/0x310 [ 261.972274][T10353] panic+0xd1/0xe0 [ 261.973482][T10353] ? __pfx_panic+0x10/0x10 [ 261.974861][T10353] ? __dynamic_dev_dbg+0x2fc/0x310 [ 261.976409][T10353] ? preempt_schedule_common+0x3c/0xb0 [ 261.978068][T10353] check_panic_on_warn.cold+0x19/0x34 [ 261.979723][T10353] end_report.part.0+0x3a/0x90 [ 261.981212][T10353] kasan_report.cold+0xe/0x18 [ 261.982642][T10353] ? __dynamic_dev_dbg+0x2fc/0x310 [ 261.984191][T10353] __dynamic_dev_dbg+0x2fc/0x310 [ 261.985731][T10353] ? trace_contention_end+0x126/0x160 [ 261.987391][T10353] ? __pfx___dynamic_dev_dbg+0x10/0x10 [ 261.989051][T10353] ? display_close+0x43/0x150 [ 261.990508][T10353] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 261.992335][T10353] ? locks_remove_file+0xd1/0x600 [ 261.993887][T10353] ? __pfx_locks_remove_file+0x10/0x10 [ 261.995549][T10353] display_close+0x103/0x150 [ 261.996971][T10353] ? __pfx_display_close+0x10/0x10 [ 261.998538][T10353] __fput+0x400/0xb60 [ 261.999800][T10353] task_work_run+0x150/0x240 [ 262.001252][T10353] ? __pfx_task_work_run+0x10/0x10 [ 262.002822][T10353] exit_to_user_mode_loop+0x1d8/0x700 [ 262.004475][T10353] ? rcu_is_watching+0x13/0xc0 [ 262.005974][T10353] __do_fast_syscall_32+0x59f/0x8b0 [ 262.007581][T10353] do_fast_syscall_32+0x32/0x70 [ 262.009075][T10353] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 262.011149][T10353] RIP: 0023:0xf746efec [ 262.012417][T10353] Code: Unable to access opcode bytes at 0xf746efc2. [ 262.014432][T10353] RSP: 002b:00000000ffd68a3c EFLAGS: 00000202 ORIG_RAX: 00000000000001b4 [ 262.016947][T10353] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 262.019321][T10353] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 262.021727][T10353] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 262.024113][T10353] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 262.026480][T10353] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 262.028872][T10353] [ 262.030397][T10353] Kernel Offset: disabled [ 262.031753][T10353] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:12:29 Registers: info registers vcpu 0 CPU#0 RAX=000000000021f191 RBX=ffffffff8fa91580 RCX=ffffffff8bd27275 RDX=0000000000000001 RSI=ffffffff8e3e0fb1 RDI=ffffffff8c625a80 RBP=fffffbfff1f522b0 RSP=ffffffff8fa07cf0 R8 =0000000000000001 R9 =ffffed10056067bd R10=ffff88802b033deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1f40fa2 R15=dffffc0000000000 RIP=ffffffff8bd257af RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809574a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7198e50 CR3=0000000075b8c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000010c00000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801db04b00 RSI=ffffffff81b67e9e RDI=ffff88801db04b00 RBP=0000000000000001 RSP=ffffc9000047fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=0000000000000000 RIP=ffffffff81b67e9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809584a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3af346 CR3=000000000fb96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000079 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b10895 RDI=ffffffff9cc6cba0 RBP=ffffffff9cc6cb60 RSP=ffffc9000c49f360 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3030383838666666 R12=0000000000000000 R13=0000000000000079 R14=0000000000000000 R15=ffffc9000c49f678 RIP=ffffffff85b108bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809594a000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f746f000 CR3=000000005679d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffea00017a60c8 RCX=ffffffff82550bb9 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff8880416d8000 RBP=dffffc0000000000 RSP=ffffc9000219f1e8 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=ffffc9000219f650 R15=ffffea00017a60c0 RIP=ffffffff820ba2b0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095a4a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005572ffb20030 CR3=00000000519fa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000