last executing test programs: 4m47.800725777s ago: executing program 2 (id=3): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000c00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x1a0, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @inner={{0xa}, @void}}, @NFTA_SET_EXPRESSIONS={0x15c, 0x12, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x40, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x7f}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x6}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x8}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x9}]}}}, {0x38, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xffffff01}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfff}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x40, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xb}]}}}, {0x28, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @inner={{0xa}, @void}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1c8}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) readv(r1, &(0x7f0000000580)=[{&(0x7f0000000280)=""/256, 0x100}], 0x1) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x60042, 0x1) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='bond0\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x44844, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x2, 0x40) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x20, r5, 0x644ad2ec32b79f57, 0x70bd29, 0x25cfdc03, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4018010}, 0x4000) r7 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x11, r7, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x2c4, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0xc1, 0x6, "49668109b9433f794786b7d41f7928ea82dce110196b2c043e72780a516ed18d1bca7253aaaa6b7f89f50425b8183a21bd3684c28a77d532b9ee3d7097f0a48779bca6be84c3279bc1911c312ef50a32c7f9e7a92a0dd1b000b02bfa56b9438dc22afda32f5ab3d7ebd1dba9422c9ccf5c907869ef53d7ade0b49024dc7e12f8ad2fa1c703650ceebe3f5a29de1db2e6eedf7c9e044f1d32072c27761ea75d6b1798d20a489f72b400b4089eb8eca1e522de6a474f5d03d0cb96862ba2"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x103, 0x6, "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"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xbf, 0x6, "6f1647f1430be8030f5c250a086a542afee0de391841d59e852850843d7b5143deb1436d448da03e9c5a923ed04743ea93767e2a5c861b7190307577839f19b1be535117988e870b8a0ddde7e4d4bbe9fe43dfe8e0f22e2c2ce241ab410a3458160fc2c94ddbf7517a1f7997f794b5b575eb8f64aadcd39431a4189ce9b785a00ededf2ae0d2a01382d8341ae27be55ebecd5f511693cc118aa053f5f4f9fc0140a88b18cc38322bce8ec7fa7bb002dc9b4c699ba726dc948cb1dd"}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x30c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4m47.369631829s ago: executing program 2 (id=5): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a300000000040000000030a01010000000000000000050000001500010073797a30001000000900030073797a300000000014000480080001400000000008000240521deb0b68000000060a010400000000000000000500000108000b400000000040000480240001800b00010074756e6e656c000014000280080001400000000108000240000000091800018008000116667764000c00028008000140000000090900010073797a3000000000140000001100010000000000000000000000000a96d21069a8675addcde612e88eb48b44bfab0c140b040b01a2b718cd7dfcf6e53c08b9267b79c6b09d26c96c323b9ea2606b63226420e83aa498ecef"], 0xf0}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4040080) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg(r2, &(0x7f0000008000)=[{{&(0x7f0000000100)=@rc={0x1f, @any, 0x9}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="cd", 0x1}], 0x1}}], 0x1, 0x4008000) 4m47.28949745s ago: executing program 2 (id=6): socket(0x10, 0x803, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x1c) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x40}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r3, 0x4) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x20, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, 0xff}, [@ldst={0x0, 0x0, 0x3, 0x0, 0x8, 0xffffffffffffffc0, 0x5}, @func]}, &(0x7f0000000040)='syzkaller\x00', 0xffffff93, 0x83, &(0x7f0000000200)=""/131, 0x41000, 0x0, '\x00', r0, @netfilter=0x2d, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x3, 0xb, 0x0, 0x7fffffff}, 0x10, r3, r5, 0x3, 0x0, &(0x7f00000003c0)=[{0x1, 0x2, 0xb, 0x3}, {0x3, 0x4, 0x6, 0x7}, {0x3, 0x1, 0x8}], 0x10, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x1d, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000006000000000000003fc5000018110000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000540)='GPL\x00', 0x1ff, 0xde, &(0x7f0000000580)=""/222, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x21bd4958}, 0x94) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, 0x0) r8 = dup(r7) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000040)={0x0, r8}) memfd_secret(0x0) openat$ocfs2_control(0xffffff9c, &(0x7f00000007c0), 0x50100, 0x0) r9 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r9, 0x6, 0x0, 0x0, 0x0) fsmount(r9, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0/file1\x00', &(0x7f0000000100), 0x0, 0x0, 0x2) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 4m46.38958736s ago: executing program 2 (id=9): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioprio_set$pid(0x2, 0x0, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) readv(r1, &(0x7f00000017c0)=[{&(0x7f0000000140)=""/69, 0x45}], 0x1) openat$binder_debug(0xffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x1, 0x3, 0x4, {0x1, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x40000002, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f0000000800)='1', 0x1) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7, 0x0, {0x2, 0x0, 0x4}, 0x2}, 0x18) connect$can_j1939(r6, &(0x7f0000000ec0)={0x1d, r7, 0x3, {0x1, 0xff, 0x3}}, 0x18) 4m44.46927534s ago: executing program 2 (id=12): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800010000000000000000001d01000008000a00", @ANYRES32=r1, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r2], 0x24}}, 0x0) syz_usb_connect$uac1(0x2, 0xdc, 0x0, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, 0x0, &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000200)={0x0, 0x8}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r8 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$key(r8, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="020900090200000000000000ffdbdf25a1c017ab51b4527cd50c76b9c7cae9ce8564d3bb5a4ebff31168b54a0177c275622e392bb9ceb37d1680885c68a0"], 0x10}}, 0x0) 4m43.717975439s ago: executing program 2 (id=15): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)='ip6erspan0\x00', 0x8, 0x8, 0x959}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000240)='net/netstat\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r14, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r11, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r8, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$cgroup(r3, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x7c, r5, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) writev(r3, &(0x7f0000000480)=[{&(0x7f0000000440)="5043320b91445b9d81aadc6e3b0bebf9b9000f1fc8bc6f8580a5a5209b93920e3fd68dcde5f33efbe2ce11c72a20e086bb297c83c996ace905860ba2849051", 0x3f}], 0x1) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4d0d2972d57c", @ANYRES16=r5, @ANYBLOB="00022dbd7000fbdbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x80d0}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 4m43.131910517s ago: executing program 32 (id=15): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)='ip6erspan0\x00', 0x8, 0x8, 0x959}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000240)='net/netstat\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r14, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r11, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r8, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$cgroup(r3, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x7c, r5, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) writev(r3, &(0x7f0000000480)=[{&(0x7f0000000440)="5043320b91445b9d81aadc6e3b0bebf9b9000f1fc8bc6f8580a5a5209b93920e3fd68dcde5f33efbe2ce11c72a20e086bb297c83c996ace905860ba2849051", 0x3f}], 0x1) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4d0d2972d57c", @ANYRES16=r5, @ANYBLOB="00022dbd7000fbdbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x80d0}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 4m1.861092803s ago: executing program 4 (id=227): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r2, &(0x7f0000004e80)=[{0x0}, {&(0x7f0000001e00)=""/104, 0x68}], 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) 4m1.528682255s ago: executing program 4 (id=230): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x58, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x5, 0x1, {0xf, 0x4, 0x0, 0x9, 0x686, 0x67, 0xfff9, 0x7, 0x6, 0x1000, @multicast1, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x24, 0xc7, 0x3, 0xc, [{@broadcast, 0x4}, {@multicast1, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x1000}, {@empty, 0x100}]}, @ssrr={0x89, 0x3, 0xf1}]}}}}}}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sigaltstack(&(0x7f0000000000)={0x0, 0x80000001}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r2, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x45, 0x9, 0x0, 0x0, {0x3}}, 0x14}}, 0x20000000) sendfile(r2, r3, 0x0, 0xffffffff000) recvmmsg(r2, &(0x7f0000000640), 0x3fffffffffffce3, 0x0, 0x0) mlockall(0x6) brk(0x55555ede6001) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x8) socket$netlink(0x10, 0x3, 0x8000000004) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f00000009c0)={0x2, 0xffffffff, 0x16, 0x6, 0xaf, 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg1\x00'}) sendmsg$WG_CMD_SET_DEVICE(r5, 0x0, 0x24040811) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000001c0)={0x11, @private=0xa010101, 0x4e20, 0x3, 'dh\x00', 0x52, 0x8, 0x38}, 0x2c) ioctl$FITHAW(r0, 0xc0045878) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x40, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000480)={{0x5, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x80000, 0xf, 0x80000000000000, 0x592a, 0x9, 0x0, 0xfffffffe, 0x4, 0x7, 0x1, 0x7, 0x803, 0x100000001, 0xfffffffffffffffe, 0x40, 0x0, 0x4, 0x100000001, 0x8, 0x1f, 0xfff, 0x0, 0x1, 0x0, 0x9, 0x4, 0x7, 0x0, 0x1, 0x20000000, 0x0, 0x2, 0x0, 0x2, 0x80000000000000, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0x49, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000002, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2000000000000, 0xfffffffffffffffc, 0x1, 0xfffffffc, 0x1, 0x3, 0x4, 0x20000000, 0x10001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4000004, 0x0, 0xb5, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0x7, 0x0, 0xfffffffe]}) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000000)=""/175) 4m0.760300232s ago: executing program 4 (id=233): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4m0.535517057s ago: executing program 4 (id=235): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x88a2}, @void, @eth={@multicast, @empty, @val={@val={0x88a8, 0x7, 0x1, 0x1}, {0x8100, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x14, 0x67, 0x0, 0x9, 0x6, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0xfdef) 4m0.354552732s ago: executing program 4 (id=238): mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c2c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002140)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c392a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bc1c2745f5f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0xec4, 0xfffffffd, 0x14e, {0x0, 0x4, 0xfffffffffffffffe, 0x1, 0xd1, 0x2, 0x6, 0x2, 0x4, 0x2000, 0x0, r2, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mknod$loop(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x4, 0x0) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x1001a}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0xffffffff, {0x3, 0x8000000000000, 0x0, 0x0, 0x440000, 0x8, {0x1, 0x5, 0x9, 0x80, 0x100000000, 0xffffffff80000001, 0xfffffffe, 0xfffffffc, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') syz_fuse_handle_req(r0, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)={0x90, 0x0, 0x4, {0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1, 0xc, {0x0, 0x8, 0xd, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8000, 0x0, 0x0, r3, 0x2, 0x28000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000e300)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x800000000000, {0x7, 0x29, 0x0, 0x5408c00, 0x0, 0xb, 0x0, 0xfffffe00, 0x0, 0x0, 0x2, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) close(r4) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 3m59.81919166s ago: executing program 4 (id=241): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x9, 0xc003) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x5) setresgid(0xee00, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r1 = creat(0x0, 0x125) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x6, 0x24, 0x0, 0x0) ioctl$EVIOCRMFF(r2, 0x40045506, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000180)={0x2000000, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x1) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="041817aaaaaaaaaa10eb"], 0x1a) 3m44.205217223s ago: executing program 33 (id=241): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x9, 0xc003) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x5) setresgid(0xee00, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r1 = creat(0x0, 0x125) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x6, 0x24, 0x0, 0x0) ioctl$EVIOCRMFF(r2, 0x40045506, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000180)={0x2000000, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x1) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="041817aaaaaaaaaa10eb"], 0x1a) 1m25.125269816s ago: executing program 3 (id=960): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000400058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 1m25.045390273s ago: executing program 3 (id=961): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x67, &(0x7f0000000400)={&(0x7f0000000040)={0x14, r1, 0x28543634fae43ad}, 0x14}}, 0x0) 1m24.979522852s ago: executing program 3 (id=962): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x37, 0x800, 0x70bd28, 0x25dfdbfd, {0x14}, [@typed={0x8, 0x142, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x4840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) 1m24.906538666s ago: executing program 3 (id=963): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x18d883, 0x0) (async) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000540), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000e40)={0x990a23}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)={0x1c, r6, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x28020080}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r6, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x301, 0x0, 0x0, {0x92258420943190a, 0x0, 0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}, 0x1, 0x0, 0x0, 0x40091}, 0x40) sendmsg$nl_generic(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010300000000000000010c00000008000100", @ANYRES64=r1], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) ioctl$SG_IO(r0, 0x2285, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) r9 = syz_clone(0x2000000, &(0x7f0000002880), 0x0, 0x0, 0x0, 0x0) kcmp(r9, r9, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) (async) r10 = getegid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={r9, 0x0, r10}, 0xc) 1m24.778550232s ago: executing program 3 (id=964): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) r3 = socket$netlink(0x10, 0x3, 0xc) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000200)) splice(r1, 0x0, r3, 0x0, 0x800000000082, 0xf) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r7, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32], 0x20) r11 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000100)={{0x1, 0x7ff}, 0x18}, 0x10) ptrace$setsig(0x4203, 0x0, 0x81, &(0x7f00000000c0)={0x16, 0x7, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x10200, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r11, 0xae80, 0x0) sendmmsg$sock(r1, &(0x7f0000000680)=[{{&(0x7f00000002c0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000340)="3d796330b6e348bde72417074a414256ea4610f1bbb7b8aeb7002785405904c4d241b427eb357777b3dd7345cfa6eb79e6ee605126a919ea22caca2a42c4aacf099b7058b856c5aebfdc3e137c74fa3114ffbe10c0d550a888021c0863728a5a09052ac466b9eb04e38c0201b9475cf74e330baa547c3d33a22dfcc0a80d0453defae0a6a9a318452282350b59a2a4681922b1c38b35d4c85885f2940d3efe52e3574c970c8d5ac5ad8c9d7fa62d5edf90cfbf3858853f0ff35dd1884d0989bd3bc91fdf", 0xc4}, {&(0x7f0000000440)="45eca553205457dff209e94d", 0xc}, {&(0x7f00000004c0)="3e401c6f00f77687af87b257e0a93c0fe4a84c492c33fda7ea661c16f4ae0bac86c5ab68727da59d3d18da0a0ba8dffea6c844a5448c882506756e63126563ec142ebe24770194b3c59e8eecb8763a4fdc42c0c454fbfb9efd7b8fd3abf302b8da9d4be9cc1f06feb85f5ab9d563acff4d8119842e87", 0x76}, {&(0x7f0000000540)="8098c3d1347371433cf83da4305be04d3d8908d93562f12e843b76f4b908a828916737f7a8f2869d23d1227c2f425c1a1abb6492998ed9161f53904d39a53e92d049df05190b2b442b4971c240447bc7e865266fc9eb4b8f331a769c4fd6a026f56ebfcff5a207f57fb7547e3f0f0e5011d4c913a9e5da5af3cc49453b742dcd13797bfadd22763417d0", 0x8a}], 0x4, &(0x7f0000000640)=[@timestamping={{0x10, 0x1, 0x25, 0x1}}, @txtime={{0x14, 0x1, 0x3d, 0x2}}], 0x24}}], 0x1, 0x1) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 1m24.21946255s ago: executing program 3 (id=968): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x16, 0x11, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x23ffd, 0x0, 0x0, 0x0, 0x9}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0xf0, 0x0, 0x0, 0x0}, 0x50) 1m23.517909362s ago: executing program 34 (id=968): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x16, 0x11, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x23ffd, 0x0, 0x0, 0x0, 0x9}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0xf0, 0x0, 0x0, 0x0}, 0x50) 10.499332931s ago: executing program 1 (id=1378): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00003b2000/0x4000)=nil) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x13, 0x200, &(0x7f00000003c0)="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"}) (async) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x0, 0x42) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) (async, rerun: 64) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async, rerun: 32) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) (rerun: 32) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async, rerun: 32) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)) (rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004450) listen(0xffffffffffffffff, 0x0) (async, rerun: 64) r4 = syz_usbip_server_init(0x1) (async, rerun: 64) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000050000000400000001000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000d1f1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000402, r5}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r5, 0x0, 0x0}, 0x20) write$usbip_server(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000003"], 0x35) (async) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xc0189436, 0x1ffffffe) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000005c0)=0xd) sendmsg$nl_generic(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="680000003b0002002cbd7000fbdbdf250a000000262ad272cbe564653eb05cc1608fa3887e69449329fe625f2a555078093a7d6a13c939701bb4118da061aa0f2999ae83bc80b369bcb568f9ffffffffffffffe5616e28a52e374f62fc53571139213a7ccb58c6006bd89f93e58555cdfbf5c22f2396ea427632cac496c4e46ee6c5456902a3cfafbc39b7eff6e4f0b77a82deb80000"], 0x68}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) 9.069586498s ago: executing program 1 (id=1383): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xa}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = syz_open_dev$dri(0x0, 0xab, 0x0) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendto(r6, &(0x7f0000000000)="6800000030000505f5ffffff00000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080001000000000008000300640000000c000700e803000000000000", 0x68, 0x0, 0x0, 0x0) 7.432056024s ago: executing program 1 (id=1388): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xe, 0x4, 0x8, 0x1}, 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10010, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xffffff01, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 7.406913805s ago: executing program 6 (id=1389): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xa) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000600)={[0x8, 0x1000000000, 0x5, 0x43, 0x1fffffc, 0x400000000000000, 0x7, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x100000000, 0x0, 0x400000000000000], 0x40000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a3200000000140000001100010000000000000000000100000a"], 0x94}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/fcloop/ctl/set_cmd_drop\x00', 0x1, 0x0) write(r3, &(0x7f0000000800)='1', 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x3, 0x2082) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r6, &(0x7f0000000800)='+ 1 0 0 1', 0x9) r7 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) fcntl$notify(r7, 0x402, 0x5) 7.401528181s ago: executing program 1 (id=1390): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x34, r1, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0xf, 0xfff, @udp='udp:syz0\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x4c) write(r2, &(0x7f0000000500)='1\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./config/nullb/nullb1/memory_backed\x00', 0x80000, 0x0) write(r4, &(0x7f0000000e00)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r5, &(0x7f0000000700)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff) read$eventfd(r5, &(0x7f00000003c0), 0x8) mount(&(0x7f0000000900)=@filename='devtmpfs\x00', &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev/nullb1\x00', 0x2, 0x0) write(r6, &(0x7f0000001000)="53464f5ad309e7e5", 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x43, 0x0, &(0x7f0000000200)=0x1e) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r6, 0xc9) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000a00)=@filename='./dev/nullb1\x00', &(0x7f0000001100)='./mnt\x00', &(0x7f0000001200)='zonefs\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000004, 0x7, &(0x7f0000006680)) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000100)=""/66) 7.316576197s ago: executing program 1 (id=1392): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000001540)=""/4092}) r2 = eventfd(0x10000) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 6.104360836s ago: executing program 6 (id=1396): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000040)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000500)=']\x9f\xddT\x95\xab\x1a\x03', 0x0, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x3}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="2e000000010002", 0x7) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00'}) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.919584448s ago: executing program 1 (id=1402): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000007000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r2) r3 = bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) syz_emit_ethernet(0x2e, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x8, 0xff}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) pipe2(&(0x7f00000001c0), 0x80800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x49, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @broadcast}, &(0x7f0000000100)=0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r3}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x2000002, 0xe, 0x0, &(0x7f0000000740)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.647369775s ago: executing program 6 (id=1403): r0 = socket$inet(0x2, 0x3, 0x101) shutdown(r0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff00000007058102"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000700)='\x00') read$char_usb(r3, &(0x7f0000000600)=""/64, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x31) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) 3.966832464s ago: executing program 5 (id=1406): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000240)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 3.379222264s ago: executing program 5 (id=1407): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0x19f10, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000001000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a60f510000fc020000000000000000000000000000fe8000000000000000000000000000aa8400000000000000223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01f75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdfd4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120f606ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025af8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c1011855241fea186906a5139d1c300be57dc7ff493de80010520d10fc3eda0ee9cd413e075d3dc02258fdab567a16e43edbeecc366a69d8d75512f43a2b79cbb9132cdcd00c531730d05f1eabf66613d6e7ebb8c4c3f4f7efd415d41049786352808b22a3bde40121968af39c8f00296001662adc72b7963c8bafab4a496b50f3237a29d19ad4a51a62b1c77a04c14004734189cf7ec49e3d041a1e5658d080f09df77f39782e7133968c1f39ab3ae2a5f24a60073288f3c5825dafd614a379b8b905aaf961caa14ffa38de0d632918d31e4a9291b0f0789248e232e4276840a1ed0257300e522d83111dffd424b1b33148981e3794b2b649ba9174e6697bcc96049f4f3dcc7cf4ca97e2006ec8a146014bb49184632e4fb159a34b6530e959e60a6b4e0427cc697f14cfe6bb7a662a6f5012744f3cf2307abc19c58449864d98fcfebc5d598cd32a1c38c207896468fe8da75eb1edb1d6e7cb1eab671e4e92f139c81d79f15df2a2dc075acc982dec769e2f49aad0fdf594cb590e054616e4f4582b6c4a149ae45d844903ef68d211df2a180178e178b7c7a5012ccf8a1e677586588620365e6111f5192ecfdbd97e2284128de02e08ebc13d4bb4d114faa1e6c16c51c12da2c52d68f73640ce866ce4e794b9fafdc392c91c1f824bc301b3069a02b9c86d2ffac3ed63ddee130cbc248d6a3345d3f9553db78077072d569a6633f8bdbdb1a209a8be9b6830225994f9021b57ddd6a44e8ea40b205c6cf437f45bffaef053a5916dcc6de62ee02bdb8ce3acec8ad97fc95dab1307d254790c71f32e4678957cf0121dccabe73a03c6cacbcbdaad8801b04d9836555a982c357a06e2db7e9bf62aed8cdebbb7a71a2410b929015b61f16e54bffd038996a717b9c7cc3696d8a1205e8266bf782c3a45b0e31461d6a3ed62396088833f69248b24fbf6f81dcc08b98826c3bd2325ade54f614f2d4a153e3e3527d93978483f2bfeada6b64bc43f2a725c30e843d13e6ab34cfc38d488b3ef50cd04318fac1f89905f017644cfa2de058ad399871d1316264813c2289d0b6cfeddfbca36ce93fd4a1bfc93bb74453cfbb9c6ca22320ffc9cb0a3fff046a5678c066e617cd3ac024dfead04b99877f448b78208938585c7563efe815ff0cc47da5fff521d9730ddc89f4aeceadd06f2ea6b9ae72c9407aa550a0155db3b4bc6aaa382a30552f699cb6a1af9972a8ccc483f98952dfbde3d712ea8673eacdbb77490d833fc90f0f02e7c073d2917db70831496a88defc10667dc4c1b7399191bdc7857eb090e79c332bf9f71bb5377178e6232800c93d22318dc5ab8d5dfa2f074a6c23acb61c89f2f078ec91e9817e11a4c8295c19634b5ca2df74b297321dba6f85d0ce5914ce7487e2bd3338b206e626620ba080392641000000000000"], 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r1, &(0x7f0000000fc0)={0x2, 0x4e22, @remote}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000003c0)) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x12}, @loopback, {[@routing={0x32, 0x0, 0x1, 0x4}]}}}}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) setns(0xc9, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @rand_addr=0x7f000002}, 0x10) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @private=0xa010101}], 0x10) 3.135554835s ago: executing program 0 (id=1408): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x402c582b, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x7, 0x200, 0x6}) symlinkat(&(0x7f00000000c0)='./cgroup\x00', r0, &(0x7f0000000100)='./cgroup\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c0002800800110001"], 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x20040054) 2.939275027s ago: executing program 0 (id=1409): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000000)="2e000000010002", 0x7) 2.783640381s ago: executing program 0 (id=1410): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0xe, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x94) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000001540)=""/4092}) r2 = eventfd(0x10000) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2.565452913s ago: executing program 5 (id=1411): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000040)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000500)=']\x9f\xddT\x95\xab\x1a\x03', 0x0, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x3}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="2e000000010002", 0x7) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00'}) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.358721708s ago: executing program 6 (id=1412): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x2}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000050e8850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="85ffffff0000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 2.069675807s ago: executing program 5 (id=1413): syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @remote, 0x0, 0x6, [@remote, @multicast2, @loopback, @multicast1, @multicast1, @private=0xa010101]}, 0x28) 438.974291ms ago: executing program 6 (id=1414): r0 = socket(0x1d, 0x3, 0x1) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mq_open(&(0x7f0000000b80)='j\xb5I&\x9e)~\xc6\xad\xf6m\x8f\x0f:\x8bc=Ws\x8b\xb7\xdb\x1a!\xda\xcd\x90|\xd9=iFt\x93\\l\xb1\xa2\xd1H\xbd?\xa9\xa5\xd4\xbe\xc8\xc9\x8d)\x19\v\x10\x8a2\v\xd0\x19\xebYq\xf5\xb7\x99&q\xb3&\xfa:\x0f\xb0\v\xf9\x90\x02\x9b]\xdaR\x99JY\x82~\x12X\xbb\xbc\x03\xa9\xd7\f\x85\xa5\xa9\f\xc5o\x91\xe8\x85\xf2\x15\x81\b\xf1\xcb\xb27*\x1eD\nJ+D<\xbe\xc8\xaaM\xb7V\xe9\x16\xab\xf9S\xdeg\x81#\x0fT&\x11\xbb\x8e\xec\xf6@\xcb\n\xdb\x01\x94\xdd\xbd\x9fg\xa0\xeb\xfb\x10P\r\x1b?\xb4\r\xa9\xb6\x05\x10\x92\x89\xf9\xc7\xa5\xab\xa5\xec\xa1\x1d)>\xc8\x88\xde\xc8c\xfb\x05\x95W\x85\xdc\x03\xd3+\x10H\\\b\x00\x17K\xbb\xffn\x0e \xbb,\x96<\x01\xd5\xf5#l\x14\xbf\xfa\xd4\xe1n[\\N\xf4\xde\x8bg\xbb#\a\x8e\xdd\xc6\xa0~\xf6\x03\xca\xf2\x1d\xc4\x10\x95\xddDt\x19r\x82\xd0=\x14\xe8fE\x0e\x06\xc7\xe5\ne\xfd\xb3\xfc\xc3 \x7f\x7f\x1ay\x01\xf5\xf7z\x02\xbd\x1bup\nZ\x823\x9d\xd0!p\xb9\x16\x93\xea]2\xeb\xaao\x98\x01\xf7\x0e\xbd<\xc1\x84JE-s\x17,\xca\xb1?0\x99@ ^\x12\x91\xdb\xb1\xa8\xc38VD2\xf31\x16\xef!\xd3X\xbd[t\xe7\xe6\xd7\x87\xc3\xdd\b\x90\'\x82\x02x\x9d!q\xd7\xdd\x84\xb8\al\t\xf0K\xdep\xb7\xe5\xe79\x13\xaf\r;\xa96\xa9H\x99\x8f!\xa1\xe8\xa3\fv\xc8\x93.\x10\xdc\x1dR\xab\xe1U\x03\xc4\x97\x8b:\x0e\xb2\xe1xk\xc0\'f\x1b\xbb\xb6\v\xd7[*dI\xf8\x94\x04\xa4\xbfw', 0x43, 0xc8, &(0x7f0000000740)={0x200010, 0xcd, 0x4000800}) (async) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8905, &(0x7f0000000140)={'wlan0\x00'}) futex(0x0, 0x8, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x2) sched_setattr(0x0, 0x0, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x1, &(0x7f0000006680)) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 64) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r2]) (async, rerun: 64) chdir(&(0x7f0000000100)='./file0\x00') (async, rerun: 32) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 32) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) unlink(0x0) (async) add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d3813e5d06cb20a9a5a5b978dcf1cff44a58b3f2a68c88e42849b0ba62408336a29ae38d85e41a1be93413065797fbc07f8aa16882c781eb61e3b8acf6df3f1e42d2f23111cfe6183b673fc787f12b07fd394b5500a7c74486d50ae25acfea6a504729264bc68ac537a033731b08eb8173b3bb8c2d612ad4b21e5e42492f0ab6eafcf5b12188ef925", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) bind$can_j1939(r0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) (async) kexec_load(0x8, 0x0, 0x0, 0x160000) (async, rerun: 64) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x14000080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004040) (async) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) 438.467536ms ago: executing program 0 (id=1415): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000240)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 350.203507ms ago: executing program 0 (id=1416): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x9, &(0x7f0000000980)='norecovery') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa31e3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_create(0x7) 189.418853ms ago: executing program 6 (id=1417): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000080)=@req3={0x5, 0x80000001, 0x7fffffff, 0x29fb, 0x6, 0x5, 0x1}, 0x1c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000600000000000000fcffffff9500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) read$dsp(r4, &(0x7f0000000200)=""/6, 0x6) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0x10004) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x4}, 0x6) write(r0, &(0x7f0000000080)="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"/335, 0x14f) 98.226861ms ago: executing program 5 (id=1418): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000000)="2e000000010002", 0x7) 151.544µs ago: executing program 5 (id=1419): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1', 0x1) 0s ago: executing program 0 (id=1420): r0 = socket$inet(0x2, 0x3, 0x101) shutdown(r0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff00000007058102"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000700)='\x00') read$char_usb(r3, &(0x7f0000000600)=""/64, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x31) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) kernel console output (not intermixed with test programs): can_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 215.707690][ T9333] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xa530 instead [ 215.711009][ T9333] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xacd3 instead [ 215.714649][ T9333] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 215.718556][ T9333] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 215.722294][ T9333] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xa530 instead [ 215.726133][ T9333] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xacd3 instead [ 215.729518][ T9333] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 215.732992][ T9333] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 215.736463][ T9333] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xa530 instead [ 215.739879][ T9333] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xacd3 instead [ 215.743506][ T9333] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 215.748198][ T9333] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 215.752589][ T9333] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xa530 instead [ 215.756912][ T9333] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xacd3 instead [ 215.761413][ T9333] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 215.766058][ T9333] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 215.770685][ T9333] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xa530 instead [ 215.775084][ T9333] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xacd3 instead [ 215.779533][ T9333] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 215.783863][ T9333] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 215.788146][ T9333] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xa530 instead [ 215.792347][ T9333] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xacd3 instead [ 215.796809][ T9333] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 215.800632][ T9333] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 215.804406][ T9333] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xa530 instead [ 215.807911][ T9333] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xacd3 instead [ 215.811488][ T9333] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 215.814906][ T9333] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 215.818271][ T9333] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xa530 instead [ 215.821869][ T9333] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xacd3 instead [ 215.825367][ T9333] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 215.829296][ T9333] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 216.098121][ T5823] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 216.101403][ T5823] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 216.104163][ T5823] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 216.108818][ T5823] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 216.169580][ T5823] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 216.173232][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 216.175762][ T5823] usb 6-1: Product: syz [ 216.177220][ T5823] usb 6-1: Manufacturer: syz [ 216.183471][ T5823] cdc_wdm 6-1:1.0: skipping garbage [ 216.185752][ T5823] cdc_wdm 6-1:1.0: skipping garbage [ 216.189966][ T34] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.195132][ T34] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.199475][ T5823] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 216.201995][ T5823] cdc_wdm 6-1:1.0: Unknown control protocol [ 216.204508][ T34] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 216.210397][ T34] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 216.216693][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.236612][ T34] usb 10-1: config 0 descriptor?? [ 216.378848][ T9340] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 216.503818][ T34] usbhid 10-1:0.0: can't add hid device: -71 [ 216.505850][ T34] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 216.513515][ T34] usb 10-1: USB disconnect, device number 9 [ 216.694048][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 4 bytes [ 216.879400][ T5838] usb 6-1: USB disconnect, device number 18 [ 218.118179][ T9374] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 218.118280][ T9376] netlink: 20 bytes leftover after parsing attributes in process `syz.3.822'. [ 218.128427][ T9374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.131630][ T9374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.253165][ T9379] netlink: 'syz.3.822': attribute type 23 has an invalid length. [ 219.094149][ T9397] gretap1: entered promiscuous mode [ 219.111627][ T9397] batman_adv: batadv0: Adding interface: gretap1 [ 219.114039][ T9397] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.123799][ T9397] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 219.497894][ T9409] binder: 9407:9409 ioctl 4018620d 0 returned -22 [ 219.954868][ T9420] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 220.196080][ T9429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.199297][ T9429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.199791][ T9430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.218268][ T9430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.664089][ T9426] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.669092][ T9426] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.959120][ T42] audit: type=1326 audit(1786236882.071:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.5.838" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 220.968352][ T42] audit: type=1326 audit(1786236882.071:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.5.838" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 220.977985][ T42] audit: type=1326 audit(1786236882.071:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.5.838" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708efec code=0x7ffc0000 [ 220.990045][ T42] audit: type=1326 audit(1786236882.071:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.5.838" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 221.001159][ T42] audit: type=1326 audit(1786236882.071:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.5.838" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 221.010194][ T42] audit: type=1326 audit(1786236882.071:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.5.838" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708efec code=0x7ffc0000 [ 221.020949][ T42] audit: type=1326 audit(1786236882.071:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.5.838" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 221.030483][ T42] audit: type=1326 audit(1786236882.071:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.5.838" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 221.039806][ T42] audit: type=1326 audit(1786236882.071:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.5.838" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708efec code=0x7ffc0000 [ 221.048766][ T42] audit: type=1326 audit(1786236882.071:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.5.838" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 221.219679][ T850] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 221.435820][ T850] usb 8-1: config 0 has an invalid interface number: 143 but max is 0 [ 221.439207][ T850] usb 8-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 221.443472][ T850] usb 8-1: config 0 has no interface number 0 [ 221.445925][ T850] usb 8-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 221.458379][ T850] usb 8-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 221.477287][ T850] usb 8-1: config 0 interface 143 has no altsetting 0 [ 221.514982][ T850] usb 8-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 221.518021][ T850] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.525359][ T850] usb 8-1: Product: syz [ 221.527051][ T850] usb 8-1: Manufacturer: syz [ 221.528907][ T850] usb 8-1: SerialNumber: syz [ 221.540745][ T850] usb 8-1: config 0 descriptor?? [ 221.763482][ T850] usb 8-1: USB disconnect, device number 19 [ 221.816678][ T9444] syzkaller0: entered promiscuous mode [ 221.819560][ T9444] syzkaller0: entered allmulticast mode [ 221.855139][ T9444] IPv6: A: Disabled Multicast RS [ 222.140538][ T9466] binder: 9465:9466 ioctl 4018620d 0 returned -22 [ 222.227291][ T10] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 222.294129][ T9461] overlayfs: upper fs does not support file handles, falling back to index=off. [ 222.377041][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 222.380058][ T10] usb 8-1: config 0 has an invalid interface number: 143 but max is 0 [ 222.382753][ T10] usb 8-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 222.389192][ T10] usb 8-1: config 0 has no interface number 0 [ 222.392237][ T10] usb 8-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 222.399047][ T10] usb 8-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 222.408049][ T10] usb 8-1: config 0 interface 143 has no altsetting 0 [ 222.414344][ T10] usb 8-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 222.418701][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.424026][ T10] usb 8-1: Product: syz [ 222.426504][ T10] usb 8-1: Manufacturer: syz [ 222.431367][ T10] usb 8-1: SerialNumber: syz [ 222.436736][ T10] usb 8-1: config 0 descriptor?? [ 222.665004][ T10] usb 8-1: USB disconnect, device number 20 [ 223.103890][ T9472] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 223.609777][ T9499] netlink: 36 bytes leftover after parsing attributes in process `syz.0.847'. [ 223.726646][ T9509] binder: 9507:9509 ioctl 4018620d 0 returned -22 [ 224.027278][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 224.038605][ T9522] Invalid argument reading file caps for ./file0 [ 224.241737][ T9522] bond1: Removing last arp target with arp_interval on [ 224.249206][ T9522] bond1: entered promiscuous mode [ 224.251598][ T9522] bond1: entered allmulticast mode [ 224.261371][ T9522] 8021q: adding VLAN 0 to HW filter on device bond1 [ 224.816772][ T9510] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 224.978627][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 224.981764][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.988926][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 224.997227][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 225.002692][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 225.008332][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.013951][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 225.017742][ T10] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 225.020408][ T10] usb 6-1: Manufacturer: syz [ 225.032623][ T10] usb 6-1: config 0 descriptor?? [ 225.143633][ T9545] fuse: Unknown parameter 'rootm' [ 225.307293][ T10] rc_core: IR keymap rc-hauppauge not found [ 225.312452][ T10] Registered IR keymap rc-empty [ 225.317939][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 225.337118][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 225.359033][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 225.382312][ T9557] binder: 9556:9557 ioctl c0306201 0 returned -14 [ 225.382952][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input9 [ 225.403531][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 225.428443][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 225.447300][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 225.459079][ T9513] netlink: 16 bytes leftover after parsing attributes in process `syz.1.860'. [ 225.467313][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 225.480393][ T9513] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 225.488654][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 225.491400][ T9513] bond3 (unregistering): Released all slaves [ 225.507326][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 225.527652][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 225.549485][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 225.567144][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 225.588075][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 225.613376][ T10] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 225.619007][ T10] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 225.629952][ T10] usb 6-1: USB disconnect, device number 19 [ 226.249321][ T9564] Cannot find del_set index 4 as target [ 226.262965][ T9564] netlink: 8 bytes leftover after parsing attributes in process `syz.5.871'. [ 226.658076][ T9580] tipc: Started in network mode [ 226.659737][ T9580] tipc: Node identity ffff0001, cluster identity 4711 [ 226.661882][ T9580] tipc: Node number set to 4294901761 [ 226.666264][ T9580] Invalid ELF header magic: != ELF [ 227.194416][ T9575] overlayfs: overlapping lowerdir path [ 227.237694][ T5590] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 227.441781][ T5590] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.457304][ T5590] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 227.471608][ T5590] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.560721][ T5590] usb 6-1: config 0 descriptor?? [ 227.807753][ C2] raw-gadget.0 gadget.1: ignoring, device is not running [ 227.843436][ T5590] usbhid 6-1:0.0: can't add hid device: -71 [ 227.905617][ T5590] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 228.211180][ T9587] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 228.222558][ T9587] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 228.232030][ T9587] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0007 instead [ 228.236526][ T9587] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000d0: 0x0008 instead [ 228.241282][ T9587] jffs2: Empty flash at 0x000000d4 ends at 0x000000d8 [ 228.243732][ T9587] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000e8: 0x0003 instead [ 228.248332][ T9587] jffs2: Empty flash at 0x000000fc ends at 0x00000100 [ 228.251150][ T9587] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 228.254611][ T9587] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 228.258278][ T5590] usb 6-1: USB disconnect, device number 20 [ 228.261900][ T9587] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 228.268298][ T9587] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000244: 0x00e4 instead [ 228.271816][ T9587] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000024c: 0x00e4 instead [ 228.275108][ T9587] jffs2: Further such events for this erase block will not be printed [ 228.278668][ T9587] jffs2: Empty flash at 0x000004c8 ends at 0x000004cc [ 228.280907][ T9587] jffs2: Empty flash at 0x000004ec ends at 0x000004f0 [ 228.283253][ T9587] jffs2: Empty flash at 0x00000950 ends at 0x00000954 [ 228.285570][ T9587] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001300: 0x00c0 instead [ 228.306572][ T9587] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 228.309647][ T9587] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 228.553533][ T9595] binder: 9594:9595 ioctl c0306201 0 returned -14 [ 229.197132][ T5590] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 229.358648][ T5590] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 229.364206][ T5590] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 229.370443][ T5590] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 229.380603][ T5590] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 229.385241][ T5590] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.391705][ T5590] usb 6-1: Product: syz [ 229.393344][ T5590] usb 6-1: Manufacturer: syz [ 229.400294][ T5590] usb 6-1: SerialNumber: syz [ 229.556434][ T34] usb 6-1: USB disconnect, device number 21 [ 230.412991][ T9627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.417748][ T9627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.427579][ T9627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.893'. [ 230.432610][ T9627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.893'. [ 230.524293][ T9630] loop5: detected capacity change from 0 to 7 [ 230.529111][ T9630] Dev loop5: unable to read RDB block 7 [ 230.530845][ T9630] loop5: AHDI p1 [ 230.533153][ T9630] loop5: partition table partially beyond EOD, truncated [ 230.645638][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 230.645652][ T42] audit: type=1800 audit(1786236891.691:232): pid=9630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.894" name="nofua" dev="configfs" ino=26088 res=0 errno=0 [ 230.961746][ T9637] netlink: Conntrack attr has 12 unknown bytes [ 230.963846][ T9637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.076615][ T9652] netlink: 'syz.1.899': attribute type 7 has an invalid length. [ 232.093605][ T9652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.899'. [ 232.106437][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.899'. [ 232.162139][ T9653] 9p: Bad value for 'rfdno' [ 232.317901][ T9655] overlayfs: upper fs does not support file handles, falling back to index=off. [ 233.397557][ T9667] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 233.723457][ T9687] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 238.935197][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.920'. [ 239.132329][ T9710] overlayfs: upper fs does not support file handles, falling back to index=off. [ 239.749697][ T9713] netlink: 28 bytes leftover after parsing attributes in process `syz.0.924'. [ 239.753033][ T9713] netlink: 28 bytes leftover after parsing attributes in process `syz.0.924'. [ 239.758858][ T9713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.924'. [ 239.761719][ T9713] netlink: 'syz.0.924': attribute type 10 has an invalid length. [ 239.764183][ T9713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.924'. [ 239.965201][ T9717] syzkaller0: entered promiscuous mode [ 239.967854][ T9717] syzkaller0: entered allmulticast mode [ 240.035907][ T9721] binder: BINDER_SET_CONTEXT_MGR already set [ 240.044361][ T9721] binder: 9719:9721 ioctl 4018620d 80004a80 returned -16 [ 240.387117][ T1033] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 240.542333][ T1033] usb 10-1: Using ep0 maxpacket: 8 [ 240.548352][ T1033] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 240.551194][ T1033] usb 10-1: config 179 has no interface number 0 [ 240.555021][ T1033] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 240.564601][ T1033] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 240.583085][ T1033] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 240.590300][ T1033] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 240.609430][ T1033] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 240.620286][ T1033] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 240.627039][ T1033] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.637805][ T9732] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 240.749176][ T42] audit: type=1326 audit(1786236901.861:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.0.923" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 240.796576][ T42] audit: type=1326 audit(1786236901.861:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.0.923" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 240.840899][ T42] audit: type=1326 audit(1786236901.871:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.0.923" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 240.880521][ T42] audit: type=1326 audit(1786236901.871:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.0.923" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 240.908809][ T42] audit: type=1326 audit(1786236901.871:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.0.923" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf706efec code=0x7ffc0000 [ 240.924307][ T42] audit: type=1326 audit(1786236901.871:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.0.923" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 240.943656][ T42] audit: type=1326 audit(1786236901.871:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.0.923" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 240.962876][ T42] audit: type=1326 audit(1786236901.881:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.0.923" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706efec code=0x7ffc0000 [ 240.971649][ T42] audit: type=1326 audit(1786236901.881:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.0.923" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 240.995451][ T42] audit: type=1326 audit(1786236901.881:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.0.923" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 241.508603][ T64] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 241.852053][ T34] usb 10-1: USB disconnect, device number 10 [ 241.852129][ C1] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 241.859565][ C1] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 241.903899][ T9753] binder: BINDER_SET_CONTEXT_MGR already set [ 241.906397][ T9753] binder: 9752:9753 ioctl 4018620d 80000100 returned -16 [ 241.913438][ T9753] binder: BINDER_SET_CONTEXT_MGR already set [ 241.915895][ T9753] binder: 9752:9753 ioctl 4018620d 80004a80 returned -16 [ 243.066650][ T9751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.928'. [ 243.070447][ T9751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.928'. [ 243.768642][ T11] block nbd0: Possible stuck request ffff88802798e000: control (read@0,1024B). Runtime 30 seconds [ 243.775139][ T11] block nbd0: Possible stuck request ffff88802798e1c0: control (read@1024,1024B). Runtime 30 seconds [ 243.779699][ T11] block nbd0: Possible stuck request ffff88802798e380: control (read@2048,2048B). Runtime 30 seconds [ 246.666015][ T9780] comedi comedi3: comedi_config --init_data is deprecated [ 246.743163][ T8753] IPVS: starting estimator thread 0... [ 246.907840][ T9784] IPVS: using max 25 ests per chain, 60000 per kthread [ 247.195743][ T9776] netlink: 'syz.0.944': attribute type 1 has an invalid length. [ 247.218991][ T9789] binder: BINDER_SET_CONTEXT_MGR already set [ 247.221718][ T9789] binder: 9788:9789 ioctl 4018620d 80000100 returned -16 [ 247.231831][ T9789] binder: BINDER_SET_CONTEXT_MGR already set [ 247.234579][ T9789] binder: 9788:9789 ioctl 4018620d 80004a80 returned -16 [ 247.240109][ T9789] binder: 9788:9789 ioctl c0306201 0 returned -14 [ 248.342087][ T9801] netlink: 'syz.5.943': attribute type 4 has an invalid length. [ 248.345555][ T9801] netlink: 28 bytes leftover after parsing attributes in process `syz.5.943'. [ 248.627816][ T8753] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 248.689555][ T9804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.945'. [ 248.800040][ T8753] usb 10-1: Using ep0 maxpacket: 32 [ 248.813942][ T8753] usb 10-1: config 0 has no interfaces? [ 248.835228][ T8753] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 248.850338][ T8753] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 248.861377][ T8753] usb 10-1: Product: syz [ 248.866178][ T8753] usb 10-1: Manufacturer: syz [ 248.877492][ T8753] usb 10-1: SerialNumber: syz [ 248.941380][ T8753] usb 10-1: config 0 descriptor?? [ 249.467432][ T8753] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 249.647490][ T8753] usb 8-1: Using ep0 maxpacket: 16 [ 249.666315][ T8753] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 249.669969][ T8753] usb 8-1: config 0 has no interface number 0 [ 249.687988][ T8753] usb 8-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 249.691882][ T8753] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.695041][ T8753] usb 8-1: Product: syz [ 249.698745][ T8753] usb 8-1: Manufacturer: syz [ 249.700706][ T8753] usb 8-1: SerialNumber: syz [ 249.716130][ T8753] usb 8-1: config 0 descriptor?? [ 249.789516][ T8753] hub 8-1:0.132: bad descriptor, ignoring hub [ 249.809461][ T8753] hub 8-1:0.132: probe with driver hub failed with error -5 [ 249.876033][ T8753] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.132/input/input11 [ 251.091105][ T34] usb 10-1: USB disconnect, device number 11 [ 251.951771][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 251.951791][ T42] audit: type=1800 audit(1786236913.061:261): pid=9804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.945" name="file0" dev="9p" ino=76573403 res=0 errno=0 [ 252.038217][ T8753] usb 8-1: USB disconnect, device number 21 [ 252.249437][ T9827] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 252.319032][ T9829] binder: 9828:9829 ioctl c0306201 0 returned -14 [ 252.946447][ T9842] /dev/nullb0: Can't open blockdev [ 253.673962][ T9860] netlink: 36 bytes leftover after parsing attributes in process `syz.3.962'. [ 254.084305][ T9866] bridge0: port 3(syz_tun) entered disabled state [ 254.140596][ T9866] syz_tun (unregistering): left allmulticast mode [ 254.149864][ T9866] syz_tun (unregistering): left promiscuous mode [ 254.155689][ T9868] binder: BINDER_SET_CONTEXT_MGR already set [ 254.156932][ T9866] bridge0: port 3(syz_tun) entered disabled state [ 254.157966][ T9868] binder: 9867:9868 ioctl 4018620d 80000100 returned -16 [ 254.168592][ T9868] binder: BINDER_SET_CONTEXT_MGR already set [ 254.171078][ T9868] binder: 9867:9868 ioctl 4018620d 80004a80 returned -16 [ 254.174521][ T9868] binder: 9867:9868 ioctl c0306201 0 returned -14 [ 254.313795][ T9871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.321595][ T9871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.361701][ T9871] /dev/nullb0: Can't open blockdev [ 255.120504][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.207873][ T5741] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 255.214117][ T5741] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 255.219120][ T5741] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 255.227519][ T5741] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 255.231405][ T5741] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 255.272759][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.419065][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.569283][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.703522][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.972673][ T9906] netlink: 'syz.0.974': attribute type 1 has an invalid length. [ 256.013533][ T9906] 8021q: adding VLAN 0 to HW filter on device bond4 [ 256.073151][ T9906] bond4: (slave geneve5): making interface the new active one [ 256.084102][ T9906] bond4: (slave geneve5): Enslaving as an active interface with an up link [ 256.191763][ T12] bridge_slave_1: left allmulticast mode [ 256.193620][ T12] bridge_slave_1: left promiscuous mode [ 256.196127][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.222715][ T12] bridge_slave_0: left allmulticast mode [ 256.224545][ T12] bridge_slave_0: left promiscuous mode [ 256.228544][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.317825][ T12] batman_adv: batadv0: Removing interface: gretap1 [ 256.361467][ T12] bond1 (unregistering): (slave geneve2): Releasing active interface [ 256.384533][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.392706][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.396108][ T9909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.975'. [ 256.401243][ T12] bond0 (unregistering): Released all slaves [ 256.414335][ T12] bond1 (unregistering): Released all slaves [ 256.423075][ T12] bond2 (unregistering): Released all slaves [ 256.475853][ T42] audit: type=1326 audit(1786236917.581:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9908 comm="syz.1.975" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703efec code=0x0 [ 256.479076][ T9882] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.485593][ T9882] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.498118][ T9882] bridge_slave_0: entered allmulticast mode [ 256.505867][ T9882] bridge_slave_0: entered promiscuous mode [ 256.514070][ T9882] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.518858][ T9882] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.524462][ T9882] bridge_slave_1: entered allmulticast mode [ 256.532691][ T9882] bridge_slave_1: entered promiscuous mode [ 256.728303][ T9882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.735428][ T9882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.796575][ T12] tipc: Left network mode [ 256.843877][ T9882] team0: Port device team_slave_0 added [ 256.855206][ T9882] team0: Port device team_slave_1 added [ 256.939106][ T9882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.941990][ T9882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.950516][ T9882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.955297][ T9882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.959118][ T9882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.967361][ T9882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.269196][ T64] Bluetooth: hci2: command tx timeout [ 257.471316][ T9882] hsr_slave_0: entered promiscuous mode [ 257.477647][ T9882] hsr_slave_1: entered promiscuous mode [ 257.480381][ T9882] debugfs: 'hsr0' already exists in 'hsr' [ 257.482120][ T9882] Cannot create hsr debugfs directory [ 257.485377][ T5441] 8021q: adding VLAN 0 to HW filter on device eth13 [ 257.661588][ T12] hsr_slave_0: left promiscuous mode [ 257.672273][ T12] hsr_slave_1: left promiscuous mode [ 257.681824][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.685316][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.694384][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.700412][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.720840][ T12] veth1_macvtap: left promiscuous mode [ 257.727934][ T12] veth0_macvtap: left promiscuous mode [ 257.733434][ T12] veth1_vlan: left promiscuous mode [ 257.736273][ T12] veth0_vlan: left promiscuous mode [ 258.271066][ T12] team0 (unregistering): Port device team_slave_1 removed [ 258.339390][ T12] team0 (unregistering): Port device dummy0 removed [ 258.433450][ T5441] 8021q: adding VLAN 0 to HW filter on device eth14 [ 258.553988][ T9945] sch_tbf: burst 1023 is lower than device lo mtu (11337746) ! [ 258.691562][ T9882] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 258.698995][ T9882] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 258.703066][ T9882] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 258.713419][ T9882] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 258.720017][ T9882] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 258.732131][ T9882] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 258.739076][ T9882] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 258.760148][ T9882] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 258.879170][ T9882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.895705][ T9882] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.901424][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.903717][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.920621][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.922807][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.942083][ T5441] 8021q: adding VLAN 0 to HW filter on device eth15 [ 258.972457][ T12] IPVS: stop unused estimator thread 0... [ 258.989954][ T9961] netlink: 116 bytes leftover after parsing attributes in process `syz.1.980'. [ 259.286607][ T5441] 8021q: adding VLAN 0 to HW filter on device eth16 [ 259.319391][ T9980] netlink: Conntrack attr has 12 unknown bytes [ 259.322007][ T9980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.347291][ T64] Bluetooth: hci2: command tx timeout [ 259.350567][ T9882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.502962][ T9991] comedi comedi2: board detection failed [ 259.643706][ T9882] veth0_vlan: entered promiscuous mode [ 259.672813][ T9882] veth1_vlan: entered promiscuous mode [ 259.737132][ T29] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 259.756789][ T9882] veth0_macvtap: entered promiscuous mode [ 259.773541][ T9882] veth1_macvtap: entered promiscuous mode [ 259.819933][ T9882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.829733][ T9882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.898969][ T29] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 259.901898][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.937525][ T7223] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.942291][ T7223] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.967601][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.974653][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.052467][ T3565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.054990][ T3565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.074009][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.076506][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.127749][ T29] cdc_acm 10-1:1.0: ttyACM0: USB ACM device [ 260.142889][ T29] usb 10-1: USB disconnect, device number 12 [ 260.162295][T10007] bond0: Error: CAN devices cannot be enslaved [ 260.527154][ T10] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 260.680274][ T10] usb 11-1: Using ep0 maxpacket: 8 [ 260.684791][ T10] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 260.693316][ T10] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 260.697839][ T10] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 260.702017][ T10] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 260.710149][ T10] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 260.714023][ T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.930078][ T10] usb 11-1: GET_CAPABILITIES returned 0 [ 260.931885][ T10] usbtmc 11-1:16.0: can't read capabilities [ 261.134595][T10007] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 261.141522][T10007] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 261.428540][ T64] Bluetooth: hci2: command tx timeout [ 261.703071][T10030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.710041][T10030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.198853][ T42] audit: type=1804 audit(1786236923.311:263): pid=10040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.992" name="/newroot/256/file0" dev="tmpfs" ino=1421 res=1 errno=0 [ 262.617095][T10047] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 262.619711][T10047] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 262.630378][T10047] vhci_hcd vhci_hcd.0: Device attached [ 262.679442][T10047] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 262.907345][ T5823] usb 38-1: SetAddress Request (2) to port 0 [ 262.910493][ T5823] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 263.027156][ T5590] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 263.127563][T10048] vhci_hcd: connection reset by peer [ 263.132767][ T9073] vhci_hcd vhci_hcd.0: stop threads [ 263.134777][ T9073] vhci_hcd vhci_hcd.0: release socket [ 263.140596][ T9073] vhci_hcd vhci_hcd.0: disconnect device [ 263.162857][ T850] usb 11-1: USB disconnect, device number 2 [ 263.182943][ T5590] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.188876][ T5590] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 263.197030][ T5590] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.204895][ T5590] usb 10-1: config 0 descriptor?? [ 263.295887][T10058] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 40 [ 263.302742][T10058] netlink: 8 bytes leftover after parsing attributes in process `syz.6.999'. [ 263.441431][ T5590] usbhid 10-1:0.0: can't add hid device: -71 [ 263.443760][ T5590] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 263.450088][ T5590] usb 10-1: USB disconnect, device number 13 [ 263.507117][ T64] Bluetooth: hci2: command tx timeout [ 263.897066][ T29] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 263.903513][T10065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1001'. [ 264.480115][ T29] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 264.717185][ T8753] usb 11-1: new full-speed USB device number 3 using dummy_hcd [ 264.825081][T10079] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 264.829265][T10079] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 264.833298][T10079] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0007 instead [ 264.836953][T10079] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000d0: 0x0008 instead [ 264.842453][T10079] jffs2: Empty flash at 0x000000d4 ends at 0x000000d8 [ 264.845225][T10079] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000e8: 0x0003 instead [ 264.850692][T10079] jffs2: Empty flash at 0x000000fc ends at 0x00000100 [ 264.855512][T10079] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 264.861258][T10079] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 264.867424][T10079] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 264.872345][T10079] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000244: 0x00e4 instead [ 264.876641][T10079] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000024c: 0x00e4 instead [ 264.876851][ T8753] usb 11-1: device descriptor read/64, error -71 [ 264.883514][T10079] jffs2: Further such events for this erase block will not be printed [ 264.888669][T10079] jffs2: Empty flash at 0x000004c8 ends at 0x000004cc [ 264.893295][T10079] jffs2: Empty flash at 0x000004ec ends at 0x000004f0 [ 264.897849][T10079] jffs2: Empty flash at 0x00000950 ends at 0x00000954 [ 264.907224][T10079] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001300: 0x00c0 instead [ 264.982820][T10079] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 264.986106][T10079] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 265.042080][ T29] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 265.047332][ T29] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 265.060171][ T29] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 265.063570][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.066517][ T29] usb 10-1: Product: syz [ 265.068302][ T29] usb 10-1: Manufacturer: syz [ 265.070092][ T29] usb 10-1: SerialNumber: syz [ 265.857101][ T8753] usb 11-1: new full-speed USB device number 4 using dummy_hcd [ 265.921368][T10094] FAULT_INJECTION: forcing a failure. [ 265.921368][T10094] name failslab, interval 1, probability 0, space 0, times 0 [ 265.926094][T10094] CPU: 1 UID: 0 PID: 10094 Comm: syz.1.1011 Tainted: G L syzkaller #0 PREEMPT(full) [ 265.926123][T10094] Tainted: [L]=SOFTLOCKUP [ 265.926128][T10094] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 265.926149][T10094] Call Trace: [ 265.926166][T10094] [ 265.926172][T10094] dump_stack_lvl+0x100/0x190 [ 265.926283][T10094] should_fail_ex.cold+0x5/0xa [ 265.926308][T10094] should_failslab+0xc2/0x120 [ 265.926338][T10094] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 265.926365][T10094] ? __alloc_skb+0x5b7/0x710 [ 265.926436][T10094] ? __alloc_skb+0x140/0x710 [ 265.926457][T10094] __alloc_skb+0x140/0x710 [ 265.926474][T10094] ? __alloc_skb+0x5b7/0x710 [ 265.926492][T10094] ? __pfx___alloc_skb+0x10/0x10 [ 265.926515][T10094] netlink_alloc_large_skb+0x69/0x150 [ 265.926543][T10094] netlink_sendmsg+0x680/0xda0 [ 265.926564][T10094] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.926583][T10094] ? apparmor_socket_sendmsg+0x15b/0x270 [ 265.926630][T10094] ____sys_sendmsg+0xa4d/0xbe0 [ 265.926645][T10094] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.926663][T10094] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.926687][T10094] ___sys_sendmsg+0x190/0x1e0 [ 265.926704][T10094] ? __pfx____sys_sendmsg+0x10/0x10 [ 265.926729][T10094] ? find_held_lock+0x2b/0x80 [ 265.926767][T10094] __sys_sendmsg+0x160/0x210 [ 265.926788][T10094] ? __pfx___sys_sendmsg+0x10/0x10 [ 265.926813][T10094] ? __pfx_ksys_write+0x10/0x10 [ 265.926837][T10094] __do_fast_syscall_32+0xe7/0x970 [ 265.926894][T10094] ? lockdep_hardirqs_on+0x78/0x100 [ 265.926915][T10094] do_fast_syscall_32+0x32/0x70 [ 265.926936][T10094] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 265.926956][T10094] RIP: 0023:0xf703efec [ 265.926977][T10094] Code: Unable to access opcode bytes at 0xf703efc2. [ 265.926983][T10094] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 265.927000][T10094] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 265.927009][T10094] RDX: 0000000000044004 RSI: 0000000000000000 RDI: 0000000000000000 [ 265.927017][T10094] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 265.927026][T10094] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 265.927034][T10094] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 265.927052][T10094] [ 265.987117][ T8753] usb 11-1: device descriptor read/64, error -71 [ 266.147405][ T8753] usb usb11-port1: attempt power cycle [ 266.487252][ T8753] usb 11-1: new full-speed USB device number 5 using dummy_hcd [ 266.507739][ T8753] usb 11-1: device descriptor read/8, error -71 [ 266.578991][ T5838] usb 10-1: USB disconnect, device number 14 [ 266.887137][T10117] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 267.027178][ T8753] usb 11-1: new full-speed USB device number 6 using dummy_hcd [ 267.387565][ T8753] usb 11-1: device descriptor read/8, error -71 [ 267.510051][ T8753] usb usb11-port1: unable to enumerate USB device [ 268.237278][ T5823] usb 38-1: device descriptor read/8, error -110 [ 268.389758][T10132] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1023'. [ 268.398452][T10132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1023'. [ 268.405589][ T29] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 268.410242][ T29] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 268.414052][ T29] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 268.417408][ T29] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 268.420646][ T29] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 268.423767][ T29] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 268.426834][ T29] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 268.430404][ T29] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 268.433586][ T29] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 268.436645][ T29] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 268.456135][ T29] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.03 Device [syz1] on syz1 [ 268.536692][T10137] fido_id[10137]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 268.592251][T10139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1024'. [ 268.904200][T10152] evm: overlay not supported [ 269.013559][T10158] batman_adv: batadv0: Adding interface: veth0 [ 269.015740][T10158] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.019210][ T5823] usb usb38-port1: attempt power cycle [ 269.023660][T10158] batman_adv: batadv0: Interface activated: veth0 [ 269.089781][T10159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.092243][T10159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.096074][T10159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.098700][T10159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.106160][T10159] batman_adv: batadv0: Interface deactivated: veth0 [ 269.111138][T10159] batman_adv: batadv0: Removing interface: veth0 [ 269.597980][ T5823] usb usb38-port1: unable to enumerate USB device [ 269.647115][ T42] audit: type=1326 audit(1786236930.731:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10175 comm="syz.6.1034" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 269.654491][ T42] audit: type=1326 audit(1786236930.731:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10175 comm="syz.6.1034" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 269.664358][ T42] audit: type=1326 audit(1786236930.731:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10175 comm="syz.6.1034" exe="/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf704efec code=0x7ffc0000 [ 269.747078][T10178] pim6reg: entered allmulticast mode [ 269.754184][T10178] pim6reg: left allmulticast mode [ 269.775267][ T42] audit: type=1326 audit(1786236930.881:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10175 comm="syz.6.1034" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704f008 code=0x7ffc0000 [ 269.784643][ T42] audit: type=1326 audit(1786236930.881:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10175 comm="syz.6.1034" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 269.797064][ T42] audit: type=1326 audit(1786236930.881:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10175 comm="syz.6.1034" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 269.937097][ T5590] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 270.088741][ T5590] usb 11-1: config index 0 descriptor too short (expected 9, got 0) [ 270.092910][ T5590] usb 11-1: can't read configurations, error -22 [ 270.227168][ T5590] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 270.476082][ T5590] usb 11-1: config index 0 descriptor too short (expected 9, got 0) [ 270.479260][ T5590] usb 11-1: can't read configurations, error -22 [ 270.482361][ T5590] usb usb11-port1: attempt power cycle [ 270.817176][ T5590] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 270.841219][ T5590] usb 11-1: config index 0 descriptor too short (expected 9, got 0) [ 270.846002][ T5590] usb 11-1: can't read configurations, error -22 [ 270.977103][ T5590] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 271.001316][ T5590] usb 11-1: config index 0 descriptor too short (expected 9, got 0) [ 271.007032][ T5590] usb 11-1: can't read configurations, error -22 [ 271.011914][ T5590] usb usb11-port1: unable to enumerate USB device [ 271.082467][T10205] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 271.082467][T10205] Ue[%#s' [ 271.387210][ T5851] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 271.548598][ T5851] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 271.551862][ T5851] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 271.558757][ T5851] usb 10-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 271.562905][ T5851] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.566019][ T5851] usb 10-1: Product: syz [ 271.567536][ T5851] usb 10-1: Manufacturer: syz [ 271.569129][ T5851] usb 10-1: SerialNumber: syz [ 271.913631][ T5851] usblp 10-1:1.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 271.922334][ T5851] usb 10-1: USB disconnect, device number 15 [ 271.932833][ T5851] usblp0: removed [ 273.354498][T10248] netlink: Conntrack attr has 12 unknown bytes [ 273.356725][T10248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.436652][T10246] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 273.446794][T10246] syz.6.1047: vmalloc error: size 15032385536, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 273.460785][T10246] CPU: 2 UID: 0 PID: 10246 Comm: syz.6.1047 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.460834][T10246] Tainted: [L]=SOFTLOCKUP [ 273.460842][T10246] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 273.460852][T10246] Call Trace: [ 273.460860][T10246] [ 273.460870][T10246] dump_stack_lvl+0x100/0x190 [ 273.460903][T10246] warn_alloc.cold+0x94/0xa8 [ 273.460936][T10246] ? __pfx_warn_alloc+0x10/0x10 [ 273.460975][T10246] ? __pfx___schedule+0x10/0x10 [ 273.461009][T10246] __vmalloc_node_range_noprof+0x136c/0x1630 [ 273.461042][T10246] ? irqentry_exit+0x24d/0xa00 [ 273.461069][T10246] ? lockdep_hardirqs_on+0x78/0x100 [ 273.461099][T10246] ? irqentry_exit+0x24d/0xa00 [ 273.461130][T10246] ? disksize_store+0x11a/0x4d0 [ 273.461177][T10246] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 273.461212][T10246] ? __pfx___might_resched+0x10/0x10 [ 273.461253][T10246] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 273.461295][T10246] ? disksize_store+0x11a/0x4d0 [ 273.461316][T10246] __vmalloc_node_noprof+0xad/0xf0 [ 273.461343][T10246] ? disksize_store+0x11a/0x4d0 [ 273.461368][T10246] disksize_store+0x11a/0x4d0 [ 273.461399][T10246] ? __pfx_disksize_store+0x10/0x10 [ 273.461421][T10246] dev_attr_store+0x58/0x80 [ 273.461459][T10246] ? __pfx_dev_attr_store+0x10/0x10 [ 273.461488][T10246] sysfs_kf_write+0xf2/0x150 [ 273.461526][T10246] kernfs_fop_write_iter+0x3e0/0x5f0 [ 273.461550][T10246] ? __pfx_sysfs_kf_write+0x10/0x10 [ 273.461581][T10246] vfs_write+0x6ac/0x1050 [ 273.461600][T10246] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 273.461626][T10246] ? __pfx_vfs_write+0x10/0x10 [ 273.461641][T10246] ? find_held_lock+0x2b/0x80 [ 273.461681][T10246] ksys_write+0x12a/0x250 [ 273.461700][T10246] ? __pfx_ksys_write+0x10/0x10 [ 273.461725][T10246] __do_fast_syscall_32+0xe7/0x970 [ 273.461757][T10246] do_fast_syscall_32+0x32/0x70 [ 273.461783][T10246] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.461806][T10246] RIP: 0023:0xf704efec [ 273.461831][T10246] Code: Unable to access opcode bytes at 0xf704efc2. [ 273.461839][T10246] RSP: 002b:00000000f53fb50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 273.461859][T10246] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000340 [ 273.461874][T10246] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 273.461884][T10246] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 273.461895][T10246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.461906][T10246] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 273.461932][T10246] [ 273.461996][T10246] Mem-Info: [ 273.567768][T10246] active_anon:9221 inactive_anon:2428 isolated_anon:0 [ 273.567768][T10246] active_file:469 inactive_file:29652 isolated_file:0 [ 273.567768][T10246] unevictable:0 dirty:301 writeback:0 [ 273.567768][T10246] slab_reclaimable:6650 slab_unreclaimable:56200 [ 273.567768][T10246] mapped:26072 shmem:7261 pagetables:1764 [ 273.567768][T10246] sec_pagetables:382 bounce:0 [ 273.567768][T10246] kernel_misc_reclaimable:0 [ 273.567768][T10246] free:30700 free_pcp:32170 free_cma:0 [ 273.586357][T10246] Node 0 active_anon:4kB inactive_anon:6060kB active_file:48kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:0kB writeback:0kB shmem:5984kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8704kB pagetables:1188kB sec_pagetables:1160kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 273.599899][T10246] Node 1 active_anon:36880kB inactive_anon:3652kB active_file:1828kB inactive_file:118516kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104256kB dirty:1204kB writeback:0kB shmem:23060kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6500kB pagetables:5868kB sec_pagetables:368kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 273.614146][T10246] Node 0 DMA free:2216kB boost:14940kB min:15684kB low:20292kB high:24900kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:344kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:28kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:1272kB local_pcp:0kB free_cma:0kB [ 273.627168][T10246] lowmem_reserve[]: 0 280 280 280 280 [ 273.630131][T10246] Node 0 DMA32 free:5440kB boost:79872kB min:93800kB low:179920kB high:266040kB reserved_highatomic:2048KB free_highatomic:1604KB active_anon:4kB inactive_anon:5716kB active_file:48kB inactive_file:92kB unevictable:0kB writepending:0kB zspages:56kB present:1032196kB managed:287072kB mlocked:0kB bounce:0kB free_pcp:25732kB local_pcp:0kB free_cma:0kB [ 273.643480][T10246] lowmem_reserve[]: 0 0 0 0 0 [ 273.646185][T10246] Node 1 DMA32 free:115144kB boost:0kB min:46008kB low:330468kB high:614928kB reserved_highatomic:8192KB free_highatomic:8192KB active_anon:36880kB inactive_anon:3652kB active_file:1828kB inactive_file:118516kB unevictable:0kB writepending:1204kB zspages:11848kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:101536kB local_pcp:7604kB free_cma:0kB [ 273.662795][T10246] lowmem_reserve[]: 0 0 0 0 0 [ 273.665528][T10246] Node 0 DMA: 98*4kB (U) 62*8kB (U) 25*16kB (U) 17*32kB (U) 4*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2216kB [ 273.673454][T10246] Node 0 DMA32: 4*4kB (UH) 2*8kB (UH) 2*16kB (UH) 28*32kB (UH) 44*64kB (UMEH) 11*128kB (UEH) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5440kB [ 273.681731][T10246] Node 1 DMA32: 2*4kB (UM) 2*8kB (UE) 63*16kB (UE) 240*32kB (UE) 154*64kB (UE) 38*128kB (UE) 58*256kB (UME) 26*512kB (UME) 8*1024kB (ME) 15*2048kB (UM) 6*4096kB (UMH) = 115080kB [ 273.691939][T10246] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 273.696033][T10246] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 273.700404][T10246] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 273.704499][T10246] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 273.708652][T10246] 39177 total pagecache pages [ 273.710927][T10246] 1797 pages in swap cache [ 273.713255][T10246] Free swap = 31176kB [ 273.715305][T10246] Total swap = 124996kB [ 273.717621][T10246] 524155 pages RAM [ 273.719569][T10246] 0 pages HighMem/MovableOnly [ 273.721907][T10246] 211494 pages reserved [ 273.723944][T10246] 0 pages cma reserved [ 273.927856][ T2230] block nbd0: Possible stuck request ffff88802798e000: control (read@0,1024B). Runtime 60 seconds [ 273.934380][ T2230] block nbd0: Possible stuck request ffff88802798e1c0: control (read@1024,1024B). Runtime 60 seconds [ 273.937672][ T2230] block nbd0: Possible stuck request ffff88802798e380: control (read@2048,2048B). Runtime 60 seconds [ 274.189698][T10252] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.838860800.0), cmd(9) [ 274.677156][ T5888] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 274.801307][T10270] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1055'. [ 274.828655][ T5888] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.831617][ T5888] usb 11-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 274.836087][ T5888] usb 11-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 274.839521][ T5888] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 274.845754][ T5888] usb 11-1: Product: syz [ 274.850660][ T5888] usb 11-1: Manufacturer: syz [ 275.911270][ T5888] usb 11-1: USB disconnect, device number 11 [ 276.281299][T10294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1063'. [ 276.341845][T10285] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1059'. [ 277.181308][T10326] netlink: 'syz.5.1071': attribute type 1 has an invalid length. [ 278.002240][T10344] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1075'. [ 279.158184][T10355] binder: 10353:10355 ioctl c0306201 80000180 returned -14 [ 279.881314][ T42] audit: type=1107 audit(1786236940.991:270): pid=10368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 280.338758][T10383] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1088'. [ 282.051082][T10413] mass_storage.usb0/lun.0: unable to open backing file: fi [ 282.094474][T10414] usb usb7: usbfs: process 10414 (syz.6.1099) did not claim interface 0 before use [ 282.185885][T10422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1102'. [ 282.196904][T10422] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1102'. [ 282.201254][T10420] binder: 10419:10420 ioctl c0306201 800004c0 returned -14 [ 282.208009][T10420] binder: 10419:10420 ioctl c0306201 800001c0 returned -14 [ 282.216845][T10420] binder: 10419:10420 ioctl c0306201 80000180 returned -14 [ 282.379840][T10418] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1101'. [ 282.627157][ T5590] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 282.778669][ T5590] usb 11-1: config 1 has an invalid interface number: 7 but max is 0 [ 282.788798][ T5590] usb 11-1: config 1 has no interface number 0 [ 282.790806][ T5590] usb 11-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 282.807057][ T5590] usb 11-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 282.811428][ T5590] usb 11-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.827471][ T5590] usb 11-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 282.837059][ T5590] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.844726][ T5590] usb 11-1: Product: syz [ 282.847028][ T5590] usb 11-1: Manufacturer: syz [ 282.850184][ T5590] usb 11-1: SerialNumber: syz [ 282.856819][T10436] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 282.873703][T10446] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 283.153586][T10451] binder: BINDER_SET_CONTEXT_MGR already set [ 283.159298][T10451] binder: 10450:10451 ioctl 4018620d 80000100 returned -16 [ 283.160968][T10446] md: pers->run() failed ... [ 283.169192][T10451] binder: BINDER_SET_CONTEXT_MGR already set [ 283.171807][T10451] binder: 10450:10451 ioctl 4018620d 80004a80 returned -16 [ 283.676598][ T5590] usb 11-1: Error in usbnet_get_endpoints (-71) [ 283.721274][ T5590] usb 11-1: USB disconnect, device number 12 [ 283.986584][T10466] FAULT_INJECTION: forcing a failure. [ 283.986584][T10466] name failslab, interval 1, probability 0, space 0, times 0 [ 283.995321][T10466] CPU: 0 UID: 0 PID: 10466 Comm: syz.6.1117 Tainted: G L syzkaller #0 PREEMPT(full) [ 283.995343][T10466] Tainted: [L]=SOFTLOCKUP [ 283.995347][T10466] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 283.995354][T10466] Call Trace: [ 283.995371][T10466] [ 283.995378][T10466] dump_stack_lvl+0x100/0x190 [ 283.995398][T10466] should_fail_ex.cold+0x5/0xa [ 283.995412][T10466] should_failslab+0xc2/0x120 [ 283.995430][T10466] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 283.995446][T10466] ? alloc_inode+0x183/0x250 [ 283.995477][T10466] alloc_inode+0x183/0x250 [ 283.995492][T10466] iget_locked+0x1d9/0x6d0 [ 283.995508][T10466] ? __pfx_iget_locked+0x10/0x10 [ 283.995522][T10466] ? kernfs_root+0xee/0x2a0 [ 283.995532][T10466] ? kernfs_root+0xee/0x2a0 [ 283.995546][T10466] kernfs_get_inode+0x46/0x470 [ 283.995564][T10466] kernfs_iop_lookup+0x1a7/0x2d0 [ 283.995577][T10466] __lookup_slow+0x155/0x320 [ 283.995594][T10466] lookup_slow+0x50/0x70 [ 283.995609][T10466] link_path_walk+0x1377/0x1cc0 [ 283.995632][T10466] path_openat+0x1c9/0x4280 [ 283.995643][T10466] ? kasan_save_track+0x14/0x30 [ 283.995658][T10466] ? __kasan_slab_alloc+0x89/0x90 [ 283.995672][T10466] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 283.995685][T10466] ? do_sys_openat2+0xc7/0x1e0 [ 283.995706][T10466] ? __pfx_path_openat+0x10/0x10 [ 283.995722][T10466] do_file_open+0x20e/0x430 [ 283.995732][T10466] ? __lock_acquire+0x49f/0x1a40 [ 283.995752][T10466] ? __pfx_do_file_open+0x10/0x10 [ 283.995769][T10466] ? __pfx_kfree_link+0x10/0x10 [ 283.995790][T10466] ? _raw_spin_unlock+0x28/0x50 [ 283.995805][T10466] ? alloc_fd+0x471/0x7a0 [ 283.995831][T10466] do_sys_openat2+0x10f/0x1e0 [ 283.995849][T10466] ? __pfx_do_sys_openat2+0x10/0x10 [ 283.995866][T10466] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 283.995886][T10466] __ia32_compat_sys_openat+0x12d/0x210 [ 283.995903][T10466] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 283.995919][T10466] ? fput+0x79/0x100 [ 283.995932][T10466] ? exit_to_user_mode_loop+0x166/0x6f0 [ 283.995951][T10466] ? rcu_is_watching+0x12/0xc0 [ 283.995968][T10466] __do_fast_syscall_32+0xe7/0x970 [ 283.995985][T10466] ? lockdep_hardirqs_on+0x78/0x100 [ 283.996007][T10466] do_fast_syscall_32+0x32/0x70 [ 283.996024][T10466] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 283.996039][T10466] RIP: 0023:0xf704efec [ 283.996054][T10466] Code: Unable to access opcode bytes at 0xf704efc2. [ 283.996059][T10466] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 283.996070][T10466] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000700 [ 283.996077][T10466] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 283.996083][T10466] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 283.996090][T10466] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 283.996096][T10466] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 283.996110][T10466] [ 284.325376][ T5851] kernel write not supported for file /vcsa (pid: 5851 comm: kworker/1:5) [ 284.448439][T10468] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 284.463863][T10468] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 284.466020][T10468] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 284.468687][T10468] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 284.475227][T10468] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 284.878932][T10483] FAULT_INJECTION: forcing a failure. [ 284.878932][T10483] name failslab, interval 1, probability 0, space 0, times 0 [ 284.883936][T10483] CPU: 3 UID: 0 PID: 10483 Comm: syz.6.1120 Tainted: G L syzkaller #0 PREEMPT(full) [ 284.883956][T10483] Tainted: [L]=SOFTLOCKUP [ 284.883960][T10483] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 284.883967][T10483] Call Trace: [ 284.883972][T10483] [ 284.883979][T10483] dump_stack_lvl+0x100/0x190 [ 284.883996][T10483] should_fail_ex.cold+0x5/0xa [ 284.884010][T10483] should_failslab+0xc2/0x120 [ 284.884026][T10483] __kmalloc_noprof+0xfc/0x820 [ 284.884041][T10483] ? tomoyo_encode2+0xfb/0x3c0 [ 284.884075][T10483] tomoyo_encode2+0xfb/0x3c0 [ 284.884093][T10483] tomoyo_encode+0x29/0x50 [ 284.884108][T10483] tomoyo_realpath_from_path+0x18c/0x690 [ 284.884128][T10483] tomoyo_path_number_perm+0x23c/0x580 [ 284.884142][T10483] ? tomoyo_path_number_perm+0x22e/0x580 [ 284.884157][T10483] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 284.884172][T10483] ? get_pid_task+0x106/0x250 [ 284.884206][T10483] ? find_held_lock+0x2b/0x80 [ 284.884219][T10483] ? __fget_files+0x215/0x3d0 [ 284.884249][T10483] ? hook_file_ioctl_common+0x140/0x440 [ 284.884266][T10483] ? __fget_files+0x215/0x3d0 [ 284.884279][T10483] ? __fget_files+0x21f/0x3d0 [ 284.884292][T10483] security_file_ioctl_compat+0xd3/0x230 [ 284.884308][T10483] __ia32_compat_sys_ioctl+0xc2/0x360 [ 284.884328][T10483] __do_fast_syscall_32+0xe7/0x970 [ 284.884346][T10483] ? lockdep_hardirqs_on+0x78/0x100 [ 284.884362][T10483] do_fast_syscall_32+0x32/0x70 [ 284.884379][T10483] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 284.884394][T10483] RIP: 0023:0xf704efec [ 284.884408][T10483] Code: Unable to access opcode bytes at 0xf704efc2. [ 284.884413][T10483] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 284.884424][T10483] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000007ab [ 284.884431][T10483] RDX: 0000000080001900 RSI: 0000000000000000 RDI: 0000000000000000 [ 284.884438][T10483] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 284.884444][T10483] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 284.884450][T10483] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 284.884464][T10483] [ 284.884481][T10483] ERROR: Out of memory at tomoyo_realpath_from_path. [ 285.157175][ T5851] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 285.181817][T10496] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 285.186171][T10496] overlayfs: overlapping lowerdir path [ 285.309266][ T5851] usb 10-1: config 0 has an invalid interface number: 50 but max is 0 [ 285.311973][ T5851] usb 10-1: config 0 has no interface number 0 [ 285.313942][ T5851] usb 10-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 285.319149][ T5851] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 285.321985][ T5851] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.324510][ T5851] usb 10-1: Product: syz [ 285.325790][ T5851] usb 10-1: Manufacturer: syz [ 285.327768][ T5851] usb 10-1: SerialNumber: syz [ 285.330985][ T5851] usb 10-1: config 0 descriptor?? [ 285.339189][ T5851] yurex 10-1:0.50: USB YUREX device now attached to Yurex #0 [ 285.538839][ T5851] usb 10-1: USB disconnect, device number 16 [ 285.546413][ T5851] yurex 10-1:0.50: USB YUREX #0 now disconnected [ 285.996032][T10501] geneve2: entered promiscuous mode [ 285.998554][T10501] geneve2: entered allmulticast mode [ 286.230304][T10508] Invalid argument reading file caps for ./file0 [ 286.313506][T10508] bond3: Removing last arp target with arp_interval on [ 286.461658][T10508] bond3: entered promiscuous mode [ 286.468189][T10508] bond3: entered allmulticast mode [ 286.470555][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 286.470562][ T5741] Bluetooth: hci4: command 0x0c1a tx timeout [ 286.473185][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 286.484039][T10508] 8021q: adding VLAN 0 to HW filter on device bond3 [ 286.657145][ T850] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 286.768597][T10512] syzkaller0: entered promiscuous mode [ 286.770451][T10512] syzkaller0: entered allmulticast mode [ 287.337614][ T850] usb 10-1: Using ep0 maxpacket: 8 [ 287.346906][ T850] usb 10-1: unable to get BOS descriptor or descriptor too short [ 287.382281][ T850] usb 10-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 287.389816][ T850] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.401923][ T850] usb 10-1: Product: syz [ 287.411829][ T850] usb 10-1: Manufacturer: syz [ 287.417473][ T850] usb 10-1: SerialNumber: syz [ 287.494543][T10527] netlink: Conntrack attr has 12 unknown bytes [ 287.497730][T10527] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.656369][T10507] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1129'. [ 287.669938][T10507] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1129'. [ 287.698808][ T850] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 287.713616][ T850] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 287.920395][ T850] usb 10-1: USB disconnect, device number 17 [ 288.111782][ T5755] udevd[5755]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 288.236357][T10535] binder: BINDER_SET_CONTEXT_MGR already set [ 288.239243][T10535] binder: 10533:10535 ioctl 4018620d 80000100 returned -16 [ 288.244170][T10535] binder: BINDER_SET_CONTEXT_MGR already set [ 288.246114][T10535] binder: 10533:10535 ioctl 4018620d 80004a80 returned -16 [ 288.472400][T10539] binder: 10538:10539 ioctl c0306201 80000080 returned -14 [ 288.478169][T10539] binder: 10538:10539 ioctl c0306201 800003c0 returned -14 [ 288.547716][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 288.847599][T10549] Invalid argument reading file caps for ./file0 [ 288.947570][T10549] bond1: Removing last arp target with arp_interval on [ 288.956335][T10549] bond1: entered promiscuous mode [ 288.958199][T10549] bond1: entered allmulticast mode [ 288.962394][T10549] 8021q: adding VLAN 0 to HW filter on device bond1 [ 290.028281][ T64] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 290.030395][T10555] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1145'. [ 290.098515][T10555] team0 (unregistering): Port device team_slave_0 removed [ 290.115358][T10555] team0 (unregistering): Port device team_slave_1 removed [ 290.159584][T10564] syzkaller1: entered promiscuous mode [ 290.164239][T10564] syzkaller1: entered allmulticast mode [ 290.627147][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 291.015052][T10577] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1152'. [ 291.069581][T10582] binder: BINDER_SET_CONTEXT_MGR already set [ 291.073812][T10582] binder: 10581:10582 ioctl 4018620d 80000100 returned -16 [ 291.079500][T10582] binder: BINDER_SET_CONTEXT_MGR already set [ 291.081422][T10582] binder: 10581:10582 ioctl 4018620d 80004a80 returned -16 [ 291.158732][T10583] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 291.240876][T10583] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256 [ 291.246884][T10583] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512 [ 291.251289][T10583] UDF-fs: warning (device md0): udf_load_vrs: No anchor found [ 291.253738][T10583] UDF-fs: Scanning with blocksize 512 failed [ 291.258797][ T5823] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 291.263295][T10583] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256 [ 291.285956][T10583] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512 [ 291.290437][T10583] UDF-fs: warning (device md0): udf_load_vrs: No anchor found [ 291.297054][T10583] UDF-fs: Scanning with blocksize 1024 failed [ 291.305886][T10583] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256 [ 291.314559][T10583] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512 [ 291.319472][T10583] UDF-fs: warning (device md0): udf_load_vrs: No anchor found [ 291.322655][T10583] UDF-fs: Scanning with blocksize 2048 failed [ 291.325827][T10583] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256 [ 291.332904][T10583] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512 [ 291.337687][T10583] UDF-fs: warning (device md0): udf_load_vrs: No anchor found [ 291.340792][T10583] UDF-fs: Scanning with blocksize 4096 failed [ 291.343263][T10583] UDF-fs: warning (device md0): udf_fill_super: No partition found (1) [ 291.434246][ T5823] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 291.439119][ T5823] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 291.442247][ T5823] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 97, changing to 10 [ 291.446739][ T5823] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 24929, setting to 1024 [ 291.452444][ T5823] usb 11-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 291.455386][ T5823] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.458417][ T5823] usb 11-1: Product: syz [ 291.459836][ T5823] usb 11-1: Manufacturer: syz [ 291.461372][ T5823] usb 11-1: SerialNumber: syz [ 291.470434][ T5823] usb 11-1: config 0 descriptor?? [ 291.784725][ T5823] adutux 11-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 291.796317][ T5823] usb 11-1: USB disconnect, device number 13 [ 291.969184][T10592] syz.5.1157 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000 [ 291.989971][T10592] CPU: 2 UID: 0 PID: 10592 Comm: syz.5.1157 Tainted: G L syzkaller #0 PREEMPT(full) [ 291.989997][T10592] Tainted: [L]=SOFTLOCKUP [ 291.990001][T10592] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 291.990010][T10592] Call Trace: [ 291.990016][T10592] [ 291.990033][T10592] dump_stack_lvl+0x100/0x190 [ 291.990061][T10592] dump_header+0xfb/0x606 [ 291.990076][T10592] oom_kill_process.cold+0xd/0x330 [ 291.990093][T10592] out_of_memory+0x340/0x14f0 [ 291.990121][T10592] ? __pfx_out_of_memory+0x10/0x10 [ 291.990138][T10592] mem_cgroup_out_of_memory+0xc6/0x130 [ 291.990154][T10592] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 291.990180][T10592] ? find_held_lock+0x2b/0x80 [ 291.990199][T10592] ? do_raw_spin_unlock+0x145/0x1e0 [ 291.990212][T10592] ? _raw_spin_unlock+0x28/0x50 [ 291.990228][T10592] try_charge_memcg+0x6e5/0xdf0 [ 291.990251][T10592] ? __pfx_try_charge_memcg+0x10/0x10 [ 291.990269][T10592] ? find_held_lock+0x2b/0x80 [ 291.990284][T10592] ? rcu_read_unlock+0x17/0x60 [ 291.990302][T10592] ? rcu_read_unlock+0x17/0x60 [ 291.990324][T10592] obj_cgroup_charge_pages+0x22/0x1d0 [ 291.990342][T10592] __memcg_kmem_charge_page+0x1c1/0x4d0 [ 291.990361][T10592] ? wakeup_kswapd+0x6e/0x670 [ 291.990382][T10592] __alloc_frozen_pages_noprof+0x365/0x2dc0 [ 291.990403][T10592] ? __pfx_stack_trace_save+0x10/0x10 [ 291.990419][T10592] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 291.990438][T10592] ? lock_acquire+0x1b9/0x370 [ 291.990451][T10592] ? __lock_acquire+0x49f/0x1a40 [ 291.990474][T10592] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 291.990493][T10592] ? policy_nodemask+0xed/0x4f0 [ 291.990513][T10592] alloc_pages_mpol+0x1fb/0x540 [ 291.990532][T10592] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 291.990550][T10592] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 291.990574][T10592] alloc_pages_noprof+0x1a/0x160 [ 291.990586][T10592] pgd_alloc+0x4d/0x630 [ 291.990602][T10592] ? mutex_init_lockdep+0xf1/0x120 [ 291.990615][T10592] mm_init+0x6ab/0xf00 [ 291.990629][T10592] mm_alloc+0x47/0x60 [ 291.990641][T10592] alloc_bprm+0x2ba/0x9d0 [ 291.990661][T10592] do_execveat_common.isra.0+0x19c/0x580 [ 291.990681][T10592] ? do_getname+0x191/0x390 [ 291.990698][T10592] __ia32_compat_sys_execve+0x9c/0xd0 [ 291.990720][T10592] __do_fast_syscall_32+0xe7/0x970 [ 291.990753][T10592] ? lockdep_hardirqs_on+0x78/0x100 [ 291.990770][T10592] do_fast_syscall_32+0x32/0x70 [ 291.990787][T10592] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 291.990804][T10592] RIP: 0023:0xf708efec [ 291.990822][T10592] Code: Unable to access opcode bytes at 0xf708efc2. [ 291.990827][T10592] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 000000000000000b [ 291.990839][T10592] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 0000000000000000 [ 291.990845][T10592] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 291.990852][T10592] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 291.990858][T10592] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 291.990864][T10592] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 291.990878][T10592] [ 291.991212][T10592] memory: usage 8kB, limit 8kB, failcnt 21 [ 292.107803][T10592] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 292.112313][T10592] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 292.114516][T10592] Memory cgroup stats for /syz5/test: [ 292.114693][T10592] cache 0 [ 292.117961][T10592] rss 0 [ 292.118982][T10592] rss_huge 0 [ 292.120363][T10592] shmem 0 [ 292.121469][T10592] mapped_file 0 [ 292.122673][T10592] dirty 0 [ 292.123603][T10592] writeback 0 [ 292.124675][T10592] workingset_refault_anon 0 [ 292.126201][T10592] workingset_refault_file 0 [ 292.128461][T10592] swap 0 [ 292.129516][T10592] swapcached 0 [ 292.130945][T10592] pgpgin 0 [ 292.132216][T10592] pgpgout 0 [ 292.133384][T10592] pgfault 0 [ 292.134417][T10592] pgmajfault 0 [ 292.135793][T10592] inactive_anon 0 [ 292.140649][T10592] active_anon 0 [ 292.142063][T10592] inactive_file 0 [ 292.143592][T10592] active_file 0 [ 292.145124][T10592] unevictable 0 [ 292.146472][T10592] hierarchical_memory_limit 8192 [ 292.149905][T10592] hierarchical_memsw_limit 9223372036854771712 [ 292.152294][T10592] total_cache 0 [ 292.153712][T10592] total_rss 0 [ 292.155112][T10592] total_rss_huge 0 [ 292.156621][T10592] total_shmem 0 [ 292.158720][T10592] total_mapped_file 0 [ 292.160389][T10592] total_dirty 0 [ 292.161864][T10592] total_writeback 0 [ 292.163310][T10592] total_workingset_refault_anon 0 [ 292.164992][T10592] total_workingset_refault_file 0 [ 292.166644][T10592] total_swap 0 [ 292.168621][T10592] total_swapcached 0 [ 292.170292][T10592] total_pgpgin 0 [ 292.171800][T10592] total_pgpgout 0 [ 292.173285][T10592] total_pgfault 0 [ 292.174742][T10592] total_pgmajfault 0 [ 292.176356][T10592] total_inactive_anon 0 [ 292.179447][T10592] total_active_anon 0 [ 292.181222][T10592] total_inactive_file 0 [ 292.182983][T10592] total_active_file 0 [ 292.184681][T10592] total_unevictable 0 [ 292.186221][T10592] anon_cost 0 [ 292.187938][T10592] file_cost 0 [ 292.189246][T10592] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5/test,task_memcg=/syz5/test [ 292.190417][T10596] CIFS: Attempting to mount //127.0.0.1/share [ 292.193303][T10592] ,task=syz.5.1157,pid=10591,uid=0 [ 292.201262][T10596] CIFS: VFS: Error connecting to socket. Aborting operation. [ 292.201613][T10592] Memory cgroup out of memory: Killed process 10591 (syz.5.1157) total-vm:102156kB, anon-rss:252kB, file-rss:23272kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 292.203745][T10596] CIFS: VFS: cifs_mount failed w/return code = -111 [ 292.293887][T10598] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1159'. [ 292.299220][T10598] netlink: 'syz.5.1159': attribute type 5 has an invalid length. [ 292.306166][T10598] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1159'. [ 292.333416][T10598] geneve3: entered promiscuous mode [ 292.337239][T10598] geneve3: entered allmulticast mode [ 292.348577][ T7223] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 292.351380][ T7223] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 292.354256][ T7223] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 292.356935][ T7223] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 292.623739][T10590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1156'. [ 294.239663][T10652] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1174'. [ 294.243333][T10651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1176'. [ 294.305893][T10656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.523222][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.526708][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.317728][T10671] CIFS: Attempting to mount //127.0.0.1/share [ 295.331807][T10671] CIFS: VFS: Error connecting to socket. Aborting operation. [ 295.334136][T10671] CIFS: VFS: cifs_mount failed w/return code = -111 [ 295.483197][T10665] loop9: detected capacity change from 0 to 2640 [ 295.514837][ T5755] Buffer I/O error on dev loop9, logical block 0, async page read [ 295.519174][ T5755] Buffer I/O error on dev loop9, logical block 0, async page read [ 295.524805][ T5755] Buffer I/O error on dev loop9, logical block 0, async page read [ 295.530907][ T5755] Buffer I/O error on dev loop9, logical block 0, async page read [ 295.535122][ T5755] Buffer I/O error on dev loop9, logical block 0, async page read [ 296.100328][T10676] netlink: 'syz.5.1181': attribute type 4 has an invalid length. [ 296.281696][T10677] 9p: Bad value for 'rfdno' [ 296.576866][T10687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1183'. [ 297.166271][T10702] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1191'. [ 297.529634][T10718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1197'. [ 297.750321][T10727] FAULT_INJECTION: forcing a failure. [ 297.750321][T10727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.754340][T10727] CPU: 1 UID: 0 PID: 10727 Comm: syz.6.1198 Tainted: G L syzkaller #0 PREEMPT(full) [ 297.754370][T10727] Tainted: [L]=SOFTLOCKUP [ 297.754374][T10727] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 297.754381][T10727] Call Trace: [ 297.754386][T10727] [ 297.754392][T10727] dump_stack_lvl+0x100/0x190 [ 297.754410][T10727] should_fail_ex.cold+0x5/0xa [ 297.754423][T10727] _copy_to_iter+0x5a4/0x1720 [ 297.754463][T10727] ? __pfx__copy_to_iter+0x10/0x10 [ 297.754485][T10727] ? rcu_is_watching+0x12/0xc0 [ 297.754500][T10727] ? __up_read+0x333/0x980 [ 297.754515][T10727] copy_page_to_iter+0x285/0x370 [ 297.754534][T10727] process_vm_rw_core.constprop.0+0x5a3/0x950 [ 297.754556][T10727] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 297.754578][T10727] ? iovec_from_user+0xda/0x140 [ 297.754597][T10727] process_vm_rw+0x226/0x2d0 [ 297.754612][T10727] ? __pfx_process_vm_rw+0x10/0x10 [ 297.754625][T10727] ? rcu_is_watching+0x12/0xc0 [ 297.754638][T10727] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 297.754652][T10727] ? lockdep_hardirqs_on+0x78/0x100 [ 297.754670][T10727] ? rcu_is_watching+0x12/0xc0 [ 297.754695][T10727] ? fput+0x79/0x100 [ 297.754711][T10727] __ia32_sys_process_vm_readv+0xdf/0x1b0 [ 297.754726][T10727] ? __do_fast_syscall_32+0x98/0x970 [ 297.754743][T10727] ? lockdep_hardirqs_on+0x78/0x100 [ 297.754758][T10727] __do_fast_syscall_32+0xe7/0x970 [ 297.754774][T10727] ? lockdep_hardirqs_on+0x78/0x100 [ 297.754790][T10727] do_fast_syscall_32+0x32/0x70 [ 297.754807][T10727] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 297.754822][T10727] RIP: 0023:0xf704efec [ 297.754837][T10727] Code: Unable to access opcode bytes at 0xf704efc2. [ 297.754842][T10727] RSP: 002b:00000000f53fb50c EFLAGS: 00000292 ORIG_RAX: 000000000000015b [ 297.754854][T10727] RAX: ffffffffffffffda RBX: 00000000000000b9 RCX: 0000000080008400 [ 297.754861][T10727] RDX: 0000000000000002 RSI: 0000000080008640 RDI: 0000000000000286 [ 297.754867][T10727] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 297.754873][T10727] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 297.754879][T10727] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 297.754894][T10727] [ 298.595740][T10730] netlink: 'syz.6.1201': attribute type 13 has an invalid length. [ 298.607017][T10730] netlink: 'syz.6.1201': attribute type 27 has an invalid length. [ 298.706359][T10734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.709798][T10734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.716758][T10734] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1203'. [ 299.649732][T10753] netlink: 'syz.5.1208': attribute type 32 has an invalid length. [ 299.661590][T10753] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1208'. [ 299.676683][T10753] netlink: 'syz.5.1208': attribute type 32 has an invalid length. [ 299.793800][T10757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1207'. [ 299.936795][T10762] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.838860800.0), cmd(9) [ 300.025347][T10746] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1205'. [ 300.358075][T10776] /dev/nullb0: Can't open blockdev [ 300.458593][T10779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.476472][T10779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.704479][T10777] FAULT_INJECTION: forcing a failure. [ 300.704479][T10777] name failslab, interval 1, probability 0, space 0, times 0 [ 300.717096][T10777] CPU: 3 UID: 0 PID: 10777 Comm: syz.0.1215 Tainted: G L syzkaller #0 PREEMPT(full) [ 300.717129][T10777] Tainted: [L]=SOFTLOCKUP [ 300.717136][T10777] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 300.717147][T10777] Call Trace: [ 300.717155][T10777] [ 300.717162][T10777] dump_stack_lvl+0x100/0x190 [ 300.717190][T10777] should_fail_ex.cold+0x5/0xa [ 300.717212][T10777] should_failslab+0xc2/0x120 [ 300.717239][T10777] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 300.717264][T10777] ? __d_alloc+0x35/0xa50 [ 300.717290][T10777] __d_alloc+0x35/0xa50 [ 300.717312][T10777] d_alloc_pseudo+0x1c/0xc0 [ 300.717337][T10777] alloc_file_pseudo+0x118/0x290 [ 300.717363][T10777] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 300.717387][T10777] ? mas_preallocate+0x521/0x14a0 [ 300.717412][T10777] __shmem_file_setup+0x205/0x460 [ 300.717440][T10777] ? __pfx___shmem_file_setup+0x10/0x10 [ 300.717469][T10777] ? vm_area_alloc+0x1f/0x160 [ 300.717490][T10777] shmem_zero_setup+0x96/0x1b0 [ 300.717513][T10777] __mmap_region+0x24ef/0x2db0 [ 300.717537][T10777] ? __pfx___mmap_region+0x10/0x10 [ 300.717569][T10777] ? __pfx_native_flush_tlb_one_user+0x10/0x10 [ 300.717594][T10777] ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0 [ 300.717646][T10777] ? __lock_acquire+0x49f/0x1a40 [ 300.717713][T10777] mmap_region+0x35d/0x620 [ 300.717736][T10777] ? __pfx_mmap_region+0x10/0x10 [ 300.717756][T10777] ? shmem_get_unmapped_area+0x141/0x960 [ 300.717774][T10777] ? cap_mmap_addr+0x4b/0x120 [ 300.717793][T10777] ? bpf_lsm_mmap_addr+0x9/0x30 [ 300.717811][T10777] ? security_mmap_addr+0x71/0x1e0 [ 300.717835][T10777] ? __get_unmapped_area+0x255/0x3e0 [ 300.717869][T10777] do_mmap+0xc63/0x12f0 [ 300.717899][T10777] ? __pfx_do_mmap+0x10/0x10 [ 300.717924][T10777] ? __pfx_down_write_killable+0x10/0x10 [ 300.717958][T10777] vm_mmap_pgoff+0x29e/0x470 [ 300.717987][T10777] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 300.718013][T10777] ? __mutex_unlock_slowpath+0x35d/0x930 [ 300.718041][T10777] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 300.718071][T10777] ksys_mmap_pgoff+0xe4/0x610 [ 300.718097][T10777] ? fput+0x79/0x100 [ 300.718117][T10777] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 300.718141][T10777] ? ksys_write+0x1ac/0x250 [ 300.718159][T10777] ? __pfx_ksys_write+0x10/0x10 [ 300.718182][T10777] __do_fast_syscall_32+0xe7/0x970 [ 300.718208][T10777] ? lockdep_hardirqs_on+0x78/0x100 [ 300.718234][T10777] do_fast_syscall_32+0x32/0x70 [ 300.718260][T10777] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 300.718283][T10777] RIP: 0023:0xf706efec [ 300.718305][T10777] Code: Unable to access opcode bytes at 0xf706efc2. [ 300.718312][T10777] RSP: 002b:00000000f543c50c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 300.718330][T10777] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000200000 [ 300.718342][T10777] RDX: 000000000300000b RSI: 0000000000204031 RDI: 00000000ffffffff [ 300.718352][T10777] RBP: 00000000ec776000 R08: 0000000000000000 R09: 0000000000000000 [ 300.718362][T10777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.718372][T10777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 300.718394][T10777] [ 300.938814][T10791] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1217'. [ 301.424592][T10819] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 301.442148][T10819] syz.0.1219: vmalloc error: size 15032385536, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 301.450348][T10819] CPU: 3 UID: 0 PID: 10819 Comm: syz.0.1219 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.450369][T10819] Tainted: [L]=SOFTLOCKUP [ 301.450374][T10819] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 301.450382][T10819] Call Trace: [ 301.450388][T10819] [ 301.450393][T10819] dump_stack_lvl+0x100/0x190 [ 301.450414][T10819] warn_alloc.cold+0x94/0xa8 [ 301.450428][T10819] ? __pfx_warn_alloc+0x10/0x10 [ 301.450449][T10819] ? look_up_lock_class+0x55/0x120 [ 301.450465][T10819] ? stack_trace_save+0x8e/0xc0 [ 301.450496][T10819] ? register_lock_class+0x40/0x560 [ 301.450511][T10819] __vmalloc_node_range_noprof+0x136c/0x1630 [ 301.450538][T10819] ? __lock_acquire+0x49f/0x1a40 [ 301.450556][T10819] ? disksize_store+0x11a/0x4d0 [ 301.450575][T10819] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 301.450599][T10819] ? __pfx___might_resched+0x10/0x10 [ 301.450617][T10819] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 301.450637][T10819] ? disksize_store+0x11a/0x4d0 [ 301.450651][T10819] __vmalloc_node_noprof+0xad/0xf0 [ 301.450668][T10819] ? disksize_store+0x11a/0x4d0 [ 301.450683][T10819] disksize_store+0x11a/0x4d0 [ 301.450697][T10819] ? sysfs_file_kobj+0xe4/0x290 [ 301.450714][T10819] ? __pfx_disksize_store+0x10/0x10 [ 301.450727][T10819] dev_attr_store+0x58/0x80 [ 301.450745][T10819] ? __pfx_dev_attr_store+0x10/0x10 [ 301.450762][T10819] sysfs_kf_write+0xf2/0x150 [ 301.450783][T10819] kernfs_fop_write_iter+0x3e0/0x5f0 [ 301.450822][T10819] ? __pfx_sysfs_kf_write+0x10/0x10 [ 301.450844][T10819] vfs_write+0x6ac/0x1050 [ 301.450858][T10819] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 301.450875][T10819] ? __pfx_vfs_write+0x10/0x10 [ 301.450887][T10819] ? find_held_lock+0x2b/0x80 [ 301.450913][T10819] ksys_write+0x12a/0x250 [ 301.450930][T10819] ? __pfx_ksys_write+0x10/0x10 [ 301.450946][T10819] __do_fast_syscall_32+0xe7/0x970 [ 301.450967][T10819] do_fast_syscall_32+0x32/0x70 [ 301.450987][T10819] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 301.451003][T10819] RIP: 0023:0xf706efec [ 301.451020][T10819] Code: Unable to access opcode bytes at 0xf706efc2. [ 301.451025][T10819] RSP: 002b:00000000f541b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 301.451036][T10819] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000340 [ 301.451043][T10819] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 301.451049][T10819] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 301.451055][T10819] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 301.451061][T10819] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 301.451077][T10819] [ 301.451852][T10819] Mem-Info: [ 301.548641][T10819] active_anon:13398 inactive_anon:2429 isolated_anon:0 [ 301.548641][T10819] active_file:514 inactive_file:33520 isolated_file:0 [ 301.548641][T10819] unevictable:0 dirty:287 writeback:0 [ 301.548641][T10819] slab_reclaimable:6788 slab_unreclaimable:56616 [ 301.548641][T10819] mapped:27922 shmem:11755 pagetables:1795 [ 301.548641][T10819] sec_pagetables:382 bounce:0 [ 301.548641][T10819] kernel_misc_reclaimable:0 [ 301.548641][T10819] free:18131 free_pcp:35419 free_cma:0 [ 301.563968][T10819] Node 0 active_anon:4kB inactive_anon:6052kB active_file:48kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:0kB writeback:0kB shmem:5976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8704kB pagetables:1188kB sec_pagetables:1160kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 301.597183][T10819] Node 1 active_anon:54688kB inactive_anon:3664kB active_file:2008kB inactive_file:133988kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:111656kB dirty:1148kB writeback:0kB shmem:41044kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7436kB pagetables:5992kB sec_pagetables:368kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 301.608168][T10819] Node 0 DMA free:2824kB boost:14940kB min:15684kB low:20292kB high:24900kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:344kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:28kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 301.619383][T10819] lowmem_reserve[]: 0 280 280 280 280 [ 301.623453][T10819] Node 0 DMA32 free:15620kB boost:79872kB min:93800kB low:179920kB high:266040kB reserved_highatomic:2048KB free_highatomic:1604KB active_anon:4kB inactive_anon:5708kB active_file:48kB inactive_file:92kB unevictable:0kB writepending:0kB zspages:56kB present:1032196kB managed:287072kB mlocked:0kB bounce:0kB free_pcp:14272kB local_pcp:468kB free_cma:0kB [ 301.635721][T10819] lowmem_reserve[]: 0 0 0 0 0 [ 301.641870][T10819] Node 1 DMA32 free:53872kB boost:0kB min:46008kB low:330468kB high:614928kB reserved_highatomic:6144KB free_highatomic:6144KB active_anon:54688kB inactive_anon:3664kB active_file:2008kB inactive_file:133988kB unevictable:0kB writepending:1148kB zspages:11848kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:128976kB local_pcp:10996kB free_cma:0kB [ 301.653727][T10819] lowmem_reserve[]: 0 0 0 0 0 [ 301.659091][T10819] Node 0 DMA: 88*4kB (UE) 41*8kB (UE) 28*16kB (UE) 27*32kB (UE) 7*64kB (UE) 1*128kB (U) 1*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2824kB [ 301.664135][T10819] Node 0 DMA32: 72*4kB (UMEH) 58*8kB (UMEH) 27*16kB (UMEH) 166*32kB (UMEH) 58*64kB (UMEH) 11*128kB (UEH) 1*256kB (U) 1*512kB (M) 3*1024kB (M) 0*2048kB 0*4096kB = 15456kB [ 301.669743][T10819] Node 1 DMA32: 736*4kB (UME) 8*8kB (U) 1*16kB (M) 1*32kB (E) 58*64kB (UME) 18*128kB (E) 11*256kB (ME) 16*512kB (UME) 9*1024kB (ME) 4*2048kB (UMH) 4*4096kB (MH) = 53872kB [ 301.675461][T10819] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 301.680769][T10819] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 301.683880][T10819] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 301.690020][T10819] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 301.694258][T10819] 47588 total pagecache pages [ 301.696871][T10819] 1801 pages in swap cache [ 301.701377][T10819] Free swap = 27120kB [ 301.703262][T10819] Total swap = 124996kB [ 301.704707][T10819] 524155 pages RAM [ 301.707212][T10819] 0 pages HighMem/MovableOnly [ 301.710117][T10819] 211494 pages reserved [ 301.711569][T10819] 0 pages cma reserved [ 302.409209][T10834] netlink: Conntrack attr has 12 unknown bytes [ 302.411433][T10834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.073278][T10853] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1228'. [ 304.557413][ T2230] block nbd0: Possible stuck request ffff88802798e000: control (read@0,1024B). Runtime 90 seconds [ 304.560831][ T2230] block nbd0: Possible stuck request ffff88802798e1c0: control (read@1024,1024B). Runtime 90 seconds [ 304.564219][ T2230] block nbd0: Possible stuck request ffff88802798e380: control (read@2048,2048B). Runtime 90 seconds [ 304.668464][ T42] audit: type=1800 audit(1786236965.781:271): pid=10861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1231" name="size" dev="configfs" ino=32229 res=0 errno=0 [ 304.689185][ T42] audit: type=1800 audit(1786236965.781:272): pid=10861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1231" name="zoned" dev="configfs" ino=32230 res=0 errno=0 [ 304.732990][ T42] audit: type=1800 audit(1786236965.781:273): pid=10861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1231" name="zone_size" dev="configfs" ino=32231 res=0 errno=0 [ 304.744972][ T34] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 304.767811][ T42] audit: type=1800 audit(1786236965.781:274): pid=10861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1231" name="power" dev="configfs" ino=32232 res=0 errno=0 [ 304.793028][T10866] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1235'. [ 304.912788][ T34] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.919787][ T34] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.944573][ T34] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 304.966117][ T34] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 304.995748][ T34] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 305.004226][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.020973][ T34] usb 10-1: Product: syz [ 305.023593][T10874] netlink: Conntrack attr has 12 unknown bytes [ 305.025730][T10874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.040564][ T34] usb 10-1: Manufacturer: syz [ 305.052064][ T34] usb 10-1: SerialNumber: syz [ 305.099999][T10870] fuse: Bad value for 'fd' [ 305.397459][ T34] usb 10-1: USB disconnect, device number 18 [ 305.785703][T10872] veth3: entered allmulticast mode [ 305.833251][T10872] bond2: (slave veth3): Enslaving as an active interface with an up link [ 305.904760][T10866] bond2 (unregistering): (slave veth3): Releasing backup interface [ 305.911936][T10866] bond2 (unregistering): Released all slaves [ 306.160482][T10882] netlink: Conntrack attr has 12 unknown bytes [ 306.162745][T10882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.353268][T10889] overlayfs: failed to resolve './file0': -2 [ 307.603155][T10895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1240'. [ 307.621657][ T850] IPVS: starting estimator thread 0... [ 307.707121][T10906] IPVS: using max 29 ests per chain, 69600 per kthread [ 308.457127][ T5823] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 308.587108][ T5823] usb 10-1: device descriptor read/64, error -71 [ 308.587854][T10925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.607130][T10925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.780266][T10932] loop5: detected capacity change from 0 to 7 [ 308.827558][ T5823] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 308.915727][T10932] Dev loop5: unable to read RDB block 7 [ 308.920419][T10932] loop5: unable to read partition table [ 308.924719][T10932] loop5: partition table beyond EOD, truncated [ 308.926693][T10932] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 308.945129][T10940] ip6gre2: entered allmulticast mode [ 308.951106][ T7223] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 308.957141][ T5823] usb 10-1: device descriptor read/64, error -71 [ 309.068345][ T5823] usb usb10-port1: attempt power cycle [ 309.416234][T10956] netlink: 'syz.1.1255': attribute type 3 has an invalid length. [ 309.418877][ T5823] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 309.429543][T10956] netlink: 'syz.1.1255': attribute type 3 has an invalid length. [ 309.438361][ T5823] usb 10-1: device descriptor read/8, error -71 [ 309.677105][ T5823] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 310.273559][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1261'. [ 310.276270][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1261'. [ 310.280232][T10968] netlink: 'syz.0.1261': attribute type 19 has an invalid length. [ 310.283987][T10968] device-mapper: ioctl: Unable to rename non-existent device, to [ 310.283987][T10968] [ 310.386862][T10972] syzkaller0: entered promiscuous mode [ 310.389785][T10972] syzkaller0: entered allmulticast mode [ 310.394889][ T42] audit: type=1800 audit(1786236971.501:275): pid=10974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1262" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 310.434677][ T5823] usb 10-1: device descriptor read/8, error -71 [ 310.537341][ T5823] usb usb10-port1: unable to enumerate USB device [ 311.479074][T10988] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 312.707384][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 312.907143][ T29] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 313.047060][ T29] usb 6-1: device descriptor read/64, error -71 [ 313.067098][ T5823] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 313.197738][ T5823] usb 10-1: device descriptor read/64, error -71 [ 313.297999][ T29] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 313.437054][ T5823] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 313.437244][ T29] usb 6-1: device descriptor read/64, error -71 [ 313.556701][ T29] usb usb6-port1: attempt power cycle [ 313.577079][ T5823] usb 10-1: device descriptor read/64, error -71 [ 313.687482][ T5823] usb usb10-port1: attempt power cycle [ 313.897607][ T29] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 313.918459][ T29] usb 6-1: device descriptor read/8, error -71 [ 314.027154][ T5823] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 314.048004][ T5823] usb 10-1: device descriptor read/8, error -71 [ 314.147298][ C3] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 314.157045][ T29] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 314.192550][T11050] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1287'. [ 314.744778][ T5823] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 314.777824][ T5823] usb 10-1: device descriptor read/8, error -71 [ 314.887437][ T5823] usb usb10-port1: unable to enumerate USB device [ 314.917514][ T29] usb 6-1: device descriptor read/8, error -71 [ 315.097325][ T29] usb usb6-port1: unable to enumerate USB device [ 316.641943][T11082] netlink: 'syz.1.1295': attribute type 5 has an invalid length. [ 316.714093][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.224777][T11088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.228477][T11088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.396816][T11094] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1299'. [ 317.678136][T11088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.701045][T11088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.078383][T11104] netlink: 'syz.6.1301': attribute type 1 has an invalid length. [ 319.538934][T11121] gadgetfs: bound to dummy_udc driver [ 320.132108][T11128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1310'. [ 320.158661][T11142] Bluetooth: MGMT ver 1.23 [ 320.171454][T11134] 9p: Bad value for 'rfdno' [ 320.322772][T11128] veth3: entered allmulticast mode [ 320.337184][ T5590] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 320.392381][T11150] fuse: Bad value for 'fd' [ 320.421599][T11128] bond4: (slave veth3): Enslaving as an active interface with an up link [ 320.445623][T11145] bond4 (unregistering): (slave veth3): Releasing backup interface [ 320.451743][T11145] bond4 (unregistering): Released all slaves [ 320.487110][ T5590] usb 11-1: device descriptor read/64, error -71 [ 320.557089][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 320.767096][ T5590] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 320.938836][ T5590] usb 11-1: device descriptor read/64, error -71 [ 321.052467][ T5590] usb usb11-port1: attempt power cycle [ 321.089679][T11166] FAULT_INJECTION: forcing a failure. [ 321.089679][T11166] name failslab, interval 1, probability 0, space 0, times 0 [ 321.094612][T11166] CPU: 1 UID: 0 PID: 11166 Comm: syz.5.1323 Tainted: G L syzkaller #0 PREEMPT(full) [ 321.094632][T11166] Tainted: [L]=SOFTLOCKUP [ 321.094636][T11166] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 321.094643][T11166] Call Trace: [ 321.094647][T11166] [ 321.094651][T11166] dump_stack_lvl+0x100/0x190 [ 321.094669][T11166] should_fail_ex.cold+0x5/0xa [ 321.094683][T11166] should_failslab+0xc2/0x120 [ 321.094700][T11166] __kmalloc_noprof+0xfc/0x820 [ 321.094714][T11166] ? rcu_is_watching+0x12/0xc0 [ 321.094728][T11166] ? tomoyo_realpath_from_path+0xb6/0x690 [ 321.094755][T11166] tomoyo_realpath_from_path+0xb6/0x690 [ 321.094775][T11166] tomoyo_path_number_perm+0x23c/0x580 [ 321.094788][T11166] ? tomoyo_path_number_perm+0x22e/0x580 [ 321.094803][T11166] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 321.094818][T11166] ? get_pid_task+0x106/0x250 [ 321.094846][T11166] ? find_held_lock+0x2b/0x80 [ 321.094860][T11166] ? __fget_files+0x215/0x3d0 [ 321.094870][T11166] ? hook_file_ioctl_common+0x140/0x440 [ 321.094885][T11166] ? __fget_files+0x215/0x3d0 [ 321.094897][T11166] ? __fget_files+0x21f/0x3d0 [ 321.094910][T11166] security_file_ioctl_compat+0xd3/0x230 [ 321.094927][T11166] __ia32_compat_sys_ioctl+0xc2/0x360 [ 321.094946][T11166] __do_fast_syscall_32+0xe7/0x970 [ 321.094964][T11166] ? lockdep_hardirqs_on+0x78/0x100 [ 321.094981][T11166] do_fast_syscall_32+0x32/0x70 [ 321.094997][T11166] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 321.095013][T11166] RIP: 0023:0xf708efec [ 321.095026][T11166] Code: Unable to access opcode bytes at 0xf708efc2. [ 321.095031][T11166] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 321.095043][T11166] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c028aa03 [ 321.095050][T11166] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 321.095056][T11166] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 321.095062][T11166] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 321.095068][T11166] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 321.095082][T11166] [ 321.095087][T11166] ERROR: Out of memory at tomoyo_realpath_from_path. [ 321.352606][T11174] /dev/nullb0: Can't open blockdev [ 321.397290][ T5590] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 321.420921][ T5590] usb 11-1: device descriptor read/8, error -71 [ 321.667088][ T5590] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 321.693294][ T5590] usb 11-1: device descriptor read/8, error -71 [ 321.807257][ T5590] usb usb11-port1: unable to enumerate USB device [ 323.327087][ T34] usb 10-1: new full-speed USB device number 27 using dummy_hcd [ 323.365795][T11209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1338'. [ 323.478495][ T34] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x6 has an invalid bInterval 0, changing to 4 [ 323.487562][ T34] usb 10-1: config 0 interface 0 has no altsetting 0 [ 323.492101][ T34] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 323.497316][ T34] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 323.505241][ T34] usb 10-1: Product: syz [ 323.506654][ T34] usb 10-1: Manufacturer: syz [ 323.510809][ T34] usb 10-1: SerialNumber: syz [ 323.516278][T11214] fuse: Bad value for 'fd' [ 323.525902][ T34] usb 10-1: config 0 descriptor?? [ 323.532840][ T34] usb 10-1: selecting invalid altsetting 0 [ 323.585146][T11209] veth5: entered allmulticast mode [ 323.705374][T11209] bond5: (slave veth5): Enslaving as an active interface with an up link [ 323.770439][T11213] bond5 (unregistering): (slave veth5): Releasing backup interface [ 323.776875][T11213] bond5 (unregistering): Released all slaves [ 323.998563][ T5823] usb 10-1: USB disconnect, device number 27 [ 324.283525][ T42] audit: type=1800 audit(1786236985.391:276): pid=11216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1339" name="dwFrameInterval" dev="configfs" ino=35953 res=0 errno=0 [ 324.549880][T11244] netlink: 'syz.0.1343': attribute type 2 has an invalid length. [ 324.557449][T11244] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1343'. [ 324.581199][T11244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1343'. [ 324.590917][T11244] netlink: 'syz.0.1343': attribute type 79 has an invalid length. [ 324.617090][ T5823] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 324.757251][ T5823] usb 6-1: device descriptor read/64, error -71 [ 324.798816][T11252] l2tp_ppp: sess 2/0: no socket in recv [ 324.854711][T11254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.870753][T11254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.959631][T11259] syzkaller0: entered promiscuous mode [ 324.962187][T11259] syzkaller0: entered allmulticast mode [ 324.997796][ T5823] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 325.127555][ T5823] usb 6-1: device descriptor read/64, error -71 [ 325.237563][ T5823] usb usb6-port1: attempt power cycle [ 325.577223][ T5823] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 325.597880][ T5823] usb 6-1: device descriptor read/8, error -71 [ 325.776620][T11280] netlink: 'syz.0.1355': attribute type 11 has an invalid length. [ 325.847164][ T5823] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 325.867569][ T5823] usb 6-1: device descriptor read/8, error -71 [ 325.977264][ T5823] usb usb6-port1: unable to enumerate USB device [ 326.003936][T11283] binder: BINDER_SET_CONTEXT_MGR already set [ 326.006053][T11283] binder: 11282:11283 ioctl 4018620d 80000100 returned -16 [ 326.012165][T11283] tipc: Can't bind to reserved service type 1 [ 326.049463][T11285] netlink: 'syz.5.1357': attribute type 2 has an invalid length. [ 326.052331][T11285] netlink: 'syz.5.1357': attribute type 1 has an invalid length. [ 326.369297][T11294] raw_sendmsg: syz.5.1360 forgot to set AF_INET. Fix it! [ 327.054239][T11307] bond3: entered allmulticast mode [ 327.056604][T11307] ipip0: entered allmulticast mode [ 327.063261][T11307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.069074][T11307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.486121][T11313] binder: 11312:11313 ioctl c0306201 0 returned -14 [ 327.491282][T11313] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1368'. [ 327.526293][T11317] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1369'. [ 327.615412][T11324] binder: BINDER_SET_CONTEXT_MGR already set [ 327.619811][T11324] binder: 11323:11324 ioctl 4018620d 80000100 returned -16 [ 327.626904][T11324] binder: BINDER_SET_CONTEXT_MGR already set [ 327.633702][T11324] binder: 11323:11324 ioctl 4018620d 80004a80 returned -16 [ 328.237232][ T5838] usb 11-1: new high-speed USB device number 18 using dummy_hcd [ 328.300510][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802585f400: rx timeout, send abort [ 328.665141][T11348] sit0: entered promiscuous mode [ 328.778855][T11348] netlink: 'syz.5.1380': attribute type 1 has an invalid length. [ 328.781255][T11348] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1380'. [ 328.801404][ C1] vcan0: j1939_tp_rxtimer: 0xffff888012d9dc00: rx timeout, send abort [ 328.807017][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802585f400: abort rx timeout. Force session deactivation [ 329.303927][ C1] vcan0: j1939_tp_rxtimer: 0xffff888012d9dc00: abort rx timeout. Force session deactivation [ 329.649802][ T5838] usb 11-1: device descriptor read/64, error -71 [ 330.382339][ T5838] usb 11-1: new high-speed USB device number 19 using dummy_hcd [ 330.406877][T11363] binder: BINDER_SET_CONTEXT_MGR already set [ 330.409145][T11363] binder: 11362:11363 ioctl 4018620d 80000100 returned -16 [ 330.425826][T11363] binder: BINDER_SET_CONTEXT_MGR already set [ 330.428782][T11363] binder: 11362:11363 ioctl 4018620d 80004a80 returned -16 [ 331.262835][T11372] zonefs (nullb1) ERROR: Not a zoned block device [ 331.269219][ T42] audit: type=1800 audit(1786236992.361:277): pid=11372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1390" name="zoned" dev="configfs" ino=32742 res=0 errno=0 [ 331.312937][ T42] audit: type=1800 audit(1786236992.371:278): pid=11372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1390" name="memory_backed" dev="configfs" ino=32743 res=0 errno=0 [ 331.339080][ T42] audit: type=1800 audit(1786236992.371:279): pid=11372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1390" name="zone_nr_conv" dev="configfs" ino=32744 res=0 errno=0 [ 331.343040][T11379] /dev/nullb0: Can't open blockdev [ 331.352772][ T42] audit: type=1800 audit(1786236992.371:280): pid=11372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1390" name="power" dev="configfs" ino=32745 res=0 errno=0 [ 331.353055][T11379] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1387'. [ 331.372349][T11379] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1387'. [ 331.376630][T11379] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1387'. [ 331.387530][T11379] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1387'. [ 331.390791][T11379] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1387'. [ 331.494938][T11382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.511156][T11382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.722722][T11382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.730989][T11382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.127347][T11376] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1389'. [ 332.362843][T11388] netlink: Conntrack attr has 12 unknown bytes [ 332.364953][T11388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.399037][T11404] binder: BINDER_SET_CONTEXT_MGR already set [ 333.401004][T11404] binder: 11403:11404 ioctl 4018620d 800000c0 returned -16 [ 333.404953][T11404] binder: BINDER_SET_CONTEXT_MGR already set [ 333.406895][T11404] binder: 11403:11404 ioctl 4018620d 80000300 returned -16 [ 333.697520][ T5838] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 333.849211][ T5838] usb 10-1: Using ep0 maxpacket: 8 [ 333.997715][ T5838] usb 10-1: unable to get BOS descriptor or descriptor too short [ 334.002048][ T5838] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 334.004641][ T5838] usb 10-1: can't read configurations, error -71 [ 334.377211][ T24] usb 11-1: new high-speed USB device number 20 using dummy_hcd [ 334.538490][ T24] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.547017][ T24] usb 11-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 334.552436][ T24] usb 11-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 334.557795][ T24] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.568717][ T24] usb 11-1: config 0 descriptor?? [ 334.648954][ T2230] block nbd0: Possible stuck request ffff88802798e000: control (read@0,1024B). Runtime 120 seconds [ 334.652599][ T2230] block nbd0: Possible stuck request ffff88802798e1c0: control (read@1024,1024B). Runtime 120 seconds [ 334.655937][ T2230] block nbd0: Possible stuck request ffff88802798e380: control (read@2048,2048B). Runtime 120 seconds [ 334.778804][ T34] usb 11-1: USB disconnect, device number 20 [ 334.968722][T11421] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 334.977056][T11421] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 334.983025][T11421] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0007 instead [ 334.991786][T11421] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000d0: 0x0008 instead [ 335.000837][T11421] jffs2: Empty flash at 0x000000d4 ends at 0x000000d8 [ 335.002863][T11421] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000e8: 0x0003 instead [ 335.011988][T11421] jffs2: Empty flash at 0x000000fc ends at 0x00000100 [ 335.014047][T11421] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 335.023602][T11421] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 335.029840][T11421] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 335.037479][T11421] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000244: 0x00e4 instead [ 335.045581][T11421] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000024c: 0x00e4 instead [ 335.052218][T11421] jffs2: Further such events for this erase block will not be printed [ 335.057509][T11421] jffs2: Empty flash at 0x000004c8 ends at 0x000004cc [ 335.062294][T11421] jffs2: Empty flash at 0x000004ec ends at 0x000004f0 [ 335.064419][T11421] jffs2: Empty flash at 0x00000950 ends at 0x00000954 [ 335.072715][T11421] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001300: 0x00c0 instead [ 335.091150][T11421] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 335.099590][T11421] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 335.247118][ T34] usb 11-1: new high-speed USB device number 21 using dummy_hcd [ 335.448438][ T34] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.451635][ T34] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.463564][ T34] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 335.466521][ T34] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 335.476613][ T34] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 335.479568][ T34] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.484262][ T34] usb 11-1: Product: syz [ 335.485611][ T34] usb 11-1: Manufacturer: syz [ 335.490244][ T34] usb 11-1: SerialNumber: syz [ 335.701327][ T34] usb 11-1: USB disconnect, device number 21 [ 336.162279][T11441] binder: BINDER_SET_CONTEXT_MGR already set [ 336.164215][T11441] binder: 11440:11441 ioctl 4018620d 80000100 returned -16 [ 336.206877][T11441] binder: BINDER_SET_CONTEXT_MGR already set [ 336.209216][T11441] binder: 11440:11441 ioctl 4018620d 80004a80 returned -16 [ 336.547175][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 338.350162][T11454] fuse: Unknown parameter 'norecovery' [ 338.683110][T11466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.688265][T11466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.806418][T11465] ================================================================== [ 338.808919][T11465] BUG: KASAN: slab-use-after-free in __release_resource+0x276/0x2c0 [ 338.811308][T11465] Read of size 8 at addr ffff8880703a6838 by task syz.5.1419/11465 [ 338.814699][T11465] [ 338.816185][T11465] CPU: 2 UID: 0 PID: 11465 Comm: syz.5.1419 Tainted: G L syzkaller #0 PREEMPT(full) [ 338.816205][T11465] Tainted: [L]=SOFTLOCKUP [ 338.816210][T11465] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 338.816219][T11465] Call Trace: [ 338.816226][T11465] [ 338.816234][T11465] dump_stack_lvl+0x100/0x190 [ 338.816250][T11465] print_report+0x13d/0x4b0 [ 338.816270][T11465] ? __virt_addr_valid+0x239/0x430 [ 338.816285][T11465] ? __release_resource+0x276/0x2c0 [ 338.816301][T11465] kasan_report+0xdf/0x1c0 [ 338.816318][T11465] ? __release_resource+0x276/0x2c0 [ 338.816336][T11465] __release_resource+0x276/0x2c0 [ 338.816351][T11465] release_resource+0x26/0x40 [ 338.816364][T11465] pci_remove_bus_device+0x2d3/0x3b0 [ 338.816394][T11465] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 338.816411][T11465] remove_store+0x123/0x140 [ 338.816430][T11465] ? __pfx_remove_store+0x10/0x10 [ 338.816447][T11465] ? find_held_lock+0x2b/0x80 [ 338.816464][T11465] ? sysfs_file_kobj+0xe4/0x290 [ 338.816480][T11465] ? sysfs_file_kobj+0xe4/0x290 [ 338.816495][T11465] ? __pfx_remove_store+0x10/0x10 [ 338.816511][T11465] dev_attr_store+0x58/0x80 [ 338.816529][T11465] ? __pfx_dev_attr_store+0x10/0x10 [ 338.816546][T11465] sysfs_kf_write+0xf2/0x150 [ 338.816561][T11465] kernfs_fop_write_iter+0x3e0/0x5f0 [ 338.816575][T11465] ? __pfx_sysfs_kf_write+0x10/0x10 [ 338.816599][T11465] vfs_write+0x6ac/0x1050 [ 338.816610][T11465] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 338.816624][T11465] ? __pfx_vfs_write+0x10/0x10 [ 338.816634][T11465] ? find_held_lock+0x2b/0x80 [ 338.816653][T11465] ksys_write+0x12a/0x250 [ 338.816664][T11465] ? __pfx_ksys_write+0x10/0x10 [ 338.816677][T11465] __do_fast_syscall_32+0xe7/0x970 [ 338.816705][T11465] do_fast_syscall_32+0x32/0x70 [ 338.816721][T11465] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 338.816740][T11465] RIP: 0023:0xf708efec [ 338.816756][T11465] Code: Unable to access opcode bytes at 0xf708efc2. [ 338.816761][T11465] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 338.816773][T11465] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000140 [ 338.816780][T11465] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 338.816787][T11465] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 338.816793][T11465] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 338.816799][T11465] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 338.816810][T11465] [ 338.816815][T11465] [ 338.890699][T11465] Allocated by task 9111: [ 338.892034][T11465] kasan_save_stack+0x30/0x50 [ 338.893455][T11465] kasan_save_track+0x14/0x30 [ 338.894889][T11465] __kasan_kmalloc+0xaa/0xb0 [ 338.896340][T11465] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 338.898329][T11465] kmemdup_noprof+0x29/0x60 [ 338.899752][T11465] platform_device_add_resources+0x37/0x100 [ 338.901628][T11465] dwc2_pci_probe+0x1d3/0x360 [ 338.903121][T11465] local_pci_probe+0xdd/0x1b0 [ 338.904602][T11465] pci_call_probe+0x176/0x800 [ 338.906092][T11465] pci_device_probe+0x1cd/0x370 [ 338.907567][T11465] really_probe+0x241/0xa60 [ 338.908920][T11465] __driver_probe_device+0x20e/0x450 [ 338.910522][T11465] device_driver_attach+0xd1/0x220 [ 338.912116][T11465] bind_store+0xf4/0x190 [ 338.913383][T11465] drv_attr_store+0x74/0xb0 [ 338.914755][T11465] sysfs_kf_write+0xf2/0x150 [ 338.916193][T11465] kernfs_fop_write_iter+0x3e0/0x5f0 [ 338.917784][T11465] vfs_write+0x6ac/0x1050 [ 338.919102][T11465] ksys_write+0x12a/0x250 [ 338.920411][T11465] __do_fast_syscall_32+0xe7/0x970 [ 338.921950][T11465] do_fast_syscall_32+0x32/0x70 [ 338.923446][T11465] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 338.925298][T11465] [ 338.926050][T11465] Freed by task 11465: [ 338.927260][T11465] kasan_save_stack+0x30/0x50 [ 338.928706][T11465] kasan_save_track+0x14/0x30 [ 338.930125][T11465] kasan_save_free_info+0x3b/0x70 [ 338.931630][T11465] __kasan_slab_free+0x5f/0x80 [ 338.933062][T11465] kfree+0x22b/0x6c0 [ 338.934270][T11465] platform_device_release+0x8a/0xb0 [ 338.935884][T11465] device_release+0xd2/0x270 [ 338.937286][T11465] kobject_put+0x1f7/0x640 [ 338.938649][T11465] put_device+0x1f/0x30 [ 338.939887][T11465] platform_device_unregister+0x45/0x50 [ 338.941528][T11465] dwc2_pci_remove+0x55/0xd0 [ 338.942934][T11465] pci_device_remove+0xb2/0x1d0 [ 338.944392][T11465] device_remove+0xcb/0x180 [ 338.945758][T11465] device_release_driver_internal+0x44e/0x620 [ 338.947611][T11465] pci_stop_bus_device+0x120/0x160 [ 338.949178][T11465] pci_stop_and_remove_bus_device+0x58/0xa0 [ 338.950920][T11465] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 338.952900][T11465] remove_store+0x123/0x140 [ 338.954271][T11465] dev_attr_store+0x58/0x80 [ 338.955623][T11465] sysfs_kf_write+0xf2/0x150 [ 338.957061][T11465] kernfs_fop_write_iter+0x3e0/0x5f0 [ 338.958654][T11465] vfs_write+0x6ac/0x1050 [ 338.959954][T11465] ksys_write+0x12a/0x250 [ 338.961259][T11465] __do_fast_syscall_32+0xe7/0x970 [ 338.962810][T11465] do_fast_syscall_32+0x32/0x70 [ 338.964268][T11465] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 338.966221][T11465] [ 338.967000][T11465] The buggy address belongs to the object at ffff8880703a6800 [ 338.967000][T11465] which belongs to the cache kmalloc-128 of size 128 [ 338.971267][T11465] The buggy address is located 56 bytes inside of [ 338.971267][T11465] freed 128-byte region [ffff8880703a6800, ffff8880703a6880) [ 338.975441][T11465] [ 338.976212][T11465] The buggy address belongs to the physical page: [ 338.978186][T11465] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880703a6000 pfn:0x703a6 [ 338.981250][T11465] flags: 0x4fff00000000200(workingset|node=1|zone=1|lastcpupid=0x7ff) [ 338.983723][T11465] page_type: f5(slab) [ 338.984963][T11465] raw: 04fff00000000200 ffff88801bc42a00 ffffea0001ab3010 ffffea0001a99690 [ 338.987583][T11465] raw: ffff8880703a6000 000000080010000c 00000000f5000000 0000000000000000 [ 338.990154][T11465] page dumped because: kasan: bad access detected [ 338.992133][T11465] page_owner tracks the page as allocated [ 338.993847][T11465] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9111, tgid 9110 (syz.0.761), ts 203413117215, free_ts 203108803664 [ 338.999970][T11465] post_alloc_hook+0xfd/0x120 [ 339.001455][T11465] get_page_from_freelist+0xf48/0x3530 [ 339.003126][T11465] __alloc_frozen_pages_noprof+0x6ab/0x2dc0 [ 339.004903][T11465] new_slab+0xa2/0x640 [ 339.006170][T11465] refill_objects+0xe3/0x410 [ 339.007565][T11465] __pcs_replace_empty_main+0x376/0x680 [ 339.009257][T11465] __kmalloc_cache_noprof+0x479/0x6c0 [ 339.010825][T11465] dummy_urb_enqueue+0xa3/0x880 [ 339.012325][T11465] usb_hcd_submit_urb+0x268/0x2150 [ 339.013905][T11465] usb_submit_urb+0x827/0x19b0 [ 339.015381][T11465] usb_serial_generic_submit_read_urb+0x91/0x170 [ 339.017344][T11465] usb_serial_generic_read_bulk_callback+0x345/0x530 [ 339.019377][T11465] __usb_hcd_giveback_urb+0x38d/0x610 [ 339.021039][T11465] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 339.022683][T11465] dummy_timer+0xdb2/0x36f0 [ 339.024100][T11465] __hrtimer_run_queues+0x462/0x9c0 [ 339.025728][T11465] page last free pid 9103 tgid 9102 stack trace: [ 339.027684][T11465] __free_pages_ok+0x73b/0xfe0 [ 339.029188][T11465] bpf_check+0xf13/0xb7d0 [ 339.030537][T11465] bpf_prog_load+0x244d/0x2fa0 [ 339.032083][T11465] __sys_bpf+0x18dc/0x4e80 [ 339.033480][T11465] __ia32_sys_bpf+0xcc/0x170 [ 339.034908][T11465] __do_fast_syscall_32+0xe7/0x970 [ 339.036481][T11465] do_fast_syscall_32+0x32/0x70 [ 339.037999][T11465] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 339.039939][T11465] [ 339.040709][T11465] Memory state around the buggy address: [ 339.042446][T11465] ffff8880703a6700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 339.044930][T11465] ffff8880703a6780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 339.047409][T11465] >ffff8880703a6800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 339.049893][T11465] ^ [ 339.051762][T11465] ffff8880703a6880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 339.054244][T11465] ffff8880703a6900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 339.056689][T11465] ================================================================== [ 339.059368][T11465] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 339.061552][T11465] CPU: 2 UID: 0 PID: 11465 Comm: syz.5.1419 Tainted: G L syzkaller #0 PREEMPT(full) [ 339.064808][T11465] Tainted: [L]=SOFTLOCKUP [ 339.066146][T11465] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 339.069185][T11465] Call Trace: [ 339.070221][T11465] [ 339.071133][T11465] dump_stack_lvl+0x100/0x190 [ 339.072612][T11465] vpanic+0x552/0x970 [ 339.073842][T11465] ? __pfx_vpanic+0x10/0x10 [ 339.075206][T11465] ? mark_held_locks+0x40/0x70 [ 339.076635][T11465] ? irqentry_exit+0x24d/0xa00 [ 339.078210][T11465] ? __release_resource+0x276/0x2c0 [ 339.079767][T11465] panic+0xd1/0xe0 [ 339.080901][T11465] ? __pfx_panic+0x10/0x10 [ 339.082286][T11465] check_panic_on_warn.cold+0x19/0x34 [ 339.083945][T11465] end_report.part.0+0x3a/0x90 [ 339.085393][T11465] kasan_report.cold+0xe/0x18 [ 339.087029][T11465] ? __release_resource+0x276/0x2c0 [ 339.088648][T11465] __release_resource+0x276/0x2c0 [ 339.090224][T11465] release_resource+0x26/0x40 [ 339.091787][T11465] pci_remove_bus_device+0x2d3/0x3b0 [ 339.093407][T11465] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 339.095347][T11465] remove_store+0x123/0x140 [ 339.096780][T11465] ? __pfx_remove_store+0x10/0x10 [ 339.098332][T11465] ? find_held_lock+0x2b/0x80 [ 339.099756][T11465] ? sysfs_file_kobj+0xe4/0x290 [ 339.101402][T11465] ? sysfs_file_kobj+0xe4/0x290 [ 339.102924][T11465] ? __pfx_remove_store+0x10/0x10 [ 339.104511][T11465] dev_attr_store+0x58/0x80 [ 339.105960][T11465] ? __pfx_dev_attr_store+0x10/0x10 [ 339.107598][T11465] sysfs_kf_write+0xf2/0x150 [ 339.109024][T11465] kernfs_fop_write_iter+0x3e0/0x5f0 [ 339.110641][T11465] ? __pfx_sysfs_kf_write+0x10/0x10 [ 339.112214][T11465] vfs_write+0x6ac/0x1050 [ 339.113533][T11465] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 339.115341][T11465] ? __pfx_vfs_write+0x10/0x10 [ 339.116859][T11465] ? find_held_lock+0x2b/0x80 [ 339.118467][T11465] ksys_write+0x12a/0x250 [ 339.119933][T11465] ? __pfx_ksys_write+0x10/0x10 [ 339.121611][T11465] __do_fast_syscall_32+0xe7/0x970 [ 339.123362][T11465] do_fast_syscall_32+0x32/0x70 [ 339.125048][T11465] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 339.127037][T11465] RIP: 0023:0xf708efec [ 339.128320][T11465] Code: Unable to access opcode bytes at 0xf708efc2. [ 339.130318][T11465] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 339.133067][T11465] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000140 [ 339.135397][T11465] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 339.137806][T11465] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 339.140141][T11465] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 339.142567][T11465] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 339.145053][T11465] [ 339.146589][T11465] Kernel Offset: disabled [ 339.147929][T11465] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:56:40 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000006 RBX=ffff88802b228400 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff8e1a2693 RDI=ffffffff8c3fe580 RBP=0000000000000287 RSP=ffffc9000041fd30 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffffff8e80a100 R13=0000000000000008 R14=0000000000000100 R15=0000000000000000 RIP=ffffffff8bbaf931 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096bf3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080088018 CR3=000000006f1c0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000688215 RBX=ffff88801c73a540 RCX=ffffffff8bb81335 RDX=0000000000000000 RSI=ffffffff8e1a2693 RDI=ffffffff8c3fe580 RBP=ffffed10038e74a8 RSP=ffffc9000046fe00 R8 =0000000000000001 R9 =ffffed100566678d R10=ffff88802b333c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=dffffc0000000000 RIP=ffffffff8bb7f8ff RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096cf3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7228b50 CR3=000000006038d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c400000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a0ddf5 RDI=ffffffff9b9e3520 RBP=ffffffff9b9e34e0 RSP=ffffc9000423f530 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3730383838666666 R12=0000000000000000 R13=0000000000000035 R14=ffffffff9b6e31f4 R15=ffffffff85a0dd90 RIP=ffffffff85a0de1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096df3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f72aea06 CR3=000000006f17c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000003fffe00 Opmask02=0000000007ffffff Opmask03=0000000002082001 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c7e2e77640 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c7e2e73a10 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f561bdf1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4343171c1e454343 431e121543434343 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 92a39aca952850a8 737326b1cdf6bf5c ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302e32303a30303a 303030302f30303a 303030306963702f 736563697665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000030303a 303030302f30303a 303030306963702f 736563697665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003131363831 0000000000000021 0000000000327075 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f561bdf1f40 00007f561bdf1f40 00000000000004e1 0000003000797400 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 422c45422c44422c 43422c42422c4142 2c39422c38422c37 422c44412c43412c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 36412c35412c3441 2c33412c46392c45 392c44392c43392c 42392c46382c4538 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c43382c30382c46 372c45372c44372c 43372c42372c4137 2c39372c37372c36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000002 RBX=ffff88802b528400 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff8e1a2693 RDI=ffffffff8c3fe580 RBP=0000000000000287 RSP=ffffc900005bfd30 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffffff8e80a100 R13=0000000000000008 R14=0000000000000100 R15=0000000000000003 RIP=ffffffff8bbaf931 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ef3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7248b50 CR3=000000006f17c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000