last executing test programs: 6.023951143s ago: executing program 0 (id=1093): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, 0x0, 0x8, 0x105, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1e000000}]}]}, 0x3c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001110040001400020010000c000900090073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000010801"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4) 5.661367216s ago: executing program 0 (id=1095): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000280)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @remote, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x8, 0x28, 0x68, 0x0, 0x9, 0x21, 0x0, @rand_addr=0x64010100, @local, {[@end]}}, {{0x4e20, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0xd, '1\x00'}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 5.577514942s ago: executing program 0 (id=1097): syz_open_procfs(0x0, 0x0) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000"], 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {0x0, 0x410c}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004894}, 0x4094) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000940)={0x24, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 4.889880077s ago: executing program 1 (id=1104): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={&(0x7f0000001740)="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", &(0x7f00000016c0)="1d3834b218876c130365bd0a16b9ae1ed118d1b0a5a77933b16bc4a1538718923f7d19d1e7b4db08b10b200c5c2307b21fe99f58dd0bae92b09ba1568bcf0a47c3bf599a106b10465b06a9cb11a2a66e9031e3d74ba6710600001c0df13cd9e56073fe50b13d86cff675c4c46a40aac707f08ef96fae3380"}}, &(0x7f0000000300)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="48000000140081fb7059ae08060c040002ff0f03900000000000160000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x20000084) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x427b5000) r2 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x71, &(0x7f0000000100)={0x800, 0x4, 0x1, 0xc05}) mq_getsetattr(r2, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x7ff}, 0x0) mq_timedreceive(r2, &(0x7f0000000500)=""/4096, 0x1000, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000007f00b412b918bc54d7c2af1d9cc3ecd0", @ANYRES16=r4, @ANYBLOB="010026bd7000fddbdf25020000001800018014000200766574683000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0xa001) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f00000000c0)={0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond0\x00'}) r7 = openat$rdma_cm(0xffffff9c, &(0x7f0000000e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r7, &(0x7f0000000ec0)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_delroute={0x28, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_MULTIPATH={0xc, 0x9, {0x6, 0x1, 0x4}}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="03fc0300145f0200200012809afcf84467747000140085df02800800", @ANYRES32, @ANYBLOB="0800030003000000"], 0x40}, 0x1, 0x0, 0x0, 0x3404c090}, 0x0) 3.456951809s ago: executing program 1 (id=1108): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) dup3(r1, r0, 0x80000) r2 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xcf0b, 0x0, 0x3, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0x8, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x101, 0x11, 0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) prctl$PR_SCHED_CORE(0x26, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xd9, 0x5, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ustat(0x801, &(0x7f00000011c0)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r6, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_sysfs/bus/pci/devices/0000:00:03.0/resource0\x00', 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000060bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, 0x0, &(0x7f0000000000)) munlock(&(0x7f000012b000/0x3000)=nil, 0x3000) 3.120711588s ago: executing program 1 (id=1111): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000019c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000001200)=[{&(0x7f0000000100)="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", 0xffb}, {&(0x7f0000001100)="182ed3ed3ed1", 0x6}], 0x2}}], 0x1, 0x4000800) 3.058546668s ago: executing program 1 (id=1113): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0x1c) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r1, &(0x7f0000003480), 0x0, 0x40000003, 0x0) r2 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x5b5f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x28, r0, 0x0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)='m', 0x1}], 0x1}, 0x40000002, 0x48004, 0x1, {0x2}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) setgroups(0x0, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x18) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r7, &(0x7f0000000180)='1\n', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/instances/inst1/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r8, &(0x7f0000000200)='1', 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r9 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r9, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r10 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x141102) writev(r10, &(0x7f00000031c0)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}, {&(0x7f00000004c0)="804289e13e4dca73e880f4de668a1f8e5f411420b502a05e620ce581fe6256122dc33b76c13ad29aa4384fba5845e0c800ae93615786a474b3a71f6899fadb12a33d5cdce56ede100df0623f0e7aac5d8b46da36a833b8e90249b42d0ab03267e0bf61c4460a9129d6fff9b71fed31fc6246bcee3e819c9602523488a57a81e5da60b8e17c7e739b83599b7a273bd70b48c59f73595875e28104546a285f1bebd2a4096d8c138b2ab1c07ef9d45b9e91c59f127791ad530861e608363ae8542b479179f13983c4e623ee1d30bc5105c099c3ed5caf", 0xd5}, {&(0x7f0000000680)="2099df814fba42dc1aeabdbb669569004dc95be330d420cefc33785fb430d388ed4de6bb1ba472ba6450b300c553b448ec40d7a081dc2793a0bcefcdd320f87bb1164bd4753f539b71f9f815c3b32e9b1c8feff57af72adb3c634dee21e67df692a3de16d1dbd6e5e30f805bf44762076eeadc972f582a4ab4daf87d4608e4927433e500284e81cb6f336f9564968995752cdee05c16fba70959346cb787fd62b5f1beba09e00faeaea132c21d5d13ebbd42cda44cc20d3c299b4a4dd645a35e34fac64dc780942e2637b88611f4c5bd6a39601f427fa56dd101d4af5ac563dc96123732c229359bd627008ab74c04fa744c9f025d1e", 0xf6}, {&(0x7f0000000d80)="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", 0xd4d}, {&(0x7f0000002e80)="1db9937b376fe671bf5fb928060ad68c88957e8cfb51509357cee8655f975055476c762d792ac33ca3378dc5232451198128bbe42e125883d832462110b3e3fa0a80", 0x42}, {&(0x7f0000003040)}, {&(0x7f0000000800)="f13f4bbcc4bb2b4bc52a6f4ad4007d531896a24e1a65c64b0a2157b921f226", 0x1f}], 0x8) 2.548860837s ago: executing program 0 (id=1118): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf255e04000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x4048800}, 0x20004040) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0x802) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, 0x0, 0x0) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) listen(r7, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00') r8 = accept4$inet(r7, 0x0, 0x0, 0x0) write(r8, &(0x7f0000000600)="00000081fe534d42400000000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000410001000003000000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000008100000000000000000000000000000400000049fe534d4", 0x85) write(r3, &(0x7f0000000140)='1\n', 0x2) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x80, r9, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x323fd8d8845f14ae}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x40010041) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r10, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) write(r11, &(0x7f0000000080)="340000001a000100000000000000000002202000000000000000", 0x1a) 2.393912051s ago: executing program 0 (id=1121): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000019c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000001200)=[{&(0x7f0000000100)="c09e4f434331fc167c0ba8ea1a18be3a8dcfcd98495868ca7514da66eaef7aad479199c0cedc22f7d00b3ab7f2e8768b975491d4d9100d0d0eaffd6ab2a0b036c6474305e8408caa35ca038d78c4b22be2dce119a3578b13316c1fba17e04dc9713117f446b120e528d07b9feed8b27163abb2735247f769f654b4d9d3c4861c7e03d70b67a7d0dbd0eeeaea5b0921d00379b3f8b8d518ed20ce417f20c097c2b03ed987460aae25f39829213ee3f9b090d1a58118168ee16d419a1a3d44e63d99add63918ccce3a851ec39c1dfb4b901ff3055465dbc961bcda512223e3ed42af13abb8c8e92164799eb69e34be20d9a671f593a5a6b4172c6dfd1540202221d46bad03e197f173022296478bbc2401157ecc4a5a70a477911464380e5f2935d2771d668a884a48da3f6be46b7f2b158a88a8ced03cffcdd8c91e6ebb54e753852afe2d7c917f43c84666983dfd42d9abe15b85a3100213cf33acfd61dd73c93b8d41f72d5fd31e1c9e4374b06983dc43c9a82eff3f9624483824907fd74fe4c909b89e5a5be1abcd2434ce52443c8d841d14803a7b2332e326c6c32e99fcfb391ed61adda65bc8a33ef7a645bdca6fbb491a4b11f669412343ce9aaef8eab376a24b9ce6eccfd5ffe9d7310c702f2d9c693144fce42c8f568e38157b0763ac0533ea7c2ba9d5f659b9695d220a83679ec5712ba3569d28c4c43ce025bf89da318c1f0bc7f53af4466ffa6d6888e807c536e3112085bb5943667d61d57ecf83f5fef7d26fa4e69e67c0af02f3ec5fa7edae9a9716f8cff0571e047fff5a74acc5c87d02470607afe9a8801221813890cc7be3a9ee8d1d94e1bb9a14b5fa880377fa249fb79f267f1f781dc6151f17009809258a4f95294933f6052d642a16ca6ddd89770a2237663083f01679f563e6385bdd92ae6769ef5bca8ee76f037a02d5c722fcc0c62558fce6b43e88e1c4ded71b387a7168b98c35c2f90e8693873ca0d33e60fc32dc92119fe2bd72606a4d5e28169de4de55c62ab3c2aaf6928cad31747598ebcdbffd7e4178931e9cd86626b82ba3524496f5c49a398a1db9cc33a5774db736517c90c0eee67ac41f6f1aabd60d382256d7a736e18a37b24fc682b59c70fcddeec0407806029a5d200fef76fa525cae3906a379b8e2d3e5e02f0ebb98666281375d488e0ebc383d1f341b1dba5b23a9fc1e341ce6bdc13243a20dfc797fc440e0011fb6770325d1d9fc9e8144457e0f5c17b89484b02c263f54e978b66fb0129ade04889fdb70ad8f40a05316ab5ab40aef0f304ef1ac6b6048e911378859242eab3136c263cbe5b1dc26e4304dc50dc3daf58ba9e3161cfbab006b181365da4587d62b7836a9770a6fcb0549013da0925625ca35306195c145335717c670f9c58a23ea5f8215ee321f11cb45f4af140fffa2244405a72d1a981285fdd3084aad0c3a34bb407e47e829877dc0c35eae9f92a0d38f899473aed3e6bdf672f424f22bd6900d1296a8e17c63ece7e16de00a7e17cfb01c7da2c0cd142260777e06832f5f5ce21605dd6948cdd42cc309b91e5f210dcbefe2f7c7fa65a73dc52319e4f165a4165426491b4b6844df8a9f4afc39458533d9d8a4a05cf19c7817b423f5fb7e784486a31986e64197124e86a8e28b36238c1edacb223c0569d118f361bbb9d9b7b161122da3f11464f5e076e741c28cecd0d719c66eb4542109cf05653342fa6da970f93534fc440991a363fa048ebbcd31a69ad48ed5dda88fc10c5fd7f986a8ba4ca956f8a87e8f34a975d862b5e5ee7946f1186935f4d9ee42b5763968fc88d9838d89f1f96f2dbe774471043a42fc2dc9c712ce25ca5abb20c0918a31a440b54dfcf5ddfc320fd49457d27ab8568a53b80929358eaed76180cd3a9f07fc5847443b1a7b27f4cd4e03cac29d79f3fa956c34bea99dee4521e4f95b36ae2010f346b30167e1a53bb576e879f08b28462e4e06760f9e0005b4db678e0b3db14c87ce36f8b38fd3ecefd5c6ed2a9874375b176c844894a2dafe75cfbd062b1944dfc55bfaff3d59bfc5f4c2f080f0d6bf75729455d0b1ed8de3ba2156e9607804eff6a8f2c20c36996687de617cecd77e1dd697388a1d74fb7941b6fdd909175aa8a1532a142e28f354ea75164fe72ad59a66b70a9fe2b9b6178ecda38394eca751442ba2f590192526b44f78512ef4a66cef9f8934f264884023528af8da65bb33d741d182992a135cf9c052e8affcd97017e2bd3b11534ad6458d1c5c9da3b50c68a73b48465af3cc1194dd3a422c415eef7155b28dadf1a0564e78cfd7aeaf3a14b41ce8311aae08809299eed682b09988b962d54e9f9baea99adaa5c71b3659c5f6e8f3728ae8e721bc720d220c61680570f7c6c8b233646ddb491d89f5574e60f4d5cc1569ce9d072eee1d2738e534c2bd23f465e59785e80da6e2e594ec149cbcb0a038f5cc1883041d902ee6abddc79a494fb4a8afb11babd45dfb641b04c1ef1d1fccb58649ffea98880f2ca378836d75661a98fa0c474b31cf289fdb36ad945afbb346af968e760f651081bd7f6a0b995749b122f42c1983bb4b9b9e166525d38578fbf62ba31e5619b3a79661cdabcfa65f42bad56859984c6e58b7251a6ddb66b9a088f34b1df0d2428c1cfcfd8110713d1f48368187cd4537cb05c4ec78634e22ba6b69e5c852b211d3dc7902278242b28cd6cec8111dca921737fd967d975f075d7330067c1593fb516fee62ee2b77a14aeb68b45c5b7a097b53a6a31feb1fba9500372f3078c211838bc4821f9d73ba5a8ab29763659c3e382c2be8c4250599a19a0d6e62fe320a2bc33b1b12cb4ea13ea9a88012105a417a6e7a14c04ed923a197847709d56dd233c032714637b1c1a6b4fc19bcf0c3a2530c69d47e6cb3c0da5deecf38cb21a5e8144dca03640be8412a69b7e5606fdd1471b3275dcda68ee217aad38e966f92cab974ad9eaff1fa737537e1a1f75f300e5038b4f7c0fecf5296a44a7ea97f7644f21edc240cbd206fb817c1eea185beeadd6128a076a08a6346fd86fad8fc39dd38f46475ac56b3aafb8fbb6fc12c18cc06b3bad3a91c6dc6e8d08f1bf9cdc76b874fdf53b8a8b35133b8bd22d9b336b15ed7969e3772d19517fcfc91969ea64ad94318f9d278ccac355785a7ff4f71c0be9f799f07cf8e68630a4530513c1feed2b5e54a9973a4355044a84808c54e4084883103053ed98925cb64f21f3266a3e373ea0c87168c56060560c0265f622982202747124d1b8f44bc2b07da18fc8787ce26f773d198576045fc751ab0b692fdb1097ba49d00b559ae6ed4758e5689f2394e71ad814e3d933356a8eb92d4aece7b63cabe7ca781bd74227a2a068bd486d4a6295eda96c95edef07b4dd11e527a9fb2371fc004cf06468dd154b1067b69486cc2f8bf52ad5873160ab52497d8f39e1938fb2551a9d69ead118875d3af2ed45f897a085e279b5029276768257e90a1bcbaba72493b457ed5aef41b3f53ad5c58a70f74911acb9984cad7cd69ab0fc5bb7b48f43338151b20d75a11234d39c0c6fbe1b95b64362b1c63fbe35356ec68327caaa0d0176556c1bddb0317bd2fe7765d7aa789c4f2da27c06c28adba498793d62c42ac8d8e3535d88337e3edee0440c5bacda7a542dc1f90a4185129b36f924cfc0d723365cea8faa825db79cd18c4d5c945dbaa5ed9c07e2fb609c40307fa9d4bd023e6c20b3c2c15bdc594e040c19b7c7f235c7dd631133dcc5a983d5b5212dd1eb5f3b82d16bb9df3ba339f45a2174308022e38bd2bed4132c6782e91a53a6886a26a582b01ad7948ee514ca13cc92af599c7e1b840a471b98323e8e2cc20884a5af4cce5ced2a7dead189c6dc5c977dae20153076d7733b3051cb5d5fccf489ad7d81751935cc611aba2a0733b68d1fc9f2ec7d08ae10473de2a01f4946f184e804335c6471630c24edaa6ccbceb255df103cf23789a7012b57695c685add04c3ca0c1ee6cbe5f137387fd6280664ff8eee2e514dd3528f5f8a28d67a4479448350bb0880c70ccc30724de98ba2bbfa142c2770d16b0c0f6666001ff1cca14a2cf0176c3ccdfb0955aec37ee1481b3d72729eb23cb628b78e747b50787d4e8970f6818a8dd0c2c3a54e1666452c5e475751539b4a3316b5386b7e4a9c046b444bd5bdda692a17c97bbb9b17d0252bcb6c4369dafd4ed3f4ef6bccdb06cfb46d276563c04326aabfc8d09f78e0c2afb1e13b8d3bc611ca4c53128b84ea5e58a7ca9e848e0d8c128392e6e642197f58e9a482f4b2e5b49805ee99f40baab368e23a575cd74e11356d7220cfe617e0f7776761b945fedaf7f5641df7c6286765e6e993782a5d16db5af6662d2ee6d95226166083946b8438cc9bf824cb9ddc95a833103fd05ec37464b42326254638601efad6c37cdeb08531f1af38c111464cc8fb8a81938cbf2b4d8b49647785d96719e67c1db9e8339085e50a374cbc540c46064b65e20fb4f9a6f66d64cf5cc41a1903d5244373881247e630851f9b04fd357a8dbe3e1af4b5647cc54cfa87f8a8c90ef1b359e24c257865bbfc1ac1a4d23df9d8741d9dbeaab05e2d7fd8f4be97b692ef42d6d1870370594cb644aa1e948b011cce6e978fe105ef9d06d5b65e8ed8cabe2a674ce19f3efb25dff0a5c007b3004a05b4cdbd5926faf35407c83d52c28eb872e0e1952ccd9fb0befcb810659d26b43016332948e2c6edd4d422cfe514070ec3eef1c0420bacc1b38cfbdb52ffa3a7e5acda37e55376b5ff68822afc5fab2f8d388e6f0ab25754426f7c37bd58133e2327ee31bcba1fac0bf49fc3ac2be9388cc91d23c05694e495ccd262de3ae3f29b0485ce34c7ce54e05f4311539b24249ca3c5624449311f33ef13d6189d79bedda51a705442ba242a10c256ff0151a20e9fa926f42bca8ce53eb72932c5c9165de017ed557b17393aed52dce254a0988aa0d3c6763934d98df846333818ad1469c0a7a44ab8ce7fb2fb710865fbec64a80891be3529616dd7a2ea21a2daae8888839154bb0afa863da025d18b74067a14f2f3a1b23882b7ce6ad78c9a7a37e278b6178c44f5ae3f399fbf67d246d8b3eff6380d65abf54272cf227b67afb29b8cd16b0453e4f28313cd0c44c50772985acb61624dd3ed6ab19a2beb1d36b707f6db59b3cc8cd3174a5a4063bf24c9dc741202d63720c81762346c05aa85bf5152d9dff88eb6bcc2138c962488f49b6796f688ce9ac0bff3208e3bd8c986ab53f4fb7739c6f87c57447a1773e503643d2bbc559fb245e1f2f53b570f1ffa9be3358b4ed4648f652ef47b182e431941e6d03623a8733a855e75f7416f12e8a0067a9a65dd6d6c9699a8eabc505c4bedd157ed58c9ec20f9538f4e007e3dd0799aa2c2fd5712b1eeae586f9b92eaa1cc61e26adfb6dd10c6f690ff54f80f754c7a87b2b1ae521065f290b3196f333d697ac95a4d1b0c9e425483d3be53f2d3639712877629035538fc28292db144325ddd02c9c30a434f0ac283b99d0407d541885d2888ba8938c7417289d77ebd9bef29e8d87086816c4d9204027ab600d5d8f9f2b73b4bb8fe1eaceb84f45119b184733044aa22042b88605f0f67f9143c9c8104612e7e120176bf6ba2a9383864a6389c735a71ec1e5ccec6c0b1d4dc0841976519fe1249c1e1fde7850f032af92318ac52bf0f2b09740afbd6dde659271bdceb56045870318f65bdb908950a470d4cba3ffcaa169e8bda88ccb0d4fdc60acb86626dad1ca655136441950", 0xffb}, {&(0x7f0000001100)="182ed3ed3ed1", 0x6}], 0x2}}], 0x1, 0x4000800) 2.316295306s ago: executing program 0 (id=1123): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000006c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x40806685, &(0x7f0000000000)={0x0, 0x7fff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') (async) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) (async) write$FUSE_INIT(r1, &(0x7f00000006c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) (async) syz_fuse_handle_req(r1, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r3, 0x40806685, &(0x7f0000000000)={0x0, 0x7fff}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) 2.160161894s ago: executing program 1 (id=1124): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002380)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x48000) (fail_nth: 7) 2.0110561s ago: executing program 1 (id=1126): syz_open_procfs(0x0, 0x0) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000"], 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {0x0, 0x410c}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004894}, 0x4094) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000940)={0x24, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 1.960940549s ago: executing program 3 (id=1127): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = socket(0x1f, 0x6, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000040)={0x0, @in={{0xa, 0x0, @loopback}}, 0x5, 0xfffe}, 0x90) fchdir(r1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './bus\x00'}) ioctl$HIDIOCGRDESC(r3, 0x90044802, &(0x7f0000000540)={0x73f, "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"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x4, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003580)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r5, {0x1}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff3, 0xc}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './bus\x00'}) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1.910355723s ago: executing program 3 (id=1128): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) ioctl$EVIOCRMFF(r0, 0x5501, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES32=r3, @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x800) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) r6 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r6, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000017c0)=@newchain={0xa20, 0x64, 0x534, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0xe, 0x2}, {0xfff6, 0xffe3}, {0x10, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x9}, @TCA_FLOWER_KEY_ENC_OPTS={0x54, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xc0}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xf6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xfb}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x1c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xa4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xb3}}, @filter_kind_options=@f_cgroup={{0xb}, {0x974, 0x2, [@TCA_CGROUP_ACT={0x40c, 0x1, [@m_xt={0x200, 0x20, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x94371fe59dd696de}]}, {0x1c6, 0x6, "0abee15307f2b761e60f9038692deea2ea139b24210d0c9f7c80ef82a4b56c83c07a4aea5589f342f1e2dbfeedaeb1678bda091a9c173fb4321c3334ecfe25230b3afab837614b7f19e554e15f8148400d148fe188ca6ddffedcb05d05fb7b0e7a862a5e9663a9591c8d54a81386e9cccf59d3ff9f0dab752b35c796f7cfe5b197683726dff69d9406d0ace5db9e0c8bec987a2d979d7256d9f3e84d20203b04fdfe15295bfc5b13d03e3487944491664919f4e6dd01d22ddf4ea454d43bd828b6f8244412b3a491aef65b02e197b318855c24c33cb109375d8a4aec0c5f5b337f6084134a11bbe1e6e5562255f31ce4413800000000000000000000005d4aefc2ecb46214497e3ff64165131a715c30f391f9454e76e5c74babf0c51f0c48e525d570650ed1b75158693ad7e13d5b9952041adf0b324d47b386a127aa3e59700b07fa93a95f0855f4bbfc5a990f0eee3d59a9e1542ba11637ab5d066f50074b7a4f4d67f8ab9cce48063c09b044c3346987c8d3873491ee2da53ae08ea90ef016b63ede88db90b1f2da83d5d8c98cf7643b024c6c9f78a6cbb1fdffdca486254b7c62f5af901fc597cb7b60b4d98a6dfa9944d2d20a22532e18505df95242fb34a0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0xd0, 0xe, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x1, 0x4, 0x8, 0x3f, 0x1}, 0xe}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xa00}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="258f8a76db17"}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}]}, {0x39, 0x6, "faa589602f53aeb6f1403be6d7df258191010fc88df1443e6fc72d524ea8ccded65fe91cb9abeee3dc394aab34e8b476891a07f6dd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x138, 0x14, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x9, 0x5, 0x2, 0x27c}, @rand_addr=0x64010101, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0xf, 0x0, 0x5, 0x401}, @broadcast, @private=0xa010100, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x101, 0x5, 0x92, 0x80000000}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x8, 0x0}, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x400, 0x5, 0x1, 0x5, 0x8}, @multicast1, @rand_addr=0x64010102, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x24, 0xf9ff, 0x10000000, 0x6, 0xfffffcc0}, @broadcast, @multicast1, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4000000, 0x1ff, 0x0, 0x3, 0x3}, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1, 0xffffff00}}]}, {0x1f, 0x6, "2f05f147a679c9f4763bb330eb9d797240067bbad1d417fa82942a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_CGROUP_EMATCHES={0x564, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x270, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xc8, 0x3, 0x81}, {0x2, 0x0, 0xfffffc01, 0x401}}}, @TCF_EM_CONTAINER={0xd4, 0x1, 0x0, 0x0, {{0x8, 0x0, 0x5}, "dc553a54b3d06c6a2cd53999a1b289ab2cb84f4df7d31c34a15aafe930fea973740c6cf3fcaaaec2c8881e9b31301d8b7d5b23299f255e4640ca3cb86a1439b4b1f515fbb14dacdc12be9a77ba5480ba834562e69fd672c5eb7fa6b7145ca92b3fb1850b1c137ed324c61de96426eeb5174361b5522c0b2127a1b2cd9a7d1368b0c4dac8bc15d4391ba4ffbef39e257bfff162bf15041fac0f83ca5dcaccf69ef572eba16f30cea7060f19429b485e195ed02566321c9ca193d6c0b2102fec49023fa3f89d"}}, @TCF_EM_CONTAINER={0x9c, 0x1, 0x0, 0x0, {{0x2a, 0x0, 0x9}, "ef37d7068880c1fd6d5013d9efb29198058b9e4e477eba713bc24e0100d381fda850d9d0dd9489e16d085637256725aa6cf04900c84d87274d51d2884456756bb984e8a75523ec8ddc0f6aa622c7fddadb5a9c671566610fe636c408e493cd8f8109add897d315c9be3c09fd6c1ed64dcd5427c11d87b8105a8d37b6f151b283c5de531c7c73f818f6297866b3d1"}}, @TCF_EM_IPT={0x64, 0x2, 0x0, 0x0, {{0x10, 0x9, 0xf250}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xe}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xff}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x401, 0x8, 0xfff9}, {0x1, 0x5, 0x2}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x7, 0x8, 0x7}, {0xffffffffffffffff, 0x2}}}, @TCF_EM_META={0x44, 0x3, 0x0, 0x0, {{0x10, 0x4, 0x7b}, [@TCA_EM_META_RVALUE={0x20, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="7f1738", @TCF_META_TYPE_VAR="ca9e", @TCF_META_TYPE_VAR="c10dc42bfaa2e2", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xe, 0x3, 0x2}, {0x7, 0x9, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x4, 0x1}, {0x10, 0xe9, 0x1}}}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{}, {0x8, 0x81, 0x8, 0x4, 0x9, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3, 0x8, 0x77}, {0xffffffffffffffff, 0x5, 0x3}}}, @TCF_EM_CONTAINER={0x44, 0x2, 0x0, 0x0, {{0x40, 0x0, 0x3}, "29db35e05faf8b24dbcfa95ba8093cce578e350f008cd5ec7ec4a7a04eb5ea8cda45c127a97e0f4ac61482f6bd084666fe14a0a5de"}}]}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x85}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x7, 0x1, 0x6}, {0x1, 0x6, 0x1, 0x0, 0x4, 0x1}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0xb, 0x2, 0x7}, {0xf4c5, 0x1, 0x1, 'y'}}}, @TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x709, 0x9, 0x2}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}]}}]}, @TCA_EMATCH_TREE_LIST={0x234, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xe0, 0x3, 0x0, 0x0, {{0x7347, 0x0, 0x7}, "64302a898ee2326dd50b25862c13df8f7f612f68e3aa6e27fd6e00659683a60ce994673b9c0d0c7b853307e3ba5a891629eb5b36891125d156efd68d54a657817a0d7f1a575ddd0506b3bd1ce8b77ea4012dfa406d858da0ee407353f35450e0a7d69c5747055821643891773befcfc87b2496c592913a8ef3e9b7cd2e251c2157b1a7a5c4d5af0f94450ce196aafb471fb219303f383fc944589f90c7d38c1806ebad8ce48b3104647f71b74cbaf76838a674e0cff142d3929e164cd83b15b0c20cb986b76c935987bc61897ebe4b3ee9"}}, @TCF_EM_META={0xbc, 0x2, 0x0, 0x0, {{0xff80, 0x4, 0x4b78}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xa, 0x49}, {0x5, 0x7}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x400, 0xe, 0x1}, {0x400, 0x45, 0x2}}}, @TCA_EM_META_LVALUE={0x35, 0x2, [@TCF_META_TYPE_VAR="f1cb9868374d494917ac", @TCF_META_TYPE_VAR="091a7f62db", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="38c28e5a6530b49d", @TCF_META_TYPE_VAR="9b63c4cfa602cd", @TCF_META_TYPE_VAR="551c0689db0d421643", @TCF_META_TYPE_VAR='7<', @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x26, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="51a2e96d3580144a500a", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x26, 0x3, [@TCF_META_TYPE_VAR="6918ba1dd9be50", @TCF_META_TYPE_VAR="00f336d24cbbb7ed323d", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="41824a41bf"]}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xc5f, 0x8, 0x100}, {0x9, 0x3, 0x5}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3, 0x1, 0x7}, {0x29, 0xc, 0xfffb, 0x3, 0x8, 0x1, 0x1}}}, @TCF_EM_META={0x6c, 0x1, 0x0, 0x0, {{0x1, 0x4, 0x8}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0xe}, {0x9, 0xa, 0x2}}}, @TCA_EM_META_RVALUE={0x25, 0x3, [@TCF_META_TYPE_VAR="578a", @TCF_META_TYPE_VAR="70d19e1dc42100", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="41f724cc1e8c60", @TCF_META_TYPE_VAR="fa071e7a262cfd231f", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1bc, 0x4, 0x2}, {0x2, 0xfd}}}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_VAR="684f53a3", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR]}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_VAR='7$^', @TCF_META_TYPE_VAR="abbe9761ed", @TCF_META_TYPE_VAR="f6c0297235"]}]}}]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0xa20}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) close(r10) r14 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r15 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000001280)={0x2c, 0x2, 0x0, 0x30, r15}, 0x10) r16 = socket$netlink(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r15, 0x81e8943c, &(0x7f00000012c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r16, 0xd000943e, &(0x7f0000000280)={r17, 0x0, "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", "fbf3c22a1536e0dd0e96bd086e9169efcdc596ef93c8046a851d1646d711cf0ec43d409aaca16aea7c339b760f487d3c975e6bd8ad39f50069ecae7a93defc8ac985badaa44bd115e1415670e04cda9a072c9742c5225d58a3a317802b145818eaa66e100011227fd42d36a3a0462bad346e0ca4aa5138a95a4ee97767302349cb04a48f26f58c93b343c18e2b964205ecf138e8b11258e2f760dcf065ec5f84fc90e1486bc50796bc42085acc5efa9c29caa00fc98c75f94e967984df2bb52f3ab280f0797cfc71872024a82b2a9a8ab32fc648970c52c80cc0dd208579d90b1f1cfebfdbc1de21098101e4531264730db2c37b6322378fef8291a073cc33710e91b03d6c9583e373665a850044c08c65fafa7f8e23297ef29f6e8de28ba1cbed440414065db76927087c7e07798cb2124832ff9c825403787cc56ef8621edb18e5449ec52071aa67f0a4c6b5bf653cad7c2c2b8ea2b9afdd4d4240260d87f74e7d822b5a2aec00342c1f72fa33461955259a85f865d4a50d6aaa9513d2cc8d3e024be704ca5f424d6e8b2825a4b6ce015932ee4fb2401e10f05f6527da3d7549bd251ff92a1001f4efe17db22282efeb1aa9f9bc3b8f0bbacaf9b560d1362fb7916436b3aa4a5a8c56d35f75cecfba0ba6ebecfc9730811ba587f3a771177f61ac5b6ab3d73e7b98d25ebe4081d8a15d60ad85e876f240f7ba46acc54f51aa2901d88610dfdff214834efc16d1b7f886823c835ac0abf6d8740d159e48f463ab84d9036ebb8c41542c1bca436ab84a5f343199640a18cf13c4534b6d67ea1bc1c3605f45c3ef6674d4d42fb4d2f76acc4acf6b053a416d7a3276b09b6b5c61306fa741626f80c8459b56b1d190fc55bde56c16f45e95721e4b72f683ca410a5695bf4627634f51d8a8e1badd910f63ecaadbf821facbc82efce81e07222e7f53bc33d63a21c7226066613fb1017545a2e0ffea425683b4a50c700c920b3a6c95592ba90bdfba6338f16d9afc8b7e6b9dc3360f88ec54a5a975cd3b9098189bbeaf3511e2882be4c4dc34b289ea77037199950d7d0bb936db75c3c3aaa006d5323fa9194bef0cae820015130ac0ec7b75ca10a11386d82d898d072e28cc00f1ab0772b60057323316fd1c394039d2a79271cc7010c0839901314da0441c76d7675df30c5b422b215014a8a75dd1daf8ce853fc4817d53dee9057548fce84306fc7c883b00891eb5d4d5b777f55bf8c25c2bee36648bed7268b328393d725bea9ac1f97373abc7bc7a9ac9796f107c545389955cc87c66c7ce9e17da1dfc6d27493049a01993a433b9d3c39ede6d5edcfc7fe7c279f4d0a470a3a6874d39f8c4c2250b59152f57b8e0c47e6b3fd924909230df230ee084c7cee287806cc819bd6de9ab3ad9e82ea113359ef3e0466619f5f09e85c323a73bd423425b8cc760c0c097b88e378d0dae26bdf275e62d90f1efdb386654dafbc7797cb575e440efa40cda01c34b5de065835ced7dfcf8860b9796f46f4e31d84ed89df0c4aa57b93354eedb7f474f3b1c6c5ff08e221cbed33814e3dc834d8322dc97c16df7af7c04f9a60b50a36170676238028b19b3e1ca8839ffe2fcac80f629e2ea55bfeabea346352f5df1f1cc429e837e6ca3f5bdbb1fcb5a5d7d8c7bdb81cee536e15a2c3e18b3e8db20b8e2db9ca3cdcbac15673972189b4fdb5b001f6530835e093ace8f4ba3c14a31f9bc163fc6557718498fb5a92e3b00b7aaa1750352ba023581e37a26527607875e325c70af9d65127b2c056749e1cc35a4b05c9efc54a6150ec6bad529c7d9a78b4607a13563f35c020c03a0c082fae5ba42b2bb97c98580209a264b1b8444450e3e34b9e616b20063ac8c6743e989b09f038adb51987d16149445bbcda7d7f779159c2a0c4f7aaf215a2acce9fb588b018617912f239b2e28f2f012e22d2fcc90fc0523f1abcb2ee32af1ce0a471fd67c8ef9f56a662b571aa48cd2fbefff392edf96f4451b2b8e9191501413a53f1d748acd74ec24c28819cd251912d8b6a0a8adcbf029754308bb53fac358776a597396cce111ebcab4f01b63b5fa549cd9f911d5f41ca779b901fc2bba3ad926d61f6b24ca68ff92ea74342976a3a2afab7f671c10cdcc2a13b2d63704bcaf3f83ee2600fa878aba617fa37635b0e9fb5fdad7692f619b321374eac33abceb41cd772fb6ab48bdb02d55c6ce28ac1997293c7222763a03095ea4b12d562a3e9324c9d60c164067837a19201975137ec271de4117bf7a4478c47c2e893559536bfb9fb4e9c06c68dc410fe21bc2857832e698afacd484a409c9bf19e2cb4b488109c7587582d8668f0c1d8837cccfce937cb7e21256e2e76323de253c22c66b3e30127db734e40ac58247c5e53fef93ed8e5991f62d647a47df46ed0639fdee5c0323cb8963b1976cf285bf4da0cfa81bccc9daf804e49d047d95baa49cb5dc514959f03ab7df72666377a54260e997cb17a2610aa848d4a288a82f53f5d1011f3b265ae8ebf604ad843ff0eeebed97cff766c9c3a3c85336cfc8b8158fd1ffc55760f93d99b3c0a56ce2033666fb071d3a8a8e6f7c00bfd5fabc0a70fd63acd142cbb27675313c398b421fd77fcc32c6f2562646bcb4a579fea71e876257e0b367223adf1313205a878b3703b2fd33faf641a7561f2460c4de4d1283db44805ded294b6a449d09252a63e564fd508f8e9048fb115c988a66f2b8aaf07ab5597e328042bd64ee5ffd78b723e10aca9e63b846aea7c4835fb9e7dd7292cf3a481eee157022255000a96fd13600e8672cbbed0029ee7a0f7cc5501d768e57e8ee7f985bc2cf636a0ff51e22218ca08cb5168028efe480d20b00f8f5c8b9560629b53fa270d5f6cd0a5dbc55cd4966cd87a2c8e8f24b1260390d69d83ab3466358f0428d32abd58f920726eb2b6d10e46ed8be6836ee59412d79a7680dbe714022dd3ca6af58d87b93aa492fe581139f125850aae8c243425c50eb617923932e0bb5b4195721ce476e06f8a21d53384c53408d3f8c6a41af4533ce724e71c09e3e017226f7529edcd48d19a51b3b2ff5dbaa9a604cc1a447a767c9db903b8f3be4b45866551251c31b057f13d22003f978cb5c73970138a967247aa641593b5d3699026d2f6f142c60a0c9c9f93418486d2fb79ec245a6ca59c96889b3024c30e936824576abc7e19f89e3d954435e267b6b377a6d18b14ace32d3445f44530bcae629fde023c98a988e48bedb08a9e9f3b80ed1989e3a7014e9a4aa5b0746552a8bc6937256fca9cd2c922925da83ef7e24b91c86368f7393109de18fc823ec35b732aea3eececba790f14cab6ea8080b39809eb157a0ac1e1b527882da5215be4d7fab93d3b948f0e08fdc5065102bfd021b7dddfaea217d3dcfb0b8ad253811aaa0877c261d0154b216d2a8b56dc7bc798b009673535eb1cf4a2415199edcc61e754dd6c1f3e18132aae9b31007c101d60a7ead11c6f63c1aad9e9b3478e3ace0ee9753aa155803eeafb1a9f3576e582ddaa9c34e9375f13eeddc4cd57898a65b59020906e3b0ef832d4deeb052dcbe797e7e56d244524792418ec9cff8b8a4adeb7938d207114846eaf7266a0ff16e822cd7a5a4a728447f6cbb50ab43f208e2cd7ff3beee3b1983bbdbaa436e7310178bef82ed66796f1e4908b77cc3716f167f7cece9a19e68b233be6d3054d803b6df229223c0dacca086ba050274d1bd4bdbf173a824ab0adb7120c2e9a8dab7863672f6a533f25559b8c99096c8681c40904e29b2897d28a428fb1ec8919311d013d776d6674a7bfb1b23901af58fa4f81f3a596eefe608fafe2fa529b8b13516c85d1019034f326c93230d473e1377b6f061a07b5835fd34bccbf2d481cc233a1f7a02945a5a8cd261fd236a92956fca53d2fc622b68030be409177cca544241bba5c4ae4e8a17b95fbd887dec369016e0d391a8955f58c7a513aeccc871830121827b707b6e35c3ec2b5061c7458a71ef5c47bad107c80d4965ef68f3b022c0808fc49a884804820c6eddf77457a9935c019b4ace050252f79e4c16a33edca691ed959e3470d13cf79203c03c1ebe2cb4bf455cae5968155e61c2aeec6889cc1c748fae183995ae85cc27083ed2657d1aa9c8f24e011fe782dea41386478dd65c1785b9251d8dc586b8c342b5c74b437eb6c545a20fdb6c47c691382200c92496d092f91b0d025b73810af83e77ffb4c15b30c961f330c148e3891e723c159333cd5c8a9dd673cde57478170c9377c4c29ca11f96ae0da2a40ab290314e0ffbcbe9464fc0dc374d2ffa22b5599073b88e9166b790cfbcc2a212cd903fee0d9b958ee5589fd27a0565404827b075517299752d90c87e5de474961fa7d02072651ab3aada30c246b6e9963a6801990c7bc28996a74a77cb31cffb1f30d333d12812b3d3df9c169744e0c06e44ce47ecc820c9bf9caf7db6bb331dfc12b2aba1ea045964ed84f2d8d4d0af0c05a1f44a574b0f327de932bd50893010957c4fe9f16d9d962f6bbd2069f03a5a6784f55d0c52490127578ed0c184f3e9171ab97e2a6511da861f6eaf61264dc9060ae04ca4150a78b7a425e8737b356ab2d3f6fe3627b70164bcb74de98bd87a51878f7ca6e15d80e607c57b9bc8043d0aab1e638a9c3872096a11a928c63524a71fd6472e3624583536c9d7357dd524db678ea63c169eab6a07c23c50e6af590ca3b6a4fdfd35093e8d9d0736d05715caf3d4b071ed9b0987eb5551bee29800b13d40eac6381615d54233cd2ac0001304bd44dac7208738e53262312bef57780b66634ab2fba35c693ff4de3d588f8d37b551490e4a9b393a0ae540a3e7847fc4583c1c91474c1435f44d00223ac01800b6c3b5cbe610a9bac5eeb4cabe672784ed25e346f208e765346e0f17073c50fea6619ceff9e7e7359729cbc75488b42536d9e532eaab6d88df87840dc3e9fcb56e94ad6819a5b991f03ad46e40a33ea985387318dff0aa4f66db9ed0c730eb01981465d9bd6716a504958b01548b46f2d1f662e240617d1418467df1ee576e47a8e8fbdeffc81d734338244ab687cd63526743689847680d5e378385346fcecc49b84ad8cb5ac0a615006aecab486f215d6a99720d8ebb9f35f8f7f5c8952832004c3bb6af7e66d5b27981fd25e3b66c9530fd6959863ec8b4ef24d33dbde7b8fa74ffdf40e1fcfc3bbaf9437da1b73dad07c4e383772c02b968cab53a062b4fe4caa23745f12744f73b04eab875281999c23e77557db8f432911f84c5de97fab8bf4df5fac6e8837ccbb3f0d876801e459329bdb8b98497b34ee5ffe5519b66d0d8c4ea8c4f99f27bb85c54bcd0ee9daab9ebf9784b22a2c4ad8a5e9e5038bbf86f29e1b6761f160c86448e0b229870"}) 1.909918956s ago: executing program 2 (id=1129): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="89000000140081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x8084) (fail_nth: 3) 1.850842839s ago: executing program 2 (id=1130): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf255e04000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x4048800}, 0x20004040) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0x802) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, 0x0, 0x0) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) listen(r7, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00') r8 = accept4$inet(r7, 0x0, 0x0, 0x0) write(r8, &(0x7f0000000600)="00000081fe534d42400000000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000410001000003000000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000008100000000000000000000000000000400000049fe534", 0x84) write(r3, &(0x7f0000000140)='1\n', 0x2) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x80, r9, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x323fd8d8845f14ae}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x40010041) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r10, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) write(r11, &(0x7f0000000080)="340000001a000100000000000000000002202000000000000000000008000100e0010203080002007f0000010800030001000000", 0x34) 1.039675467s ago: executing program 3 (id=1131): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf255e04000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x4048800}, 0x20004040) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0x802) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, 0x0, 0x0) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) listen(r7, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00') r8 = accept4$inet(r7, 0x0, 0x0, 0x0) write(r8, &(0x7f0000000600)="00000081fe534d42400000000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000410001000003000000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000008100000000000000000000000000000400000049fe534d4", 0x85) write(r3, &(0x7f0000000140)='1\n', 0x2) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x80, r9, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x323fd8d8845f14ae}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x40010041) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r10, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) write(r11, &(0x7f0000000080)="340000001a000100000000000000000002202000000000000000000008000100e0010203080002", 0x27) 1.013911907s ago: executing program 2 (id=1132): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0x1c) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r1, &(0x7f0000003480), 0x0, 0x40000003, 0x0) r2 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x5b5f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x28, r0, 0x0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)='m', 0x1}], 0x1}, 0x40000002, 0x48004, 0x1, {0x2}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) setgroups(0x0, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x18) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r7, &(0x7f0000000180)='1\n', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/instances/inst1/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r8, &(0x7f0000000200)='1', 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r9 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r9, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r10 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x141102) writev(r10, &(0x7f00000031c0)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}, {&(0x7f00000004c0)="804289e13e4dca73e880f4de668a1f8e5f411420b502a05e620ce581fe6256122dc33b76c13ad29aa4384fba5845e0c800ae93615786a474b3a71f6899fadb12a33d5cdce56ede100df0623f0e7aac5d8b46da36a833b8e90249b42d0ab03267e0bf61c4460a9129d6fff9b71fed31fc6246bcee3e819c9602523488a57a81e5da60b8e17c7e739b83599b7a273bd70b48c59f73595875e28104546a285f1bebd2a4096d8c138b2ab1c07ef9d45b9e91c59f127791ad530861e608363ae8542b479179f13983c4e623ee1d30bc5105c099c3ed5caf", 0xd5}, {&(0x7f0000000680)="2099df814fba42dc1aeabdbb669569004dc95be330d420cefc33785fb430d388ed4de6bb1ba472ba6450b300c553b448ec40d7a081dc2793a0bcefcdd320f87bb1164bd4753f539b71f9f815c3b32e9b1c8feff57af72adb3c634dee21e67df692a3de16d1dbd6e5e30f805bf44762076eeadc972f582a4ab4daf87d4608e4927433e500284e81cb6f336f9564968995752cdee05c16fba70959346cb787fd62b5f1beba09e00faeaea132c21d5d13ebbd42cda44cc20d3c299b4a4dd645a35e34fac64dc780942e2637b88611f4c5bd6a39601f427fa56dd101d4af5ac563dc96123732c229359bd627008ab74c04fa744c9f025d1e", 0xf6}, {&(0x7f0000000d80)="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", 0xd4d}, {&(0x7f0000002e80)="1db9937b376fe671bf5fb928060ad68c88957e8cfb51509357cee8655f975055476c762d792ac33ca3378dc5232451198128bbe42e125883d832462110b3e3fa0a80", 0x42}, {&(0x7f0000003040)}, {&(0x7f0000000800)="f13f4bbcc4bb2b4bc52a6f4ad4007d531896a24e1a65c64b0a2157b921f226", 0x1f}], 0x8) 150.513464ms ago: executing program 3 (id=1133): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x2f, 0x0, @void}, 0x10) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) dup3(r0, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="090000001400000008000000baab0000420000", @ANYRES32=0x1, @ANYBLOB='\x00\x00o\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 70.681033ms ago: executing program 2 (id=1134): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, 0xffffffffffffffff, 0x13f, 0x4}}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x5, [{0x1, 0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3a, 0x0, 0x6}, 0x28) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r3 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)={0xc600, 0x86, 0x10}, 0x18) file_getattr(r3, &(0x7f0000000140)='./nfsd/max_block_size\x00', 0x0, 0x0, 0x1000) r4 = openat(0xffffffffffffff9c, &(0x7f00000001a0)='./nfsd/max_block_size\x00', 0x1, 0x0) write(r4, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4004004) 70.245751ms ago: executing program 2 (id=1135): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x3e6, 0x4) sendmmsg$inet(r0, 0x0, 0x0, 0x4000800) 70.093037ms ago: executing program 3 (id=1136): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x800, 0x1, "80"}, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x270bd24, 0x25dfdbfa, {0x2}}, 0x14}}, 0xc004) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x800, 0x1, "80"}, 0x9) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x270bd24, 0x25dfdbfa, {0x2}}, 0x14}}, 0xc004) (async) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async) 351.052µs ago: executing program 2 (id=1137): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x88) getdents64(r0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 0s ago: executing program 3 (id=1138): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './sys/bus/pci/drivers/lpc_ich/new_id\x00'}) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000900)='FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF 0 0 ', 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, r1, 0x28f41000) read(r0, &(0x7f0000000180)=""/145, 0x91) r2 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xc, 0x100010, r2, 0x421d1000) personality(0xbe4e602dc9e6c1d3) uname(&(0x7f0000000040)=""/138) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x1000, 0x1}) syz_open_dev$tty1(0xc, 0x4, 0x1) 0s ago: executing program 2 (id=1139): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='44100,4+000,88200,96000,176400,1920', 0x23) symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)='usbip-vudc.0', 0xc) kernel console output (not intermixed with test programs): .656622][ T8422] FAULT_INJECTION: forcing a failure. [ 186.656622][ T8422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.677829][ T8422] CPU: 0 UID: 0 PID: 8422 Comm: syz.2.719 Tainted: G S L syzkaller #0 PREEMPT(full) [ 186.677861][ T8422] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 186.677867][ T8422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.677874][ T8422] Call Trace: [ 186.677878][ T8422] [ 186.677883][ T8422] dump_stack_lvl+0x100/0x190 [ 186.677901][ T8422] should_fail_ex.cold+0x5/0xa [ 186.677914][ T8422] _copy_from_user+0x2e/0xd0 [ 186.677932][ T8422] ctl_ioctl+0x292/0xcd0 [ 186.677960][ T8422] ? __pfx_table_load+0x10/0x10 [ 186.677978][ T8422] ? __pfx_ctl_ioctl+0x10/0x10 [ 186.678008][ T8422] ? __fget_files+0x21f/0x3d0 [ 186.678023][ T8422] dm_compat_ctl_ioctl+0x23/0x30 [ 186.678040][ T8422] ? __pfx_dm_compat_ctl_ioctl+0x10/0x10 [ 186.678056][ T8422] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 186.678074][ T8422] __do_fast_syscall_32+0xe7/0x970 [ 186.678093][ T8422] ? lockdep_hardirqs_on+0x78/0x100 [ 186.678110][ T8422] do_fast_syscall_32+0x32/0x70 [ 186.678127][ T8422] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 186.678141][ T8422] RIP: 0023:0xf709efec [ 186.678155][ T8422] Code: Unable to access opcode bytes at 0xf709efc2. [ 186.678161][ T8422] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 186.678172][ T8422] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c138fd09 [ 186.678179][ T8422] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 186.678186][ T8422] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 186.678192][ T8422] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 186.678198][ T8422] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 186.678212][ T8422] [ 186.737422][ T5824] usb 6-1: Using ep0 maxpacket: 8 [ 186.740506][ T5824] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 186.743369][ T5824] usb 6-1: config 0 has no interface number 0 [ 186.745893][ T5824] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 186.749205][ T5824] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 186.753514][ T5824] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 186.756946][ T5824] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 186.760957][ T5824] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 186.763860][ T5824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.768026][ T5824] usb 6-1: config 0 descriptor?? [ 186.770497][ T5882] usb usb42-port1: attempt power cycle [ 186.775335][ T5824] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 187.043617][ T5824] usb 6-1: USB disconnect, device number 14 [ 187.043692][ C0] ldusb 6-1:0.55: usb_submit_urb failed (-19) [ 187.049462][ T8412] ldusb 6-1:0.55: Couldn't submit interrupt_out_urb -19 [ 187.058434][ T5824] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 187.094266][ T8412] overlayfs: fs on './file1/file0' does not support file handles, falling back to index=off,nfs_export=off. [ 187.332165][ T5882] usb usb42-port1: unable to enumerate USB device [ 187.475108][ T8438] 9pnet_virtio: no channels available for device syz [ 187.512505][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.723'. [ 187.523878][ T8440] CIFS: Attempting to mount //127.0.0.1/share [ 187.582158][ T8441] CIFS: VFS: Invalid response size 0 for command 0 [ 187.585262][ T8440] CIFS: VFS: cifs_mount failed w/return code = -5 [ 187.601441][ T8440] lo: entered allmulticast mode [ 187.606952][ T8439] lo: left allmulticast mode [ 188.101543][ T5882] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 188.106378][ T8448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.732'. [ 188.123849][ T8448] CIFS: Attempting to mount //127.0.0.1/share [ 188.191469][ T8449] CIFS: VFS: Invalid response size 0 for command 0 [ 188.202295][ T8448] CIFS: VFS: cifs_mount failed w/return code = -5 [ 188.217771][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 188.232687][ T8448] lo: entered allmulticast mode [ 188.236808][ T8447] lo: left allmulticast mode [ 188.255315][ T5882] usb 8-1: config 4 has an invalid interface number: 201 but max is 0 [ 188.262945][ T5882] usb 8-1: config 4 has no interface number 0 [ 188.265019][ T5882] usb 8-1: config 4 interface 201 has no altsetting 0 [ 188.287321][ T5882] usb 8-1: New USB device found, idVendor=0781, idProduct=55e8, bcdDevice=71.2b [ 188.290478][ T5882] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.293924][ T5882] usb 8-1: Product: syz [ 188.295541][ T5882] usb 8-1: Manufacturer: syz [ 188.297005][ T5882] usb 8-1: SerialNumber: syz [ 188.760413][ T5882] usb-storage 8-1:4.201: USB Mass Storage device detected [ 188.791113][ T5882] usb-storage 8-1:4.201: Quirks match for vid 0781 pid 55e8: 800000 [ 188.806601][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 188.895619][ T5882] usb 8-1: USB disconnect, device number 15 [ 188.984080][ T8469] trusted_key: syz.2.731 sent an empty control message without MSG_MORE. [ 188.991285][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 189.508181][ T8483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.736'. [ 189.520189][ T8483] CIFS: Attempting to mount //127.0.0.1/share [ 189.582084][ T8484] CIFS: VFS: Invalid response size 0 for command 0 [ 189.586635][ T8483] CIFS: VFS: cifs_mount failed w/return code = -5 [ 189.600792][ T8483] lo: entered allmulticast mode [ 189.612164][ T8482] lo: left allmulticast mode [ 189.883192][ T7847] udevd[7847]: incorrect bcache checksum on /dev/loop0 [ 190.055669][ T8505] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.742'. [ 190.169860][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 190.542842][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.747'. [ 190.555824][ T8517] CIFS: Attempting to mount //127.0.0.1/share [ 190.608345][ T8518] CIFS: VFS: Invalid response size 0 for command 0 [ 190.609035][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 190.613233][ T8517] CIFS: VFS: cifs_mount failed w/return code = -5 [ 190.618954][ T8525] FAULT_INJECTION: forcing a failure. [ 190.618954][ T8525] name failslab, interval 1, probability 0, space 0, times 0 [ 190.623504][ T8525] CPU: 0 UID: 0 PID: 8525 Comm: syz.0.749 Tainted: G S L syzkaller #0 PREEMPT(full) [ 190.623523][ T8525] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 190.623528][ T8525] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 190.623535][ T8525] Call Trace: [ 190.623539][ T8525] [ 190.623544][ T8525] dump_stack_lvl+0x100/0x190 [ 190.623562][ T8525] should_fail_ex.cold+0x5/0xa [ 190.623576][ T8525] should_failslab+0xc2/0x120 [ 190.623592][ T8525] __kmalloc_cache_noprof+0x91/0x6c0 [ 190.623604][ T8525] ? nf_tables_newflowtable+0x62c/0x2830 [ 190.623641][ T8525] nf_tables_newflowtable+0x62c/0x2830 [ 190.623662][ T8525] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 190.623688][ T8525] ? __pfx___nla_validate_parse+0x10/0x10 [ 190.623707][ T8525] ? __nla_parse+0x40/0x60 [ 190.623721][ T8525] nfnetlink_rcv_batch+0x1410/0x2880 [ 190.623746][ T8525] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 190.623764][ T8525] ? kasan_save_stack+0x30/0x50 [ 190.623778][ T8525] ? kasan_save_track+0x14/0x30 [ 190.623792][ T8525] ? __kasan_slab_alloc+0x89/0x90 [ 190.623806][ T8525] ? kmem_cache_alloc_node_noprof+0x27d/0x6b0 [ 190.623821][ T8525] ? kmalloc_reserve+0x148/0x350 [ 190.623832][ T8517] lo: entered allmulticast mode [ 190.623859][ T8525] ? __nla_parse+0x40/0x60 [ 190.623873][ T8525] nfnetlink_rcv+0x3bd/0x440 [ 190.623889][ T8525] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 190.623908][ T8525] netlink_unicast+0x585/0x850 [ 190.623930][ T8525] ? __pfx_netlink_unicast+0x10/0x10 [ 190.623946][ T8525] netlink_sendmsg+0x8b0/0xda0 [ 190.623975][ T8525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.623991][ T8525] ? apparmor_socket_sendmsg+0x15b/0x270 [ 190.624006][ T8525] ____sys_sendmsg+0xa4d/0xbe0 [ 190.624018][ T8525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.624032][ T8525] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.624050][ T8525] ___sys_sendmsg+0x190/0x1e0 [ 190.624063][ T8525] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.624082][ T8525] ? find_held_lock+0x2b/0x80 [ 190.624106][ T8525] __sys_sendmsg+0x160/0x210 [ 190.624122][ T8525] ? __pfx___sys_sendmsg+0x10/0x10 [ 190.624142][ T8525] ? __pfx_ksys_write+0x10/0x10 [ 190.624156][ T8525] __do_fast_syscall_32+0xe7/0x970 [ 190.624173][ T8525] ? lockdep_hardirqs_on+0x78/0x100 [ 190.624190][ T8525] do_fast_syscall_32+0x32/0x70 [ 190.624207][ T8525] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 190.624222][ T8525] RIP: 0023:0xf707efec [ 190.624235][ T8525] Code: Unable to access opcode bytes at 0xf707efc2. [ 190.624240][ T8525] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 190.624252][ T8525] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 190.624259][ T8525] RDX: 00000000040000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 190.624265][ T8525] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 190.624271][ T8525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.624277][ T8525] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 190.624292][ T8525] [ 190.743299][ T8516] lo: left allmulticast mode [ 190.770254][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 190.846901][ T8533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.859229][ T8533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.957803][ T8545] FAULT_INJECTION: forcing a failure. [ 190.957803][ T8545] name failslab, interval 1, probability 0, space 0, times 0 [ 190.962244][ T8545] CPU: 0 UID: 0 PID: 8545 Comm: syz.3.755 Tainted: G S L syzkaller #0 PREEMPT(full) [ 190.962264][ T8545] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 190.962269][ T8545] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 190.962276][ T8545] Call Trace: [ 190.962280][ T8545] [ 190.962284][ T8545] dump_stack_lvl+0x100/0x190 [ 190.962302][ T8545] should_fail_ex.cold+0x5/0xa [ 190.962316][ T8545] should_failslab+0xc2/0x120 [ 190.962332][ T8545] __kmalloc_noprof+0xfc/0x820 [ 190.962346][ T8545] ? lockdep_init_map_type+0x5c/0x250 [ 190.962357][ T8545] ? nft_trans_alloc+0x1d/0x2d0 [ 190.962371][ T8545] nft_trans_alloc+0x1d/0x2d0 [ 190.962383][ T8545] nf_tables_newtable+0x1363/0x1a90 [ 190.962401][ T8545] ? __pfx_nf_tables_newtable+0x10/0x10 [ 190.962434][ T8545] ? __nla_parse+0x40/0x60 [ 190.962450][ T8545] nfnetlink_rcv_batch+0x1410/0x2880 [ 190.962475][ T8545] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 190.962491][ T8545] ? find_held_lock+0x2b/0x80 [ 190.962507][ T8545] ? __local_bh_enable_ip+0x9e/0x120 [ 190.962520][ T8545] ? lockdep_hardirqs_on+0x78/0x100 [ 190.962536][ T8545] ? __dev_queue_xmit+0xa12/0x4970 [ 190.962569][ T8545] ? __nla_parse+0x40/0x60 [ 190.962583][ T8545] nfnetlink_rcv+0x3bd/0x440 [ 190.962600][ T8545] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 190.962620][ T8545] netlink_unicast+0x585/0x850 [ 190.962635][ T8545] ? __pfx_netlink_unicast+0x10/0x10 [ 190.962652][ T8545] netlink_sendmsg+0x8b0/0xda0 [ 190.962667][ T8545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.962686][ T8545] ? apparmor_socket_sendmsg+0x15b/0x270 [ 190.962701][ T8545] ____sys_sendmsg+0xa4d/0xbe0 [ 190.962712][ T8545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.962726][ T8545] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.962745][ T8545] ___sys_sendmsg+0x190/0x1e0 [ 190.962758][ T8545] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.962777][ T8545] ? find_held_lock+0x2b/0x80 [ 190.962800][ T8545] __sys_sendmsg+0x160/0x210 [ 190.962816][ T8545] ? __pfx___sys_sendmsg+0x10/0x10 [ 190.962836][ T8545] ? __pfx_ksys_write+0x10/0x10 [ 190.962850][ T8545] __do_fast_syscall_32+0xe7/0x970 [ 190.962867][ T8545] ? lockdep_hardirqs_on+0x78/0x100 [ 190.962883][ T8545] do_fast_syscall_32+0x32/0x70 [ 190.962900][ T8545] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 190.962914][ T8545] RIP: 0023:0xf6fdefec [ 190.962927][ T8545] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 190.962932][ T8545] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 190.962944][ T8545] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 190.962951][ T8545] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 190.962957][ T8545] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 190.962963][ T8545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.962970][ T8545] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 190.962984][ T8545] [ 190.965110][ T8546] tipc: Started in network mode [ 191.029460][ T8551] FAULT_INJECTION: forcing a failure. [ 191.029460][ T8551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.031008][ T8546] tipc: Node identity ac14140f, cluster identity 4711 [ 191.032588][ T8551] CPU: 3 UID: 0 PID: 8551 Comm: syz.3.758 Tainted: G S L syzkaller #0 PREEMPT(full) [ 191.032629][ T8551] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 191.032636][ T8551] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 191.032643][ T8551] Call Trace: [ 191.032647][ T8551] [ 191.032652][ T8551] dump_stack_lvl+0x100/0x190 [ 191.032670][ T8551] should_fail_ex.cold+0x5/0xa [ 191.032683][ T8551] _copy_to_user+0x32/0xd0 [ 191.032703][ T8551] simple_read_from_buffer+0xcb/0x170 [ 191.032723][ T8551] proc_fail_nth_read+0x1af/0x230 [ 191.032741][ T8551] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.032758][ T8551] ? rw_verify_area+0xce/0x6d0 [ 191.032779][ T8551] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.032795][ T8551] vfs_read+0x1e4/0xb40 [ 191.032808][ T8551] ? __pfx_vfs_read+0x10/0x10 [ 191.032817][ T8551] ? find_held_lock+0x2b/0x80 [ 191.032832][ T8551] ? __fget_files+0x215/0x3d0 [ 191.032845][ T8551] ? __fget_files+0x21f/0x3d0 [ 191.032860][ T8551] ksys_read+0x12a/0x250 [ 191.032870][ T8551] ? __pfx_ksys_read+0x10/0x10 [ 191.032884][ T8551] do_int80_emulation+0x14b/0x720 [ 191.032904][ T8551] asm_int80_emulation+0x1a/0x20 [ 191.032916][ T8551] RIP: 0023:0xf71174eb [ 191.032925][ T8551] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 191.032936][ T8551] RSP: 002b:00000000f53cd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 191.032947][ T8551] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f53cd5d0 [ 191.032954][ T8551] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 191.032961][ T8551] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 191.032967][ T8551] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 191.032973][ T8551] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 191.032987][ T8551] [ 191.141468][ T5882] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 191.145631][ T8546] tipc: New replicast peer: 255.255.255.255 [ 191.148076][ T8546] tipc: Enabled bearer , priority 10 [ 191.202465][ T8561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.761'. [ 191.207761][ T8561] CIFS: Attempting to mount //127.0.0.1/share [ 191.249209][ T8566] FAULT_INJECTION: forcing a failure. [ 191.249209][ T8566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.253807][ T8566] CPU: 0 UID: 0 PID: 8566 Comm: syz.2.762 Tainted: G S L syzkaller #0 PREEMPT(full) [ 191.253827][ T8566] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 191.253831][ T8566] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 191.253838][ T8566] Call Trace: [ 191.253842][ T8566] [ 191.253847][ T8566] dump_stack_lvl+0x100/0x190 [ 191.253866][ T8566] should_fail_ex.cold+0x5/0xa [ 191.253880][ T8566] _copy_from_user+0x2e/0xd0 [ 191.253898][ T8566] ctl_ioctl+0x292/0xcd0 [ 191.253915][ T8566] ? __pfx_table_load+0x10/0x10 [ 191.253933][ T8566] ? __pfx_ctl_ioctl+0x10/0x10 [ 191.253962][ T8566] ? __fget_files+0x21f/0x3d0 [ 191.253976][ T8566] dm_compat_ctl_ioctl+0x23/0x30 [ 191.253993][ T8566] ? __pfx_dm_compat_ctl_ioctl+0x10/0x10 [ 191.254009][ T8566] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 191.254028][ T8566] __do_fast_syscall_32+0xe7/0x970 [ 191.254045][ T8566] ? lockdep_hardirqs_on+0x78/0x100 [ 191.254062][ T8566] do_fast_syscall_32+0x32/0x70 [ 191.254079][ T8566] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 191.254093][ T8566] RIP: 0023:0xf709efec [ 191.254107][ T8566] Code: Unable to access opcode bytes at 0xf709efc2. [ 191.254113][ T8566] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 191.254124][ T8566] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c138fd09 [ 191.254131][ T8566] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 191.254138][ T8566] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 191.254144][ T8566] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 191.254150][ T8566] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 191.254164][ T8566] [ 191.261212][ T8563] CIFS: VFS: Invalid response size 0 for command 0 [ 191.271424][ T5882] usb 6-1: device descriptor read/64, error -71 [ 191.275725][ T8567] lo: entered allmulticast mode [ 191.326050][ T8561] CIFS: VFS: cifs_mount failed w/return code = -5 [ 191.334099][ T8560] lo: left allmulticast mode [ 191.462854][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 191.511473][ T5882] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 191.563986][ T8578] batadv_slave_1: entered promiscuous mode [ 191.572625][ T8578] netlink: 28 bytes leftover after parsing attributes in process `syz.0.766'. [ 191.606884][ T8578] batadv_slave_1: left promiscuous mode [ 191.642181][ T5882] usb 6-1: device descriptor read/64, error -71 [ 191.652928][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 191.751648][ T5882] usb usb6-port1: attempt power cycle [ 191.901743][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 192.020899][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 192.092246][ T5882] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 192.114798][ T5882] usb 6-1: device descriptor read/8, error -71 [ 192.242453][ T8597] batadv_slave_1: entered promiscuous mode [ 192.260921][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 192.264514][ T8597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.773'. [ 192.264880][ T851] tipc: Node number set to 2886997007 [ 192.281140][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 192.287342][ T8597] batadv_slave_1: left promiscuous mode [ 192.335688][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 192.353228][ T5882] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 192.359091][ T8601] comedi comedi0: aio_aio12_8: a I/O base address must be specified [ 192.374742][ T5882] usb 6-1: device descriptor read/8, error -71 [ 192.406513][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 192.406537][ T42] audit: type=1804 audit(1786177747.257:761): pid=8605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.776" name="/newroot/191/file1" dev="tmpfs" ino=1063 res=1 errno=0 [ 192.434750][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 192.450215][ T8609] netlink: 16 bytes leftover after parsing attributes in process `syz.0.778'. [ 192.481629][ T5882] usb usb6-port1: unable to enumerate USB device [ 192.494944][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 192.510832][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.780'. [ 192.513748][ T8612] ip6tnl1: entered allmulticast mode [ 192.518543][ T8612] Cannot find add_set index 1 as target [ 192.528229][ T8614] CIFS: Attempting to mount //127.0.0.1/share [ 192.537533][ T8616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.781'. [ 192.581482][ T8617] CIFS: VFS: Invalid response size 0 for command 0 [ 192.583938][ T8614] CIFS: VFS: cifs_mount failed w/return code = -5 [ 192.586923][ T8616] CIFS: Attempting to mount //127.0.0.1/share [ 192.591240][ T8614] lo: entered allmulticast mode [ 192.596670][ T8613] lo: left allmulticast mode [ 192.638576][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 192.649833][ T8623] lo: entered allmulticast mode [ 192.850046][ T8628] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 192.853792][ T8629] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 192.888316][ T8631] FAULT_INJECTION: forcing a failure. [ 192.888316][ T8631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.892841][ T8631] CPU: 2 UID: 0 PID: 8631 Comm: syz.0.785 Tainted: G S L syzkaller #0 PREEMPT(full) [ 192.892872][ T8631] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 192.892878][ T8631] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 192.892886][ T8631] Call Trace: [ 192.892890][ T8631] [ 192.892895][ T8631] dump_stack_lvl+0x100/0x190 [ 192.892943][ T8631] should_fail_ex.cold+0x5/0xa [ 192.892958][ T8631] _copy_from_iter+0x1f4/0x1690 [ 192.892977][ T8631] ? __asan_memset+0x23/0x50 [ 192.892990][ T8631] ? __pfx__copy_from_iter+0x10/0x10 [ 192.893008][ T8631] ? __pfx___alloc_skb+0x10/0x10 [ 192.893030][ T8631] netlink_sendmsg+0x808/0xda0 [ 192.893047][ T8631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.893062][ T8631] ? apparmor_socket_sendmsg+0x15b/0x270 [ 192.893076][ T8631] ____sys_sendmsg+0xa4d/0xbe0 [ 192.893087][ T8631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.893101][ T8631] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.893118][ T8631] ___sys_sendmsg+0x190/0x1e0 [ 192.893131][ T8631] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.893150][ T8631] ? find_held_lock+0x2b/0x80 [ 192.893173][ T8631] __sys_sendmsg+0x160/0x210 [ 192.893189][ T8631] ? __pfx___sys_sendmsg+0x10/0x10 [ 192.893211][ T8631] ? __pfx_ksys_write+0x10/0x10 [ 192.893225][ T8631] __do_fast_syscall_32+0xe7/0x970 [ 192.893244][ T8631] ? lockdep_hardirqs_on+0x78/0x100 [ 192.893260][ T8631] do_fast_syscall_32+0x32/0x70 [ 192.893277][ T8631] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.893291][ T8631] RIP: 0023:0xf707efec [ 192.893304][ T8631] Code: Unable to access opcode bytes at 0xf707efc2. [ 192.893309][ T8631] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 192.893320][ T8631] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 192.893327][ T8631] RDX: 0000000004040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 192.893333][ T8631] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 192.893339][ T8631] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 192.893346][ T8631] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.893360][ T8631] [ 193.369867][ T8615] lo: left allmulticast mode [ 193.374226][ T8616] CIFS: VFS: Error connecting to socket. Aborting operation. [ 193.378165][ T8616] CIFS: VFS: cifs_mount failed w/return code = -4 [ 193.496953][ T8659] netlink: 'syz.3.794': attribute type 4 has an invalid length. [ 193.499647][ T8659] netlink: 28 bytes leftover after parsing attributes in process `syz.3.794'. [ 193.534149][ T8661] orangefs_devreq_write_iter: failed to copy head. [ 193.543123][ T8666] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 193.771417][ T5840] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 193.876848][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.880840][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.061685][ T5840] usb 8-1: Using ep0 maxpacket: 32 [ 194.090954][ T5840] usb 8-1: config 0 has no interfaces? [ 194.128285][ T5840] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 194.145381][ T5840] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 194.150805][ T5840] usb 8-1: Product: syz [ 194.158700][ T5840] usb 8-1: Manufacturer: syz [ 194.164400][ T5840] usb 8-1: SerialNumber: syz [ 194.202074][ T5840] usb 8-1: config 0 descriptor?? [ 194.592787][ T5824] usb 8-1: USB disconnect, device number 16 [ 194.665029][ T8678] syzkaller0: entered promiscuous mode [ 194.666946][ T8678] syzkaller0: entered allmulticast mode [ 194.681156][ T8678] device-mapper: ioctl: Invalid ioctl structure: name m, dev f801 [ 195.231216][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.804'. [ 195.283513][ T8692] CIFS: Attempting to mount //127.0.0.1/share [ 195.343919][ T8693] CIFS: VFS: Invalid response size 0 for command 0 [ 195.346571][ T8692] CIFS: VFS: cifs_mount failed w/return code = -5 [ 196.194461][ T8694] lo: entered allmulticast mode [ 196.196849][ T8694] lo: left allmulticast mode [ 196.221913][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.805'. [ 196.319059][ T8701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.807'. [ 196.418001][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.809'. [ 196.468451][ T8708] FAULT_INJECTION: forcing a failure. [ 196.468451][ T8708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.472837][ T8708] CPU: 2 UID: 0 PID: 8708 Comm: syz.2.810 Tainted: G S L syzkaller #0 PREEMPT(full) [ 196.472857][ T8708] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 196.472862][ T8708] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 196.472869][ T8708] Call Trace: [ 196.472873][ T8708] [ 196.472878][ T8708] dump_stack_lvl+0x100/0x190 [ 196.472896][ T8708] should_fail_ex.cold+0x5/0xa [ 196.472909][ T8708] strncpy_from_user+0x3b/0x2d0 [ 196.472928][ T8708] do_getname+0x78/0x390 [ 196.472944][ T8708] __ia32_sys_linkat+0xd0/0x150 [ 196.472958][ T8708] __do_fast_syscall_32+0xe7/0x970 [ 196.472977][ T8708] ? lockdep_hardirqs_on+0x78/0x100 [ 196.472993][ T8708] do_fast_syscall_32+0x32/0x70 [ 196.473010][ T8708] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 196.473025][ T8708] RIP: 0023:0xf709efec [ 196.473038][ T8708] Code: Unable to access opcode bytes at 0xf709efc2. [ 196.473043][ T8708] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 000000000000012f [ 196.473054][ T8708] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800001c0 [ 196.473078][ T8708] RDX: 00000000ffffff9c RSI: 0000000000000000 RDI: 0000000000001000 [ 196.473085][ T8708] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 196.473091][ T8708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.473098][ T8708] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 196.473112][ T8708] [ 196.491431][ T5840] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 196.501167][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 196.573990][ T8716] netlink: 'syz.2.813': attribute type 10 has an invalid length. [ 196.599088][ T8716] team0: Port device dummy0 added [ 196.612100][ T8716] netlink: 'syz.2.813': attribute type 10 has an invalid length. [ 196.623512][ T8716] team0: Port device dummy0 removed [ 196.644234][ T5840] usb 8-1: device descriptor read/64, error -71 [ 196.654339][ T8718] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 196.656457][ T8718] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 196.659246][ T8718] vhci_hcd vhci_hcd.0: Device attached [ 196.723182][ T8724] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 196.726159][ T8724] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 196.870958][ T8726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.815'. [ 196.881637][ T8726] CIFS: Attempting to mount //127.0.0.1/share [ 196.901510][ T5840] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 196.921561][ T5824] usb 38-1: SetAddress Request (2) to port 0 [ 196.923551][ T5824] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 196.986114][ T8728] lo: entered allmulticast mode [ 197.041540][ T5840] usb 8-1: device descriptor read/64, error -71 [ 197.151983][ T5840] usb usb8-port1: attempt power cycle [ 197.319979][ T8720] vhci_hcd: connection reset by peer [ 197.324404][ T12] vhci_hcd vhci_hcd.0: stop threads [ 197.326148][ T12] vhci_hcd vhci_hcd.0: release socket [ 197.328060][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 197.504340][ T5840] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 197.521937][ T5840] usb 8-1: device descriptor read/8, error -71 [ 197.700367][ T8725] lo: left allmulticast mode [ 197.708378][ T8726] CIFS: VFS: Error connecting to socket. Aborting operation. [ 197.711680][ T8726] CIFS: VFS: cifs_mount failed w/return code = -4 [ 197.763436][ T5840] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 197.783533][ T5840] usb 8-1: device descriptor read/8, error -71 [ 197.868434][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 197.875761][ T8737] netlink: 16 bytes leftover after parsing attributes in process `syz.0.818'. [ 197.891993][ T5840] usb usb8-port1: unable to enumerate USB device [ 197.894778][ T8737] FAULT_INJECTION: forcing a failure. [ 197.894778][ T8737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.901144][ T8737] CPU: 0 UID: 0 PID: 8737 Comm: syz.0.818 Tainted: G S L syzkaller #0 PREEMPT(full) [ 197.901165][ T8737] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 197.901170][ T8737] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 197.901177][ T8737] Call Trace: [ 197.901182][ T8737] [ 197.901187][ T8737] dump_stack_lvl+0x100/0x190 [ 197.901205][ T8737] should_fail_ex.cold+0x5/0xa [ 197.901218][ T8737] _copy_from_user+0x2e/0xd0 [ 197.901236][ T8737] kstrtouint_from_user+0xd6/0x1d0 [ 197.901249][ T8737] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 197.901262][ T8737] ? __lock_acquire+0x49f/0x1a40 [ 197.901287][ T8737] proc_fail_nth_write+0x83/0x220 [ 197.901304][ T8737] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 197.901339][ T8737] vfs_write+0x2aa/0x1050 [ 197.901351][ T8737] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 197.901370][ T8737] ? __pfx_vfs_write+0x10/0x10 [ 197.901379][ T8737] ? find_held_lock+0x2b/0x80 [ 197.901393][ T8737] ? __fget_files+0x215/0x3d0 [ 197.901407][ T8737] ? __fget_files+0x21f/0x3d0 [ 197.901422][ T8737] ksys_write+0x12a/0x250 [ 197.901432][ T8737] ? __pfx_ksys_write+0x10/0x10 [ 197.901447][ T8737] do_int80_emulation+0x14b/0x720 [ 197.901466][ T8737] asm_int80_emulation+0x1a/0x20 [ 197.901478][ T8737] RIP: 0023:0xf71b74eb [ 197.901488][ T8737] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 197.901499][ T8737] RSP: 002b:00000000f546d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 197.901511][ T8737] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f546d5d0 [ 197.901518][ T8737] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 197.901524][ T8737] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 197.901531][ T8737] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 197.901537][ T8737] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 197.901551][ T8737] [ 197.987987][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 197.995541][ T8743] FAULT_INJECTION: forcing a failure. [ 197.995541][ T8743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.999903][ T8743] CPU: 0 UID: 0 PID: 8743 Comm: syz.0.820 Tainted: G S L syzkaller #0 PREEMPT(full) [ 197.999928][ T8743] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 197.999933][ T8743] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 197.999940][ T8743] Call Trace: [ 197.999945][ T8743] [ 197.999950][ T8743] dump_stack_lvl+0x100/0x190 [ 197.999967][ T8743] should_fail_ex.cold+0x5/0xa [ 197.999981][ T8743] _copy_to_user+0x32/0xd0 [ 197.999999][ T8743] simple_read_from_buffer+0xcb/0x170 [ 198.000019][ T8743] proc_fail_nth_read+0x1af/0x230 [ 198.000036][ T8743] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 198.000054][ T8743] ? rw_verify_area+0xce/0x6d0 [ 198.000070][ T8743] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 198.000087][ T8743] vfs_read+0x1e4/0xb40 [ 198.000099][ T8743] ? __pfx_vfs_read+0x10/0x10 [ 198.000108][ T8743] ? find_held_lock+0x2b/0x80 [ 198.000123][ T8743] ? __fget_files+0x215/0x3d0 [ 198.000136][ T8743] ? __fget_files+0x21f/0x3d0 [ 198.000150][ T8743] ksys_read+0x12a/0x250 [ 198.000164][ T8743] ? __pfx_ksys_read+0x10/0x10 [ 198.000178][ T8743] do_int80_emulation+0x14b/0x720 [ 198.000198][ T8743] asm_int80_emulation+0x1a/0x20 [ 198.000210][ T8743] RIP: 0023:0xf71b74eb [ 198.000220][ T8743] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 198.000231][ T8743] RSP: 002b:00000000f546d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 198.000243][ T8743] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f546d5d0 [ 198.000249][ T8743] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 198.000256][ T8743] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 198.000262][ T8743] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 198.000268][ T8743] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 198.000282][ T8743] [ 198.064938][ T7847] udevd[7847]: incorrect bcache checksum on /dev/loop0 [ 198.138604][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 198.174185][ T8753] FAULT_INJECTION: forcing a failure. [ 198.174185][ T8753] name failslab, interval 1, probability 0, space 0, times 0 [ 198.178912][ T8753] CPU: 2 UID: 0 PID: 8753 Comm: syz.0.823 Tainted: G S L syzkaller #0 PREEMPT(full) [ 198.178933][ T8753] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 198.178938][ T8753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 198.178946][ T8753] Call Trace: [ 198.178949][ T8753] [ 198.178954][ T8753] dump_stack_lvl+0x100/0x190 [ 198.178972][ T8753] should_fail_ex.cold+0x5/0xa [ 198.178985][ T8753] should_failslab+0xc2/0x120 [ 198.179003][ T8753] __kmalloc_noprof+0xfc/0x820 [ 198.179017][ T8753] ? tomoyo_encode2+0xfb/0x3c0 [ 198.179037][ T8753] tomoyo_encode2+0xfb/0x3c0 [ 198.179056][ T8753] tomoyo_encode+0x29/0x50 [ 198.179071][ T8753] tomoyo_realpath_from_path+0x18c/0x690 [ 198.179096][ T8753] tomoyo_path_number_perm+0x23c/0x580 [ 198.179114][ T8753] ? tomoyo_path_number_perm+0x22e/0x580 [ 198.179136][ T8753] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 198.179156][ T8753] ? get_pid_task+0x106/0x250 [ 198.179198][ T8753] ? find_held_lock+0x2b/0x80 [ 198.179217][ T8753] ? __fget_files+0x215/0x3d0 [ 198.179228][ T8753] ? hook_file_ioctl_common+0x140/0x440 [ 198.179259][ T8753] ? __fget_files+0x215/0x3d0 [ 198.179275][ T8753] ? __fget_files+0x21f/0x3d0 [ 198.179288][ T8753] security_file_ioctl_compat+0xd3/0x230 [ 198.179304][ T8753] __ia32_compat_sys_ioctl+0xc2/0x360 [ 198.179323][ T8753] __do_fast_syscall_32+0xe7/0x970 [ 198.179343][ T8753] ? lockdep_hardirqs_on+0x78/0x100 [ 198.179360][ T8753] do_fast_syscall_32+0x32/0x70 [ 198.179378][ T8753] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 198.179393][ T8753] RIP: 0023:0xf707efec [ 198.179407][ T8753] Code: Unable to access opcode bytes at 0xf707efc2. [ 198.179413][ T8753] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 198.179425][ T8753] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004611 [ 198.179432][ T8753] RDX: 0000000002000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 198.179439][ T8753] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 198.179445][ T8753] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 198.179451][ T8753] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 198.179466][ T8753] [ 198.179769][ T8753] ERROR: Out of memory at tomoyo_realpath_from_path. [ 198.181551][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.824'. [ 198.246346][ T8755] CIFS: Attempting to mount //127.0.0.1/share [ 198.279710][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 198.303489][ T8756] CIFS: VFS: Invalid response size 0 for command 0 [ 198.305796][ T8755] CIFS: VFS: cifs_mount failed w/return code = -5 [ 198.328762][ T8760] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 198.339991][ T8752] lo: entered allmulticast mode [ 198.342721][ T8750] lo: left allmulticast mode [ 198.394382][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 198.491645][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 198.967931][ T8790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.833'. [ 199.007927][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 199.023134][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 199.312289][ T5882] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 199.484362][ T5882] usb 5-1: unable to get BOS descriptor or descriptor too short [ 199.489030][ T5882] usb 5-1: not running at top speed; connect to a high speed hub [ 199.500006][ T5882] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 199.503889][ T5882] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 199.512723][ T5882] usb 5-1: config 14 has no interface number 0 [ 199.517059][ T5882] usb 5-1: config 14 has no interface number 1 [ 199.520928][ T5882] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 199.521798][ T8804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.838'. [ 199.528082][ T5882] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 199.535035][ T5882] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 199.541453][ T5882] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 199.553338][ T5882] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid maxpacket 65280, setting to 64 [ 199.559435][ T8804] CIFS: Attempting to mount //127.0.0.1/share [ 199.563457][ T5882] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.577997][ T5882] usb 5-1: config 14 interface 57 has no altsetting 0 [ 199.582356][ T5882] usb 5-1: config 14 interface 228 has no altsetting 0 [ 199.588199][ T5882] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 199.592710][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.596086][ T5882] usb 5-1: Product: syz [ 199.598081][ T5882] usb 5-1: Manufacturer: syz [ 199.606267][ T5882] usb 5-1: SerialNumber: syz [ 199.613854][ T8806] CIFS: VFS: Invalid response size 0 for command 0 [ 199.619757][ T8804] CIFS: VFS: cifs_mount failed w/return code = -5 [ 199.624702][ T8809] lo: entered allmulticast mode [ 199.639957][ T8802] lo: left allmulticast mode [ 200.001459][ T5840] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 200.151858][ T5840] usb 6-1: Using ep0 maxpacket: 8 [ 200.154954][ T5840] usb 6-1: config 109 has too many interfaces: 136, using maximum allowed: 32 [ 200.158032][ T5840] usb 6-1: config 109 has 1 interface, different from the descriptor's value: 136 [ 200.161460][ T5840] usb 6-1: config 109 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.165108][ T5840] usb 6-1: config 109 interface 0 has no altsetting 0 [ 200.167483][ T5840] usb 6-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00 [ 200.170599][ T5840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.233986][ T8825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.847'. [ 200.275945][ T5882] legousbtower 5-1:14.57: interrupt endpoints not found [ 200.479408][ T8792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.834'. [ 200.518536][ T5882] legousbtower 5-1:14.228: get version request failed: -71 [ 200.521012][ T5882] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -71 [ 200.529805][ T5882] usb 5-1: USB disconnect, device number 12 [ 200.640898][ T8816] netlink: 'syz.1.843': attribute type 12 has an invalid length. [ 200.644201][ T8816] netlink: 132 bytes leftover after parsing attributes in process `syz.1.843'. [ 200.654015][ T5840] usb 6-1: string descriptor 0 read error: -71 [ 200.660132][ T5840] usbhid 6-1:109.0: can't add hid device: -71 [ 200.662501][ T5840] usbhid 6-1:109.0: probe with driver usbhid failed with error -71 [ 200.666511][ T5840] usb 6-1: USB disconnect, device number 19 [ 201.058632][ T8839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.850'. [ 201.064661][ T8839] CIFS: Attempting to mount //127.0.0.1/share [ 201.117473][ T8840] CIFS: VFS: Invalid response size 0 for command 0 [ 201.119987][ T8839] CIFS: VFS: cifs_mount failed w/return code = -5 [ 201.124677][ T8839] lo: entered allmulticast mode [ 201.127141][ T8838] lo: left allmulticast mode [ 201.225983][ T8847] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 201.228240][ T8847] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 201.232234][ T8847] vhci_hcd vhci_hcd.0: Device attached [ 201.511482][ T5882] usb 42-1: SetAddress Request (6) to port 0 [ 201.513496][ T5882] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 202.125116][ T5824] usb 38-1: device descriptor read/8, error -110 [ 202.409228][ T8848] vhci_hcd: connection closed [ 202.409543][ T12] vhci_hcd vhci_hcd.2: stop threads [ 202.417915][ T12] vhci_hcd vhci_hcd.2: release socket [ 202.421997][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 202.459246][ T8870] veth1_macvtap: left promiscuous mode [ 202.461480][ T5882] usb 42-1: enqueue for inactive port 0 [ 202.466774][ T8870] macsec0: entered promiscuous mode [ 202.582250][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.859'. [ 202.583787][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 202.635215][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 202.661136][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.860'. [ 202.667765][ T8875] CIFS: Attempting to mount //127.0.0.1/share [ 202.721047][ T8876] CIFS: VFS: Invalid response size 0 for command 0 [ 202.724198][ T8877] lo: entered allmulticast mode [ 202.730851][ T8875] CIFS: VFS: cifs_mount failed w/return code = -5 [ 202.736234][ T8874] lo: left allmulticast mode [ 202.799219][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 202.814275][ T8869] infiniband syz0: set active [ 202.817086][ T8869] infiniband syz0: added bond_slave_1 [ 202.834529][ T5824] usb usb38-port1: attempt power cycle [ 202.853819][ T5882] usb usb42-port1: attempt power cycle [ 202.919091][ T8869] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 202.946105][ T8885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.863'. [ 202.957735][ T8885] CIFS: Attempting to mount //127.0.0.1/share [ 203.007415][ T8869] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 203.020467][ T8886] CIFS: VFS: Invalid response size 0 for command 0 [ 203.032191][ T8885] CIFS: VFS: cifs_mount failed w/return code = -5 [ 203.045439][ T8887] lo: entered allmulticast mode [ 203.061799][ T8884] lo: left allmulticast mode [ 203.104898][ T8869] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 203.154683][ T8869] RDS/IB: syz0: added [ 203.163871][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 203.198804][ T8869] smc: adding ib device syz0 with port count 1 [ 203.220629][ T8893] netlink: 68 bytes leftover after parsing attributes in process `syz.2.866'. [ 203.243297][ T8893] Console: switching to colour dummy device 80x25 [ 203.272571][ T8869] smc: ib device syz0 port 1 has no pnetid [ 203.370208][ T8895] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 203.425032][ T8895] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 203.427656][ T8895] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 203.446667][ T8895] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 203.452049][ T8895] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 203.476244][ T8895] pci 0000:00:01.0: Adding to iommu group 1 [ 203.488252][ T8895] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 203.490466][ T8895] pci 0000:00:01.0: vgaarb: bridge control possible [ 203.492569][ T8895] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 203.551633][ T5824] usb usb38-port1: unable to enumerate USB device [ 203.555970][ T8895] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 203.558926][ T8895] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 203.572107][ T8895] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 203.633218][ T5882] usb usb42-port1: unable to enumerate USB device [ 203.660166][ T8895] [drm] Found bochs VGA, ID 0xb0c5. [ 203.662436][ T8895] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 203.688127][ T8895] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 203.877520][ T8895] Console: switching to colour frame buffer device 160x50 [ 203.930694][ T8895] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 204.095600][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 204.373475][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 204.614893][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 204.678592][ T8906] set match dimension is over the limit! [ 205.568621][ T8920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.874'. [ 205.604622][ T8920] CIFS: Attempting to mount //127.0.0.1/share [ 205.694581][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 205.697192][ T8923] FAULT_INJECTION: forcing a failure. [ 205.697192][ T8923] name failslab, interval 1, probability 0, space 0, times 0 [ 205.701578][ T8923] CPU: 0 UID: 0 PID: 8923 Comm: syz.0.876 Tainted: G S L syzkaller #0 PREEMPT(full) [ 205.701597][ T8923] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 205.701602][ T8923] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 205.701616][ T8923] Call Trace: [ 205.701621][ T8923] [ 205.701625][ T8923] dump_stack_lvl+0x100/0x190 [ 205.701686][ T8923] should_fail_ex.cold+0x5/0xa [ 205.701699][ T8923] ? __pfx_filemap_map_pages+0x10/0x10 [ 205.701711][ T8923] should_failslab+0xc2/0x120 [ 205.701727][ T8923] kmem_cache_alloc_noprof+0x91/0x6a0 [ 205.701742][ T8923] ? ptlock_alloc+0x1f/0x70 [ 205.701755][ T8923] ? __pfx_filemap_map_pages+0x10/0x10 [ 205.701766][ T8923] ptlock_alloc+0x1f/0x70 [ 205.701776][ T8923] pte_alloc_one+0x82/0x3d0 [ 205.701794][ T8923] __do_fault+0x26c/0x440 [ 205.701809][ T8923] do_fault+0x2db/0x1750 [ 205.701828][ T8923] __handle_mm_fault+0x187d/0x2a00 [ 205.701844][ T8923] ? __pfx___handle_mm_fault+0x10/0x10 [ 205.701855][ T8923] ? find_held_lock+0x2b/0x80 [ 205.701868][ T8923] ? mtree_load+0x311/0xa90 [ 205.701908][ T8923] ? mtree_load+0x311/0xa90 [ 205.701935][ T8923] handle_mm_fault+0x37b/0xa30 [ 205.701949][ T8923] __get_user_pages+0x1178/0x32a0 [ 205.701971][ T8923] ? __pfx___get_user_pages+0x10/0x10 [ 205.701991][ T8923] faultin_page_range+0x1f1/0x9e0 [ 205.702011][ T8923] madvise_do_behavior+0x354/0x510 [ 205.702031][ T8923] ? __pfx_madvise_do_behavior+0x10/0x10 [ 205.702049][ T8923] ? down_read+0x13b/0x4c0 [ 205.702084][ T8923] do_madvise+0x238/0x290 [ 205.702101][ T8923] ? __pfx_do_madvise+0x10/0x10 [ 205.702129][ T8923] ? fput+0x79/0x100 [ 205.702142][ T8923] ? ksys_write+0x1ac/0x250 [ 205.702154][ T8923] __ia32_sys_madvise+0xa7/0x110 [ 205.702165][ T8923] ? lockdep_hardirqs_on+0x78/0x100 [ 205.702180][ T8923] __do_fast_syscall_32+0xe7/0x970 [ 205.702197][ T8923] ? lockdep_hardirqs_on+0x78/0x100 [ 205.702214][ T8923] do_fast_syscall_32+0x32/0x70 [ 205.702231][ T8923] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 205.702245][ T8923] RIP: 0023:0xf707efec [ 205.702259][ T8923] Code: Unable to access opcode bytes at 0xf707efc2. [ 205.702271][ T8923] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000db [ 205.702282][ T8923] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000c00000 [ 205.702289][ T8923] RDX: 0000000000000017 RSI: 0000000000000000 RDI: 0000000000000000 [ 205.702296][ T8923] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 205.702302][ T8923] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 205.702308][ T8923] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 205.702328][ T8923] [ 205.812019][ T8926] lo: entered allmulticast mode [ 206.010435][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 206.361026][ T8919] lo: left allmulticast mode [ 206.364081][ T8920] CIFS: VFS: Error connecting to socket. Aborting operation. [ 206.366541][ T8920] CIFS: VFS: cifs_mount failed w/return code = -4 [ 206.522570][ T8936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.880'. [ 206.535491][ T8936] CIFS: Attempting to mount //127.0.0.1/share [ 206.590666][ T8937] CIFS: VFS: Invalid response size 0 for command 0 [ 206.596492][ T8936] CIFS: VFS: cifs_mount failed w/return code = -5 [ 206.609218][ T8936] lo: entered allmulticast mode [ 206.629644][ T8935] lo: left allmulticast mode [ 206.675419][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 206.936513][ T8948] FAULT_INJECTION: forcing a failure. [ 206.936513][ T8948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.940750][ T8948] CPU: 2 UID: 0 PID: 8948 Comm: syz.3.883 Tainted: G S L syzkaller #0 PREEMPT(full) [ 206.940771][ T8948] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 206.940776][ T8948] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 206.940783][ T8948] Call Trace: [ 206.940788][ T8948] [ 206.940793][ T8948] dump_stack_lvl+0x100/0x190 [ 206.940811][ T8948] should_fail_ex.cold+0x5/0xa [ 206.940825][ T8948] _copy_from_user+0x2e/0xd0 [ 206.940877][ T8948] drm_ioctl+0x520/0xc60 [ 206.940895][ T8948] ? __pfx_drm_mode_obj_get_properties_ioctl+0x10/0x10 [ 206.940909][ T8948] ? __pfx_drm_ioctl+0x10/0x10 [ 206.940932][ T8948] drm_compat_ioctl+0x386/0x4c0 [ 206.940952][ T8948] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 206.940970][ T8948] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 206.940997][ T8948] __do_fast_syscall_32+0xe7/0x970 [ 206.941016][ T8948] ? lockdep_hardirqs_on+0x78/0x100 [ 206.941032][ T8948] do_fast_syscall_32+0x32/0x70 [ 206.941050][ T8948] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 206.941064][ T8948] RIP: 0023:0xf6fdefec [ 206.941078][ T8948] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 206.941084][ T8948] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 206.941095][ T8948] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c02064b9 [ 206.941102][ T8948] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 206.941108][ T8948] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 206.941115][ T8948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.941121][ T8948] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 206.941135][ T8948] [ 207.426987][ T8964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.889'. [ 207.443609][ T8964] netlink: 20 bytes leftover after parsing attributes in process `syz.1.889'. [ 207.456226][ T8964] erspan0: entered promiscuous mode [ 207.459600][ T8964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.889'. [ 207.504153][ T8967] FAULT_INJECTION: forcing a failure. [ 207.504153][ T8967] name failslab, interval 1, probability 0, space 0, times 0 [ 207.509111][ T8967] CPU: 0 UID: 0 PID: 8967 Comm: syz.1.890 Tainted: G S L syzkaller #0 PREEMPT(full) [ 207.509133][ T8967] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 207.509138][ T8967] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.509144][ T8967] Call Trace: [ 207.509149][ T8967] [ 207.509167][ T8967] dump_stack_lvl+0x100/0x190 [ 207.509186][ T8967] should_fail_ex.cold+0x5/0xa [ 207.509200][ T8967] should_failslab+0xc2/0x120 [ 207.509216][ T8967] __kmalloc_noprof+0xfc/0x820 [ 207.509231][ T8967] ? sk_prot_alloc+0x10b/0x2a0 [ 207.509255][ T8967] sk_prot_alloc+0x10b/0x2a0 [ 207.509267][ T8967] sk_alloc+0x36/0xe80 [ 207.509284][ T8967] bpf_prog_test_run_skb+0x4db/0x3540 [ 207.509307][ T8967] ? find_held_lock+0x2b/0x80 [ 207.509322][ T8967] ? __fget_files+0x211/0x3d0 [ 207.509337][ T8967] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 207.509351][ T8967] ? fput+0x79/0x100 [ 207.509365][ T8967] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 207.509379][ T8967] __sys_bpf+0x2a12/0x4e80 [ 207.509396][ T8967] ? __pfx___sys_bpf+0x10/0x10 [ 207.509409][ T8967] ? find_held_lock+0x2b/0x80 [ 207.509422][ T8967] ? get_pid_task+0xfc/0x250 [ 207.509437][ T8967] ? get_pid_task+0xfc/0x250 [ 207.509455][ T8967] ? proc_fail_nth_write+0x9f/0x220 [ 207.509471][ T8967] ? find_held_lock+0x2b/0x80 [ 207.509488][ T8967] ? rcu_read_lock_any_held+0x6a/0xa0 [ 207.509504][ T8967] ? find_held_lock+0x2b/0x80 [ 207.509517][ T8967] ? ksys_write+0x190/0x250 [ 207.509527][ T8967] ? ksys_write+0x190/0x250 [ 207.509548][ T8967] ? fput+0x79/0x100 [ 207.509562][ T8967] ? __ia32_sys_bpf+0xcc/0x170 [ 207.509574][ T8967] __ia32_sys_bpf+0xcc/0x170 [ 207.509587][ T8967] ? __do_fast_syscall_32+0x98/0x970 [ 207.509606][ T8967] __do_fast_syscall_32+0xe7/0x970 [ 207.509626][ T8967] ? lockdep_hardirqs_on+0x78/0x100 [ 207.509643][ T8967] do_fast_syscall_32+0x32/0x70 [ 207.509660][ T8967] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 207.509675][ T8967] RIP: 0023:0xf7f97fec [ 207.509689][ T8967] Code: Unable to access opcode bytes at 0xf7f97fc2. [ 207.509694][ T8967] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 207.509706][ T8967] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800001c0 [ 207.509713][ T8967] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000 [ 207.509719][ T8967] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 207.509725][ T8967] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 207.509731][ T8967] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 207.509746][ T8967] [ 207.678283][ T5882] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 207.811435][ T5882] usb 7-1: device descriptor read/64, error -71 [ 207.994449][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 208.051632][ T5882] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 208.181418][ T5882] usb 7-1: device descriptor read/64, error -71 [ 208.291669][ T5882] usb usb7-port1: attempt power cycle [ 208.556555][ T8977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.894'. [ 208.566013][ T8977] CIFS: Attempting to mount //127.0.0.1/share [ 208.631429][ T5882] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 208.634046][ T8980] CIFS: VFS: Invalid response size 0 for command 0 [ 208.637248][ T8977] CIFS: VFS: cifs_mount failed w/return code = -5 [ 208.652124][ T5882] usb 7-1: device descriptor read/8, error -71 [ 208.658780][ T8977] lo: entered allmulticast mode [ 208.667106][ T8976] lo: left allmulticast mode [ 208.672805][ T8982] btrfs: Unknown parameter 'discard@8«|§&È5¸†©EŒ¤&'Û¸KD—XÎ^E‹gC„al¸RŠ«i' [ 208.809134][ T8986] can: request_module (can-proto-3) failed. [ 208.891509][ T5882] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 208.911946][ T5882] usb 7-1: device descriptor read/8, error -71 [ 209.021782][ T5882] usb usb7-port1: unable to enumerate USB device [ 209.722653][ T8973] netlink: 'syz.0.892': attribute type 1 has an invalid length. [ 209.731130][ T8973] netlink: 396 bytes leftover after parsing attributes in process `syz.0.892'. [ 209.769187][ T9000] tipc: Started in network mode [ 209.776725][ T9000] tipc: Node identity 4, cluster identity 4711 [ 209.781464][ T5882] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 209.785285][ T9000] tipc: Node number set to 4 [ 209.798145][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 209.946188][ T5882] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 209.991403][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.184154][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 210.463484][ T5882] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 210.475479][ T9011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.905'. [ 210.481088][ T9011] CIFS: Attempting to mount //127.0.0.1/share [ 210.588082][ T9013] lo: entered allmulticast mode [ 211.077937][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 211.126108][ T9022] netlink: 'syz.3.908': attribute type 83 has an invalid length. [ 211.306774][ T9010] lo: left allmulticast mode [ 211.312892][ T9011] CIFS: VFS: Error connecting to socket. Aborting operation. [ 211.315847][ T9011] CIFS: VFS: cifs_mount failed w/return code = -4 [ 212.046597][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 212.066300][ T9038] 9pnet_fd: Insufficient options for proto=fd [ 212.129636][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 212.175519][ T9044] FAULT_INJECTION: forcing a failure. [ 212.175519][ T9044] name failslab, interval 1, probability 0, space 0, times 0 [ 212.179801][ T9044] CPU: 3 UID: 0 PID: 9044 Comm: syz.3.916 Tainted: G S L syzkaller #0 PREEMPT(full) [ 212.179822][ T9044] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 212.179827][ T9044] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 212.179834][ T9044] Call Trace: [ 212.179839][ T9044] [ 212.179844][ T9044] dump_stack_lvl+0x100/0x190 [ 212.179876][ T9044] should_fail_ex.cold+0x5/0xa [ 212.179889][ T9044] should_failslab+0xc2/0x120 [ 212.179905][ T9044] kmem_cache_alloc_noprof+0x91/0x6a0 [ 212.179920][ T9044] ? do_getname+0x35/0x390 [ 212.179938][ T9044] do_getname+0x35/0x390 [ 212.179953][ T9044] user_path_at+0x26/0x60 [ 212.179964][ T9044] __ia32_sys_mount+0x1fb/0x310 [ 212.179979][ T9044] ? __pfx___ia32_sys_mount+0x10/0x10 [ 212.179998][ T9044] __do_fast_syscall_32+0xe7/0x970 [ 212.180016][ T9044] ? lockdep_hardirqs_on+0x78/0x100 [ 212.180032][ T9044] do_fast_syscall_32+0x32/0x70 [ 212.180049][ T9044] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 212.180064][ T9044] RIP: 0023:0xf6fdefec [ 212.180078][ T9044] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 212.180083][ T9044] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 212.180095][ T9044] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000080 [ 212.180102][ T9044] RDX: 00000000800000c0 RSI: 0000000000800400 RDI: 0000000080000300 [ 212.180108][ T9044] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 212.180115][ T9044] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 212.180121][ T9044] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 212.180135][ T9044] [ 212.251533][ T851] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 212.413141][ T9050] random: crng reseeded on system resumption [ 212.594845][ T9050] 9pnet_fd: Insufficient options for proto=fd [ 212.993480][ T851] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 212.998986][ T851] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 213.004219][ T851] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.018513][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 213.028693][ T9059] netlink: 'syz.3.922': attribute type 1 has an invalid length. [ 213.040446][ T9062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.921'. [ 213.050213][ T9062] CIFS: Attempting to mount //127.0.0.1/share [ 213.062185][ T9059] 8021q: adding VLAN 0 to HW filter on device bond4 [ 213.066435][ T9059] bond3: (slave bond4): making interface the new active one [ 213.069126][ T9059] bond3: (slave bond4): Enslaving as an active interface with an up link [ 213.106308][ T9064] CIFS: VFS: Invalid response size 0 for command 0 [ 213.108143][ T9065] lo: entered allmulticast mode [ 213.110959][ T9062] CIFS: VFS: cifs_mount failed w/return code = -5 [ 213.123101][ T9061] lo: left allmulticast mode [ 213.158423][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 213.176778][ T9069] netlink: 16 bytes leftover after parsing attributes in process `syz.0.924'. [ 213.209446][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 213.252481][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 213.299761][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 214.231286][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 214.377343][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 214.404283][ T9089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.932'. [ 214.409727][ T9089] CIFS: Attempting to mount //127.0.0.1/share [ 214.431712][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 214.463407][ T9091] CIFS: VFS: Invalid response size 0 for command 0 [ 214.467990][ T9089] CIFS: VFS: cifs_mount failed w/return code = -5 [ 214.470415][ T9097] lo: entered allmulticast mode [ 214.482010][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 214.538482][ T9101] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 214.654808][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 215.016691][ T9116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.939'. [ 215.026557][ T5824] usb 7-1: USB disconnect, device number 16 [ 215.236127][ T9126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.943'. [ 215.244998][ T9126] CIFS: Attempting to mount //127.0.0.1/share [ 215.351735][ T9130] lo: entered allmulticast mode [ 216.066510][ T9126] CIFS: VFS: Error connecting to socket. Aborting operation. [ 216.069049][ T9126] CIFS: VFS: cifs_mount failed w/return code = -4 [ 216.121185][ T5882] usb 6-1: USB disconnect, device number 20 [ 216.287145][ T42] audit: type=1800 audit(1786177771.137:762): pid=9148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.949" name="file0" dev="overlay" ino=1270 res=0 errno=0 [ 216.361447][ T5816] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 216.516469][ T9170] FAULT_INJECTION: forcing a failure. [ 216.516469][ T9170] name failslab, interval 1, probability 0, space 0, times 0 [ 216.533498][ T9170] CPU: 0 UID: 0 PID: 9170 Comm: syz.1.954 Tainted: G S L syzkaller #0 PREEMPT(full) [ 216.533520][ T9170] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 216.533525][ T9170] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 216.533532][ T9170] Call Trace: [ 216.533536][ T9170] [ 216.533541][ T9170] dump_stack_lvl+0x100/0x190 [ 216.533559][ T9170] should_fail_ex.cold+0x5/0xa [ 216.533574][ T9170] should_failslab+0xc2/0x120 [ 216.533590][ T9170] __kmalloc_cache_noprof+0x91/0x6c0 [ 216.533603][ T9170] ? sctp_add_bind_addr+0xae/0x3e0 [ 216.533637][ T9170] sctp_add_bind_addr+0xae/0x3e0 [ 216.533656][ T9170] sctp_copy_local_addr_list+0x349/0x550 [ 216.533678][ T9170] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 216.533717][ T9170] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 216.533731][ T9170] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 216.533749][ T9170] sctp_bind_addr_copy+0xe0/0x530 [ 216.533769][ T9170] sctp_connect_new_asoc+0x1c9/0x770 [ 216.533785][ T9170] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 216.533798][ T9170] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 216.533809][ T9170] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 216.533823][ T9170] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 216.533841][ T9170] sctp_sendmsg+0x1743/0x22e0 [ 216.533857][ T9170] ? __pfx___might_resched+0x10/0x10 [ 216.533876][ T9170] ? __pfx_sctp_sendmsg+0x10/0x10 [ 216.533890][ T9170] ? aa_sk_perm+0x309/0xaa0 [ 216.533913][ T9170] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 216.533926][ T9170] ? __pfx_sctp_sendmsg+0x10/0x10 [ 216.533940][ T9170] inet_sendmsg+0x11c/0x140 [ 216.533966][ T9170] ____sys_sendmsg+0x9c9/0xbe0 [ 216.533978][ T9170] ? __pfx_inet_sendmsg+0x10/0x10 [ 216.533996][ T9170] ? __pfx_____sys_sendmsg+0x10/0x10 [ 216.534014][ T9170] ___sys_sendmsg+0x190/0x1e0 [ 216.534027][ T9170] ? __pfx____sys_sendmsg+0x10/0x10 [ 216.534047][ T9170] ? find_held_lock+0x2b/0x80 [ 216.534071][ T9170] __sys_sendmsg+0x160/0x210 [ 216.534087][ T9170] ? __pfx___sys_sendmsg+0x10/0x10 [ 216.534108][ T9170] ? __pfx_ksys_write+0x10/0x10 [ 216.534122][ T9170] __do_fast_syscall_32+0xe7/0x970 [ 216.534139][ T9170] ? lockdep_hardirqs_on+0x78/0x100 [ 216.534156][ T9170] do_fast_syscall_32+0x32/0x70 [ 216.534173][ T9170] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 216.534187][ T9170] RIP: 0023:0xf7f97fec [ 216.534203][ T9170] Code: Unable to access opcode bytes at 0xf7f97fc2. [ 216.534208][ T9170] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 216.534220][ T9170] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 216.534227][ T9170] RDX: 0000000000008050 RSI: 0000000000000000 RDI: 0000000000000000 [ 216.534233][ T9170] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 216.534239][ T9170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.534246][ T9170] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 216.534261][ T9170] [ 216.537639][ T5816] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 216.635951][ T5816] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 216.639022][ T5816] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.656934][ T9179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.956'. [ 216.666205][ T9179] CIFS: Attempting to mount //127.0.0.1/share [ 216.726027][ T9183] CIFS: VFS: Invalid response size 0 for command 0 [ 216.735372][ T9179] CIFS: VFS: cifs_mount failed w/return code = -5 [ 216.750804][ T9189] lo: entered allmulticast mode [ 216.790052][ T9187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.957'. [ 217.034296][ T9204] netlink: 16 bytes leftover after parsing attributes in process `syz.0.961'. [ 217.037186][ T9204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.961'. [ 217.041109][ T9204] netlink: 16 bytes leftover after parsing attributes in process `syz.0.961'. [ 217.045731][ T9204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.961'. [ 217.310199][ T9218] netlink: 16 bytes leftover after parsing attributes in process `syz.1.967'. [ 217.349595][ T9220] CIFS: Attempting to mount //127.0.0.1/share [ 217.402720][ T9221] CIFS: VFS: Invalid response size 0 for command 0 [ 217.405096][ T9220] CIFS: VFS: cifs_mount failed w/return code = -5 [ 217.751446][ T34] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 217.911539][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 217.914815][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 217.918086][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 217.921215][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 217.924506][ T34] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.928763][ T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 217.931706][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.953436][ T42] audit: type=1326 audit(1786177772.807:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9229 comm="syz.0.971" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 217.960604][ T42] audit: type=1326 audit(1786177772.807:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9229 comm="syz.0.971" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 217.967533][ T42] audit: type=1326 audit(1786177772.807:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9229 comm="syz.0.971" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 217.974715][ T42] audit: type=1326 audit(1786177772.807:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9229 comm="syz.0.971" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf707efec code=0x7ffc0000 [ 217.981475][ T42] audit: type=1326 audit(1786177772.807:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9229 comm="syz.0.971" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 217.988294][ T42] audit: type=1326 audit(1786177772.807:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9229 comm="syz.0.971" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 217.996143][ T42] audit: type=1326 audit(1786177772.807:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9229 comm="syz.0.971" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 218.002922][ T42] audit: type=1326 audit(1786177772.807:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9229 comm="syz.0.971" exe="/syz-executor" sig=0 arch=40000003 syscall=30 compat=1 ip=0xf707efec code=0x7ffc0000 [ 218.009547][ T42] audit: type=1326 audit(1786177772.807:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9229 comm="syz.0.971" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 218.060453][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 218.140969][ T34] usb 6-1: GET_CAPABILITIES returned 0 [ 218.142946][ T34] usbtmc 6-1:16.0: can't read capabilities [ 218.344711][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 218.351630][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 218.354528][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 218.357361][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 218.360212][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 218.363090][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 218.365951][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 218.371810][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 218.374709][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 218.377564][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 218.380416][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 218.383265][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 218.386109][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 218.389266][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 218.392125][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 218.394980][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 218.400704][ T34] usb 6-1: USB disconnect, device number 21 [ 218.427364][ T7847] udevd[7847]: incorrect bcache checksum on /dev/loop0 [ 219.065748][ T9247] FAULT_INJECTION: forcing a failure. [ 219.065748][ T9247] name failslab, interval 1, probability 0, space 0, times 0 [ 219.070487][ T9247] CPU: 3 UID: 0 PID: 9247 Comm: syz.1.975 Tainted: G S L syzkaller #0 PREEMPT(full) [ 219.070512][ T9247] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 219.070519][ T9247] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 219.070527][ T9247] Call Trace: [ 219.070533][ T9247] [ 219.070539][ T9247] dump_stack_lvl+0x100/0x190 [ 219.070563][ T9247] should_fail_ex.cold+0x5/0xa [ 219.070580][ T9247] should_failslab+0xc2/0x120 [ 219.070601][ T9247] __kmalloc_cache_noprof+0x91/0x6c0 [ 219.070618][ T9247] ? proc_self_get_link+0x189/0x1f0 [ 219.070636][ T9247] proc_self_get_link+0x189/0x1f0 [ 219.070651][ T9247] pick_link+0xac2/0x13c0 [ 219.070672][ T9247] ? __pfx_proc_self_get_link+0x10/0x10 [ 219.070688][ T9247] step_into_slowpath+0x9ba/0xf90 [ 219.070714][ T9247] ? __pfx_step_into_slowpath+0x10/0x10 [ 219.070739][ T9247] ? lookup_fast+0x2da/0x600 [ 219.070758][ T9247] ? inode_permission+0x374/0x620 [ 219.070779][ T9247] link_path_walk+0xf28/0x1cc0 [ 219.070808][ T9247] path_openat+0x1c9/0x4280 [ 219.070822][ T9247] ? kasan_save_track+0x14/0x30 [ 219.070839][ T9247] ? __kasan_slab_alloc+0x89/0x90 [ 219.070857][ T9247] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 219.070875][ T9247] ? do_sys_openat2+0xc7/0x1e0 [ 219.070900][ T9247] ? __pfx_path_openat+0x10/0x10 [ 219.070922][ T9247] do_file_open+0x20e/0x430 [ 219.070936][ T9247] ? __lock_acquire+0x49f/0x1a40 [ 219.070960][ T9247] ? __pfx_do_file_open+0x10/0x10 [ 219.070990][ T9247] ? _raw_spin_unlock+0x28/0x50 [ 219.071008][ T9247] ? alloc_fd+0x471/0x7a0 [ 219.071029][ T9247] do_sys_openat2+0x10f/0x1e0 [ 219.071048][ T9247] ? __pfx_do_sys_openat2+0x10/0x10 [ 219.071068][ T9247] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 219.071094][ T9247] ? __fget_files+0x21f/0x3d0 [ 219.071111][ T9247] __ia32_compat_sys_openat+0x12d/0x210 [ 219.071132][ T9247] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 219.071152][ T9247] ? ksys_write+0x1ac/0x250 [ 219.071172][ T9247] do_int80_emulation+0x14b/0x720 [ 219.071197][ T9247] asm_int80_emulation+0x1a/0x20 [ 219.071211][ T9247] RIP: 0023:0xf71974eb [ 219.071224][ T9247] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 219.071238][ T9247] RSP: 002b:00000000f545642c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 219.071253][ T9247] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f7261962 [ 219.071263][ T9247] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 219.071271][ T9247] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 219.071279][ T9247] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 219.071287][ T9247] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 219.071307][ T9247] [ 219.176025][ T5824] usb 7-1: USB disconnect, device number 17 [ 219.238500][ T9252] CIFS: Attempting to mount //127.0.0.1/share [ 219.352003][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 219.550438][ T9266] netlink: 'syz.0.980': attribute type 4 has an invalid length. [ 219.709755][ T9270] FAT-fs (loop1): unable to read boot sector [ 219.716731][ T9270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.723430][ T9269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.066617][ T9252] CIFS: VFS: Error connecting to socket. Aborting operation. [ 220.069056][ T9252] CIFS: VFS: cifs_mount failed w/return code = -4 [ 220.210748][ T9279] FAULT_INJECTION: forcing a failure. [ 220.210748][ T9279] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 220.215017][ T9279] CPU: 2 UID: 0 PID: 9279 Comm: syz.2.987 Tainted: G S L syzkaller #0 PREEMPT(full) [ 220.215036][ T9279] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 220.215045][ T9279] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 220.215053][ T9279] Call Trace: [ 220.215057][ T9279] [ 220.215061][ T9279] dump_stack_lvl+0x100/0x190 [ 220.215090][ T9279] should_fail_ex.cold+0x5/0xa [ 220.215100][ T9279] ? prepare_alloc_pages+0x16d/0x5f0 [ 220.215119][ T9279] should_fail_alloc_page+0xeb/0x140 [ 220.215137][ T9279] prepare_alloc_pages+0x1f0/0x5f0 [ 220.215153][ T9279] ? find_held_lock+0x2b/0x80 [ 220.215169][ T9279] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 220.215185][ T9279] ? is_bpf_text_address+0x94/0x1a0 [ 220.215210][ T9279] ? __lock_acquire+0x49f/0x1a40 [ 220.215231][ T9279] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 220.215246][ T9279] ? do_raw_spin_lock+0x128/0x260 [ 220.215259][ T9279] ? find_held_lock+0x2b/0x80 [ 220.215273][ T9279] ? debug_check_no_obj_freed+0x31f/0x630 [ 220.215291][ T9279] ? rcu_is_watching+0x12/0xc0 [ 220.215307][ T9279] ? debug_check_no_obj_freed+0x31f/0x630 [ 220.215327][ T9279] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 220.215345][ T9279] ? policy_nodemask+0xed/0x4f0 [ 220.215362][ T9279] alloc_pages_mpol+0x1fb/0x540 [ 220.215379][ T9279] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 220.215395][ T9279] ? do_raw_spin_unlock+0x145/0x1e0 [ 220.215408][ T9279] ? _raw_spin_unlock+0x28/0x50 [ 220.215422][ T9279] ? __free_frozen_pages+0x751/0x1090 [ 220.215442][ T9279] alloc_pages_noprof+0x1a/0x160 [ 220.215453][ T9279] get_free_pages_noprof+0x10/0xb0 [ 220.215467][ T9279] vcs_read+0xba/0xc00 [ 220.215486][ T9279] ? __pfx_vcs_read+0x10/0x10 [ 220.215497][ T9279] ? bpf_lsm_file_permission+0x9/0x10 [ 220.215508][ T9279] ? security_file_permission+0x76/0x210 [ 220.215523][ T9279] ? iov_iter_advance+0xac/0x6d0 [ 220.215539][ T9279] ? rw_verify_area+0xce/0x6d0 [ 220.215556][ T9279] ? __pfx_vcs_read+0x10/0x10 [ 220.215568][ T9279] vfs_readv+0x5d8/0x8d0 [ 220.215588][ T9279] ? __pfx_vfs_readv+0x10/0x10 [ 220.215614][ T9279] ? __fget_files+0x21f/0x3d0 [ 220.215629][ T9279] ? do_readv+0x13e/0x340 [ 220.215644][ T9279] do_readv+0x13e/0x340 [ 220.215661][ T9279] ? __pfx_do_readv+0x10/0x10 [ 220.215677][ T9279] ? ksys_write+0x1ac/0x250 [ 220.215687][ T9279] ? __pfx_ksys_write+0x10/0x10 [ 220.215700][ T9279] __do_fast_syscall_32+0xe7/0x970 [ 220.215717][ T9279] ? lockdep_hardirqs_on+0x78/0x100 [ 220.215734][ T9279] do_fast_syscall_32+0x32/0x70 [ 220.215751][ T9279] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 220.215766][ T9279] RIP: 0023:0xf709efec [ 220.215779][ T9279] Code: Unable to access opcode bytes at 0xf709efc2. [ 220.215784][ T9279] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000091 [ 220.215796][ T9279] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001f40 [ 220.215803][ T9279] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 220.215809][ T9279] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 220.215816][ T9279] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 220.215822][ T9279] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 220.215835][ T9279] [ 220.273899][ T9283] __nla_validate_parse: 5 callbacks suppressed [ 220.273913][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.989'. [ 220.300851][ T7847] udevd[7847]: incorrect bcache checksum on /dev/loop0 [ 220.310283][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.989'. [ 220.346016][ T9283] netlink: 72 bytes leftover after parsing attributes in process `syz.0.989'. [ 220.396254][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 220.440948][ T9292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.994'. [ 220.445076][ T7847] udevd[7847]: incorrect bcache checksum on /dev/loop0 [ 220.446769][ T9292] CIFS: Attempting to mount //127.0.0.1/share [ 220.499384][ T9295] CIFS: VFS: Invalid response size 0 for command 0 [ 220.503577][ T9292] CIFS: VFS: cifs_mount failed w/return code = -5 [ 220.535423][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 220.897880][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 221.091939][ T5816] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 221.252365][ T5816] usb 7-1: device descriptor read/64, error -71 [ 221.491578][ T5816] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 221.641626][ T5816] usb 7-1: device descriptor read/64, error -71 [ 221.777157][ T5816] usb usb7-port1: attempt power cycle [ 221.785571][ T9328] syzkaller0: entered promiscuous mode [ 221.787457][ T9328] syzkaller0: entered allmulticast mode [ 221.844778][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 221.868356][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 221.919380][ T9334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1003'. [ 221.924982][ T9334] CIFS: Attempting to mount //127.0.0.1/share [ 221.978749][ T9335] CIFS: VFS: Invalid response size 0 for command 0 [ 221.986819][ T9334] CIFS: VFS: cifs_mount failed w/return code = -5 [ 222.131458][ T5816] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 222.161909][ T5816] usb 7-1: device descriptor read/8, error -71 [ 222.401493][ T5816] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 222.422605][ T5816] usb 7-1: device descriptor read/8, error -71 [ 222.533992][ T5816] usb usb7-port1: unable to enumerate USB device [ 222.936057][ T9351] FAULT_INJECTION: forcing a failure. [ 222.936057][ T9351] name failslab, interval 1, probability 0, space 0, times 0 [ 222.940092][ T9351] CPU: 3 UID: 0 PID: 9351 Comm: syz.0.1008 Tainted: G S L syzkaller #0 PREEMPT(full) [ 222.940111][ T9351] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 222.940116][ T9351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 222.940123][ T9351] Call Trace: [ 222.940127][ T9351] [ 222.940132][ T9351] dump_stack_lvl+0x100/0x190 [ 222.940149][ T9351] should_fail_ex.cold+0x5/0xa [ 222.940165][ T9351] should_failslab+0xc2/0x120 [ 222.940181][ T9351] __kmalloc_noprof+0xfc/0x820 [ 222.940195][ T9351] ? trace_kmalloc+0xeb/0x110 [ 222.940211][ T9351] ? lsm_blob_alloc+0x68/0x90 [ 222.940231][ T9351] lsm_blob_alloc+0x68/0x90 [ 222.940248][ T9351] security_sk_alloc+0x2d/0x290 [ 222.940262][ T9351] sk_prot_alloc+0x12a/0x2a0 [ 222.940275][ T9351] sk_alloc+0x36/0xe80 [ 222.940290][ T9351] bpf_prog_test_run_skb+0x4db/0x3540 [ 222.940328][ T9351] ? find_held_lock+0x2b/0x80 [ 222.940343][ T9351] ? __fget_files+0x211/0x3d0 [ 222.940358][ T9351] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 222.940372][ T9351] ? fput+0x79/0x100 [ 222.940387][ T9351] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 222.940399][ T9351] __sys_bpf+0x2a12/0x4e80 [ 222.940417][ T9351] ? __pfx___sys_bpf+0x10/0x10 [ 222.940430][ T9351] ? find_held_lock+0x2b/0x80 [ 222.940443][ T9351] ? get_pid_task+0xfc/0x250 [ 222.940457][ T9351] ? get_pid_task+0xfc/0x250 [ 222.940474][ T9351] ? proc_fail_nth_write+0x9f/0x220 [ 222.940491][ T9351] ? find_held_lock+0x2b/0x80 [ 222.940508][ T9351] ? rcu_read_lock_any_held+0x6a/0xa0 [ 222.940523][ T9351] ? find_held_lock+0x2b/0x80 [ 222.940536][ T9351] ? ksys_write+0x190/0x250 [ 222.940546][ T9351] ? ksys_write+0x190/0x250 [ 222.940567][ T9351] ? fput+0x79/0x100 [ 222.940581][ T9351] ? __ia32_sys_bpf+0xcc/0x170 [ 222.940593][ T9351] __ia32_sys_bpf+0xcc/0x170 [ 222.940606][ T9351] ? __do_fast_syscall_32+0x98/0x970 [ 222.940625][ T9351] __do_fast_syscall_32+0xe7/0x970 [ 222.940641][ T9351] ? lockdep_hardirqs_on+0x78/0x100 [ 222.940662][ T9351] do_fast_syscall_32+0x32/0x70 [ 222.940678][ T9351] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 222.940693][ T9351] RIP: 0023:0xf707efec [ 222.940708][ T9351] Code: Unable to access opcode bytes at 0xf707efc2. [ 222.940713][ T9351] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 222.940726][ T9351] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800001c0 [ 222.940732][ T9351] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000 [ 222.940739][ T9351] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 222.940745][ T9351] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 222.940752][ T9351] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 222.940766][ T9351] [ 223.069313][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 223.191663][ T9362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1012'. [ 223.197644][ T9362] CIFS: Attempting to mount //127.0.0.1/share [ 223.275038][ T9364] CIFS: VFS: Invalid response size 0 for command 0 [ 223.282939][ T9364] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 1 [ 223.431192][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 223.547038][ T7847] udevd[7847]: incorrect bcache checksum on /dev/loop0 [ 223.581282][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 223.639776][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 223.882228][ T5600] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 223.938856][ T9387] FAULT_INJECTION: forcing a failure. [ 223.938856][ T9387] name failslab, interval 1, probability 0, space 0, times 0 [ 223.945026][ T9387] CPU: 3 UID: 0 PID: 9387 Comm: syz.2.1023 Tainted: G S L syzkaller #0 PREEMPT(full) [ 223.945063][ T9387] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 223.945067][ T9387] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.945074][ T9387] Call Trace: [ 223.945079][ T9387] [ 223.945083][ T9387] dump_stack_lvl+0x100/0x190 [ 223.945101][ T9387] should_fail_ex.cold+0x5/0xa [ 223.945115][ T9387] should_failslab+0xc2/0x120 [ 223.945132][ T9387] __kmalloc_noprof+0xfc/0x820 [ 223.945146][ T9387] ? __pfx_dynamic_dname+0x10/0x10 [ 223.945163][ T9387] ? tomoyo_encode2+0xfb/0x3c0 [ 223.945182][ T9387] tomoyo_encode2+0xfb/0x3c0 [ 223.945201][ T9387] tomoyo_encode+0x29/0x50 [ 223.945216][ T9387] tomoyo_realpath_from_path+0x18c/0x690 [ 223.945237][ T9387] tomoyo_path_number_perm+0x23c/0x580 [ 223.945251][ T9387] ? tomoyo_path_number_perm+0x22e/0x580 [ 223.945266][ T9387] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 223.945281][ T9387] ? get_pid_task+0x106/0x250 [ 223.945308][ T9387] ? find_held_lock+0x2b/0x80 [ 223.945322][ T9387] ? __fget_files+0x215/0x3d0 [ 223.945332][ T9387] ? hook_file_ioctl_common+0x140/0x440 [ 223.945346][ T9387] ? __fget_files+0x215/0x3d0 [ 223.945359][ T9387] ? __fget_files+0x21f/0x3d0 [ 223.945372][ T9387] security_file_ioctl_compat+0xd3/0x230 [ 223.945388][ T9387] __ia32_compat_sys_ioctl+0xc2/0x360 [ 223.945407][ T9387] __do_fast_syscall_32+0xe7/0x970 [ 223.945424][ T9387] ? lockdep_hardirqs_on+0x78/0x100 [ 223.945441][ T9387] do_fast_syscall_32+0x32/0x70 [ 223.945458][ T9387] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 223.945472][ T9387] RIP: 0023:0xf709efec [ 223.945488][ T9387] Code: Unable to access opcode bytes at 0xf709efc2. [ 223.945493][ T9387] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 223.945504][ T9387] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c048aec8 [ 223.945511][ T9387] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 223.945517][ T9387] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 223.945523][ T9387] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 223.945529][ T9387] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 223.945544][ T9387] [ 223.945593][ T9387] ERROR: Out of memory at tomoyo_realpath_from_path. [ 223.953342][ T9389] FAULT_INJECTION: forcing a failure. [ 223.953342][ T9389] name failslab, interval 1, probability 0, space 0, times 0 [ 224.022651][ T9389] CPU: 2 UID: 0 PID: 9389 Comm: syz.3.1022 Tainted: G S L syzkaller #0 PREEMPT(full) [ 224.022685][ T9389] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 224.022691][ T9389] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 224.022698][ T9389] Call Trace: [ 224.022703][ T9389] [ 224.022707][ T9389] dump_stack_lvl+0x100/0x190 [ 224.022726][ T9389] should_fail_ex.cold+0x5/0xa [ 224.022740][ T9389] should_failslab+0xc2/0x120 [ 224.022757][ T9389] __kmalloc_cache_noprof+0x91/0x6c0 [ 224.022769][ T9389] ? nf_tables_addchain.constprop.0+0x1067/0x1ca0 [ 224.022800][ T9389] nf_tables_addchain.constprop.0+0x1067/0x1ca0 [ 224.022812][ T9389] ? nft_chain_lookup+0x58d/0xa60 [ 224.022830][ T9389] ? nft_chain_lookup+0x59c/0xa60 [ 224.022845][ T9389] ? __kasan_kmalloc+0xaa/0xb0 [ 224.022860][ T9389] ? __pfx_nf_tables_addchain.constprop.0+0x10/0x10 [ 224.022873][ T9389] ? __pfx_nft_chain_lookup+0x10/0x10 [ 224.022900][ T9389] ? nla_strcmp+0xff/0x130 [ 224.022913][ T9389] ? nft_table_lookup.part.0+0x1e3/0x230 [ 224.022928][ T9389] nf_tables_newchain+0x17c3/0x2d30 [ 224.022939][ T9389] ? net_generic+0xa/0x2a0 [ 224.022956][ T9389] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 224.022974][ T9389] ? __nla_validate_parse+0x1e7/0x28b0 [ 224.022988][ T9389] ? __pfx_nf_tables_newchain+0x10/0x10 [ 224.023001][ T9389] ? __pfx___nla_validate_parse+0x10/0x10 [ 224.023019][ T9389] ? __nla_parse+0x40/0x60 [ 224.023034][ T9389] nfnetlink_rcv_batch+0x1410/0x2880 [ 224.023067][ T9389] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 224.023089][ T9389] ? find_held_lock+0x2b/0x80 [ 224.023110][ T9389] ? __local_bh_enable_ip+0x9e/0x120 [ 224.023123][ T9389] ? lockdep_hardirqs_on+0x78/0x100 [ 224.023139][ T9389] ? __dev_queue_xmit+0xa12/0x4970 [ 224.023173][ T9389] ? __nla_parse+0x40/0x60 [ 224.023188][ T9389] nfnetlink_rcv+0x3bd/0x440 [ 224.023204][ T9389] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 224.023224][ T9389] netlink_unicast+0x585/0x850 [ 224.023239][ T9389] ? __pfx_netlink_unicast+0x10/0x10 [ 224.023256][ T9389] netlink_sendmsg+0x8b0/0xda0 [ 224.023271][ T9389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.023286][ T9389] ? apparmor_socket_sendmsg+0x15b/0x270 [ 224.023301][ T9389] ____sys_sendmsg+0xa4d/0xbe0 [ 224.023312][ T9389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.023325][ T9389] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.023344][ T9389] ___sys_sendmsg+0x190/0x1e0 [ 224.023357][ T9389] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.023377][ T9389] ? find_held_lock+0x2b/0x80 [ 224.023400][ T9389] __sys_sendmsg+0x160/0x210 [ 224.023417][ T9389] ? __pfx___sys_sendmsg+0x10/0x10 [ 224.023437][ T9389] ? __pfx_ksys_write+0x10/0x10 [ 224.023455][ T9389] __do_fast_syscall_32+0xe7/0x970 [ 224.023472][ T9389] ? lockdep_hardirqs_on+0x78/0x100 [ 224.023489][ T9389] do_fast_syscall_32+0x32/0x70 [ 224.023505][ T9389] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 224.023520][ T9389] RIP: 0023:0xf6fdefec [ 224.023534][ T9389] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 224.023539][ T9389] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 224.023551][ T9389] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 224.023558][ T9389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 224.023564][ T9389] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 224.023570][ T9389] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 224.023576][ T9389] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 224.023591][ T9389] [ 224.024096][ T9362] CIFS: VFS: cifs_mount failed w/return code = -112 [ 224.043138][ T5600] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 224.159033][ T5600] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.163219][ T5600] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 224.166065][ T5600] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.183375][ T5600] usbtmc 5-1:16.0: bulk endpoints not found [ 224.439526][ T9407] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1029'. [ 224.595025][ T9408] netlink: 'syz.3.1029': attribute type 1 has an invalid length. [ 224.602479][ T9408] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1029'. [ 225.349739][ T9420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1032'. [ 225.355573][ T9420] CIFS: Attempting to mount //127.0.0.1/share [ 225.877164][ T9443] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 225.879270][ T9443] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 225.882475][ T9443] vhci_hcd vhci_hcd.0: Device attached [ 226.151955][ T34] usb 44-1: SetAddress Request (6) to port 0 [ 226.154172][ T34] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 226.184024][ T9420] CIFS: VFS: Error connecting to socket. Aborting operation. [ 226.187271][ T9420] CIFS: VFS: cifs_mount failed w/return code = -4 [ 226.225132][ T9453] syzkaller0: entered promiscuous mode [ 226.226965][ T9453] syzkaller0: entered allmulticast mode [ 226.235950][ T9453] FAULT_INJECTION: forcing a failure. [ 226.235950][ T9453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.240302][ T9453] CPU: 0 UID: 0 PID: 9453 Comm: syz.1.1035 Tainted: G S L syzkaller #0 PREEMPT(full) [ 226.240322][ T9453] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 226.240326][ T9453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 226.240333][ T9453] Call Trace: [ 226.240337][ T9453] [ 226.240342][ T9453] dump_stack_lvl+0x100/0x190 [ 226.240360][ T9453] should_fail_ex.cold+0x5/0xa [ 226.240373][ T9453] _copy_from_iter+0x1f4/0x1690 [ 226.240393][ T9453] ? _copy_from_iter+0x350/0x1690 [ 226.240410][ T9453] ? _copy_from_iter+0x270/0x1690 [ 226.240427][ T9453] ? __pfx__copy_from_iter+0x10/0x10 [ 226.240446][ T9453] ? __pfx__copy_from_iter+0x10/0x10 [ 226.240464][ T9453] ? _copy_from_iter+0x270/0x1690 [ 226.240483][ T9453] copy_page_from_iter+0x238/0x300 [ 226.240503][ T9453] skb_copy_datagram_from_iter+0x399/0x720 [ 226.240527][ T9453] packet_sendmsg+0x224f/0x4eb0 [ 226.240558][ T9453] ? __pfx___might_resched+0x10/0x10 [ 226.240580][ T9453] ? aa_sk_perm+0x309/0xaa0 [ 226.240596][ T9453] ? __pfx_aa_sk_perm+0x10/0x10 [ 226.240611][ T9453] ? __pfx_packet_sendmsg+0x10/0x10 [ 226.240625][ T9453] ? __might_fault+0xc5/0x140 [ 226.240642][ T9453] ? apparmor_socket_sendmsg+0x15b/0x270 [ 226.240656][ T9453] __sys_sendto+0x48b/0x4e0 [ 226.240670][ T9453] ? __pfx_packet_sendmsg+0x10/0x10 [ 226.240686][ T9453] ? __pfx___sys_sendto+0x10/0x10 [ 226.240710][ T9453] ? fput+0x79/0x100 [ 226.240723][ T9453] ? ksys_write+0x1ac/0x250 [ 226.240735][ T9453] __ia32_sys_sendto+0xdd/0x1b0 [ 226.240750][ T9453] ? __do_fast_syscall_32+0x98/0x970 [ 226.240767][ T9453] ? lockdep_hardirqs_on+0x78/0x100 [ 226.240783][ T9453] __do_fast_syscall_32+0xe7/0x970 [ 226.240799][ T9453] ? lockdep_hardirqs_on+0x78/0x100 [ 226.240816][ T9453] do_fast_syscall_32+0x32/0x70 [ 226.240833][ T9453] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 226.240846][ T9453] RIP: 0023:0xf7f97fec [ 226.240860][ T9453] Code: Unable to access opcode bytes at 0xf7f97fc2. [ 226.240865][ T9453] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 226.240876][ T9453] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800002c0 [ 226.240883][ T9453] RDX: 000000000000fdef RSI: 0000000000000004 RDI: 0000000080000140 [ 226.240889][ T9453] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 226.240896][ T9453] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 226.240902][ T9453] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 226.240916][ T9453] [ 226.503092][ T9444] vhci_hcd: connection reset by peer [ 226.506561][ T5809] vhci_hcd vhci_hcd.3: stop threads [ 226.508344][ T5809] vhci_hcd vhci_hcd.3: release socket [ 226.510309][ T5809] vhci_hcd vhci_hcd.3: disconnect device [ 226.669078][ T5824] usb 5-1: USB disconnect, device number 13 [ 226.707016][ T7847] udevd[7847]: incorrect bcache checksum on /dev/loop0 [ 227.209415][ T9478] binder: 9476:9478 ioctl c0306201 0 returned -14 [ 227.378699][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 227.378758][ T42] audit: type=1326 audit(1786177782.227:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9483 comm="syz.2.1043" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 227.388613][ T9484] FAULT_INJECTION: forcing a failure. [ 227.388613][ T9484] name failslab, interval 1, probability 0, space 0, times 0 [ 227.397356][ T9484] CPU: 0 UID: 0 PID: 9484 Comm: syz.2.1043 Tainted: G S L syzkaller #0 PREEMPT(full) [ 227.397378][ T9484] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 227.397383][ T9484] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.397390][ T9484] Call Trace: [ 227.397394][ T9484] [ 227.397399][ T9484] dump_stack_lvl+0x100/0x190 [ 227.397417][ T9484] should_fail_ex.cold+0x5/0xa [ 227.397431][ T9484] should_failslab+0xc2/0x120 [ 227.397447][ T9484] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 227.397462][ T9484] ? __alloc_skb+0x5b7/0x710 [ 227.397478][ T9484] ? __alloc_skb+0x140/0x710 [ 227.397514][ T9484] __alloc_skb+0x140/0x710 [ 227.397528][ T9484] ? __alloc_skb+0x5b7/0x710 [ 227.397542][ T9484] ? __pfx___alloc_skb+0x10/0x10 [ 227.397557][ T9484] ? lockdep_init_map_type+0x5c/0x250 [ 227.397571][ T9484] audit_log_start+0x350/0x930 [ 227.397587][ T9484] ? __pfx_audit_log_start+0x10/0x10 [ 227.397602][ T9484] ? strncpy_from_user+0x19d/0x2d0 [ 227.397624][ T9484] audit_seccomp+0x60/0x190 [ 227.397637][ T9484] __seccomp_filter+0x896/0x1140 [ 227.397653][ T9484] ? __pfx___seccomp_filter+0x10/0x10 [ 227.397668][ T9484] ? ksys_write+0x1ac/0x250 [ 227.397683][ T9484] __secure_computing+0x204/0x2c0 [ 227.397697][ T9484] do_int80_emulation+0x40f/0x720 [ 227.397716][ T9484] asm_int80_emulation+0x1a/0x20 [ 227.397728][ T9484] RIP: 0023:0xf71d74eb [ 227.397738][ T9484] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 227.397749][ T9484] RSP: 002b:00000000f548d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 227.397761][ T9484] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f548d5d0 [ 227.397768][ T9484] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 227.397774][ T9484] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 227.397780][ T9484] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 227.397786][ T9484] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 227.397800][ T9484] [ 227.398046][ T9484] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 227.466221][ T42] audit: type=1326 audit(1786177782.227:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9483 comm="syz.2.1043" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 227.473721][ T42] audit: type=1326 audit(1786177782.247:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9483 comm="syz.2.1043" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 227.482886][ T42] audit: type=1326 audit(1786177782.247:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9483 comm="syz.2.1043" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 227.489579][ T42] audit: type=1326 audit(1786177782.247:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9483 comm="syz.2.1043" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71d74eb code=0x7ffc0000 [ 227.496372][ T42] audit: type=1326 audit(1786177782.247:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9483 comm="syz.2.1043" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71d74eb code=0x7ffc0000 [ 227.503251][ T42] audit: type=1326 audit(1786177782.247:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9483 comm="syz.2.1043" exe="/syz-executor" sig=0 arch=40000003 syscall=30 compat=1 ip=0xf709efec code=0x7ffc0000 [ 227.509761][ T42] audit: type=1326 audit(1786177782.327:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9483 comm="syz.2.1043" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71d74eb code=0x7ffc0000 [ 227.516616][ T42] audit: type=1326 audit(1786177782.337:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9483 comm="syz.2.1043" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71d74eb code=0x7ffc0000 [ 227.599967][ T9486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1044'. [ 227.605050][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 227.614633][ T9486] CIFS: Attempting to mount //127.0.0.1/share [ 227.879446][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 228.131521][ T5824] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 228.284020][ T5824] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 228.287398][ T5824] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.292052][ T5824] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 228.296101][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.309865][ T5824] usbtmc 5-1:16.0: bulk endpoints not found [ 228.353526][ T9507] FAULT_INJECTION: forcing a failure. [ 228.353526][ T9507] name failslab, interval 1, probability 0, space 0, times 0 [ 228.357725][ T9507] CPU: 3 UID: 0 PID: 9507 Comm: syz.3.1051 Tainted: G S L syzkaller #0 PREEMPT(full) [ 228.357758][ T9507] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 228.357763][ T9507] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.357770][ T9507] Call Trace: [ 228.357775][ T9507] [ 228.357781][ T9507] dump_stack_lvl+0x100/0x190 [ 228.357799][ T9507] should_fail_ex.cold+0x5/0xa [ 228.357812][ T9507] should_failslab+0xc2/0x120 [ 228.357828][ T9507] __kmalloc_cache_noprof+0x91/0x6c0 [ 228.357840][ T9507] ? __rcu_read_unlock+0x26a/0x5e0 [ 228.357851][ T9507] ? alloc_fs_context+0x57/0xf40 [ 228.357868][ T9507] alloc_fs_context+0x57/0xf40 [ 228.357881][ T9507] ? __get_fs_type+0xe3/0x200 [ 228.357897][ T9507] path_mount+0xdbd/0x23d0 [ 228.357914][ T9507] ? __pfx_path_mount+0x10/0x10 [ 228.357927][ T9507] ? lockdep_hardirqs_on+0x78/0x100 [ 228.357957][ T9507] ? putname+0xb1/0x110 [ 228.357969][ T9507] ? kmem_cache_free+0x127/0x6b0 [ 228.357985][ T9507] ? __ia32_sys_mount+0x292/0x310 [ 228.357999][ T9507] __ia32_sys_mount+0x292/0x310 [ 228.358013][ T9507] ? __pfx___ia32_sys_mount+0x10/0x10 [ 228.358026][ T9507] ? ksys_write+0x1ac/0x250 [ 228.358036][ T9507] ? __pfx_ksys_write+0x10/0x10 [ 228.358049][ T9507] __do_fast_syscall_32+0xe7/0x970 [ 228.358067][ T9507] ? lockdep_hardirqs_on+0x78/0x100 [ 228.358083][ T9507] do_fast_syscall_32+0x32/0x70 [ 228.358101][ T9507] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 228.358115][ T9507] RIP: 0023:0xf6fdefec [ 228.358133][ T9507] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 228.358138][ T9507] RSP: 002b:00000000f53ac50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 228.358149][ T9507] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000340 [ 228.358156][ T9507] RDX: 0000000080000180 RSI: 0000000002000090 RDI: 00000000800003c0 [ 228.358162][ T9507] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 228.358168][ T9507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.358184][ T9507] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 228.358198][ T9507] [ 228.452495][ T9486] CIFS: VFS: Error connecting to socket. Aborting operation. [ 228.455916][ T9486] CIFS: VFS: cifs_mount failed w/return code = -4 [ 229.483277][ T9523] FAULT_INJECTION: forcing a failure. [ 229.483277][ T9523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.487497][ T9523] CPU: 0 UID: 0 PID: 9523 Comm: syz.3.1055 Tainted: G S L syzkaller #0 PREEMPT(full) [ 229.487516][ T9523] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 229.487534][ T9523] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 229.487541][ T9523] Call Trace: [ 229.487546][ T9523] [ 229.487551][ T9523] dump_stack_lvl+0x100/0x190 [ 229.487568][ T9523] should_fail_ex.cold+0x5/0xa [ 229.487581][ T9523] strncpy_from_user+0x3b/0x2d0 [ 229.487600][ T9523] do_getname+0x78/0x390 [ 229.487617][ T9523] do_sys_openat2+0xc7/0x1e0 [ 229.487633][ T9523] ? __pfx_do_sys_openat2+0x10/0x10 [ 229.487649][ T9523] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 229.487670][ T9523] __ia32_compat_sys_openat+0x12d/0x210 [ 229.487687][ T9523] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 229.487703][ T9523] ? fput+0x79/0x100 [ 229.487716][ T9523] ? ksys_write+0x1ac/0x250 [ 229.487726][ T9523] ? __pfx_ksys_write+0x10/0x10 [ 229.487739][ T9523] __do_fast_syscall_32+0xe7/0x970 [ 229.487756][ T9523] ? lockdep_hardirqs_on+0x78/0x100 [ 229.487773][ T9523] do_fast_syscall_32+0x32/0x70 [ 229.487790][ T9523] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 229.487804][ T9523] RIP: 0023:0xf6fdefec [ 229.487819][ T9523] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 229.487824][ T9523] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 229.487835][ T9523] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000140 [ 229.487842][ T9523] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 229.487848][ T9523] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 229.487855][ T9523] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 229.487861][ T9523] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 229.487876][ T9523] [ 230.956962][ T5824] usb 5-1: USB disconnect, device number 14 [ 231.107878][ T7874] udevd[7874]: incorrect bcache checksum on /dev/loop0 [ 231.140008][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1060'. [ 231.152227][ T9540] CIFS: Attempting to mount //127.0.0.1/share [ 231.233900][ T34] usb 44-1: device descriptor read/8, error -110 [ 231.388181][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 231.456511][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 231.479673][ T9546] syzkaller1: entered promiscuous mode [ 231.482597][ T9546] syzkaller1: entered allmulticast mode [ 231.530043][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 231.623313][ T34] usb usb44-port1: attempt power cycle [ 231.740355][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 231.961971][ T9540] CIFS: VFS: Error connecting to socket. Aborting operation. [ 231.964383][ T9540] CIFS: VFS: cifs_mount failed w/return code = -4 [ 232.021939][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 232.205182][ T34] usb usb44-port1: unable to enumerate USB device [ 232.322189][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 232.571421][ T5824] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 232.723764][ T5824] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 232.731499][ T5824] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.739700][ T5824] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 232.746011][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.710358][ T5824] usbtmc 5-1:16.0: bulk endpoints not found [ 233.847399][ T9574] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 233.982598][ T9572] bond0: (slave bond_slave_0): Releasing backup interface [ 233.997282][ T9572] bond0: (slave bond_slave_1): Releasing backup interface [ 234.020035][ T9572] team0: Port device team_slave_0 removed [ 234.035451][ T9572] team0: Port device team_slave_1 removed [ 234.044149][ T9572] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 234.098121][ T9576] 8021q: adding VLAN 0 to HW filter on device bond5 [ 234.240072][ T9582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1074'. [ 234.250337][ T9582] CIFS: Attempting to mount //127.0.0.1/share [ 234.947295][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1079'. [ 234.971522][ T5882] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 235.081778][ T9582] CIFS: VFS: Error connecting to socket. Aborting operation. [ 235.084194][ T9582] CIFS: VFS: cifs_mount failed w/return code = -4 [ 235.122891][ T5882] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.132911][ T5882] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 235.140620][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.172274][ T5882] as10x_usb: device has been detected [ 235.178070][ T5882] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 235.333668][ T5882] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 235.375283][ T9] usb 5-1: USB disconnect, device number 15 [ 235.473043][ T7847] udevd[7847]: incorrect bcache checksum on /dev/loop0 [ 235.513890][ T5882] as10x_usb: error during firmware upload part1 [ 235.517772][ T5882] Registered device Abilis Systems DVB-Titan [ 235.706380][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 235.807865][ T9612] dvmrp8: entered allmulticast mode [ 236.218782][ T9617] syz.0.1086: page allocation failure: order:1, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 236.223738][ T9617] CPU: 0 UID: 0 PID: 9617 Comm: syz.0.1086 Tainted: G S L syzkaller #0 PREEMPT(full) [ 236.223760][ T9617] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 236.223766][ T9617] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 236.223773][ T9617] Call Trace: [ 236.223779][ T9617] [ 236.223784][ T9617] dump_stack_lvl+0x100/0x190 [ 236.223801][ T9617] warn_alloc.cold+0x94/0xa8 [ 236.223814][ T9617] ? __pfx_warn_alloc+0x10/0x10 [ 236.223833][ T9617] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 236.223853][ T9617] ? __pfx_get_page_from_freelist+0x10/0x10 [ 236.223873][ T9617] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 236.223899][ T9617] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 236.223914][ T9617] ? mark_held_locks+0x40/0x70 [ 236.223931][ T9617] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 236.223945][ T9617] ? lockdep_hardirqs_on+0x78/0x100 [ 236.223963][ T9617] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 236.223982][ T9617] ? kasan_save_track+0x14/0x30 [ 236.223995][ T9617] ? __kasan_kmalloc+0xaa/0xb0 [ 236.224009][ T9617] ? __kmalloc_noprof+0x322/0x820 [ 236.224021][ T9617] ? comedi_isadma_alloc+0xc6/0x620 [ 236.224053][ T9617] ? pcl812_attach+0x18f5/0x2300 [ 236.224075][ T9617] __alloc_pages_noprof+0xb/0x110 [ 236.224090][ T9617] __dma_direct_alloc_pages.isra.0+0x47c/0x8f0 [ 236.224112][ T9617] ? __pfx___dma_direct_alloc_pages.isra.0+0x10/0x10 [ 236.224132][ T9617] ? dma_alloc_from_dev_coherent+0x2e0/0x570 [ 236.224153][ T9617] dma_direct_alloc+0x8f/0x590 [ 236.224172][ T9617] dma_alloc_attrs+0x182/0x3a0 [ 236.224188][ T9617] ? __pfx_dma_alloc_attrs+0x10/0x10 [ 236.224203][ T9617] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 236.224216][ T9617] ? dma_direct_supported+0xca/0x220 [ 236.224256][ T9617] comedi_isadma_alloc+0x331/0x620 [ 236.224277][ T9617] ? __pfx_comedi_isadma_alloc+0x10/0x10 [ 236.224296][ T9617] ? request_threaded_irq+0x27b/0x3e0 [ 236.224315][ T9617] pcl812_attach+0x18f5/0x2300 [ 236.224332][ T9617] comedi_device_attach+0x40e/0x6b0 [ 236.224349][ T9617] do_devconfig_ioctl+0x1b3/0x6d0 [ 236.224364][ T9617] ? comedi_unlocked_ioctl+0x180/0x3310 [ 236.224384][ T9617] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 236.224407][ T9617] ? tomoyo_path_number_perm+0x46d/0x580 [ 236.224422][ T9617] ? kasan_save_stack+0x3f/0x50 [ 236.224435][ T9617] ? kasan_save_stack+0x30/0x50 [ 236.224448][ T9617] ? kasan_save_track+0x14/0x30 [ 236.224466][ T9617] ? kasan_save_free_info+0x3b/0x70 [ 236.224480][ T9617] comedi_unlocked_ioctl+0x860/0x3310 [ 236.224502][ T9617] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 236.224531][ T9617] ? kasan_quarantine_put+0x104/0x240 [ 236.224545][ T9617] ? lockdep_hardirqs_on+0x78/0x100 [ 236.224561][ T9617] ? find_held_lock+0x2b/0x80 [ 236.224575][ T9617] ? tomoyo_path_number_perm+0x28f/0x580 [ 236.224589][ T9617] ? tomoyo_path_number_perm+0x28f/0x580 [ 236.224606][ T9617] ? tomoyo_path_number_perm+0x188/0x580 [ 236.224623][ T9617] comedi_compat_ioctl+0x438/0xe20 [ 236.224642][ T9617] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 236.224661][ T9617] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 236.224678][ T9617] ? do_vfs_ioctl+0x226/0x13e0 [ 236.224695][ T9617] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 236.224725][ T9617] ? find_held_lock+0x2b/0x80 [ 236.224743][ T9617] ? __fget_files+0x215/0x3d0 [ 236.224752][ T9617] ? hook_file_ioctl_common+0x140/0x440 [ 236.224771][ T9617] ? __fget_files+0x21f/0x3d0 [ 236.224784][ T9617] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 236.224802][ T9617] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 236.224821][ T9617] __do_fast_syscall_32+0xe7/0x970 [ 236.224840][ T9617] do_fast_syscall_32+0x32/0x70 [ 236.224857][ T9617] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 236.224872][ T9617] RIP: 0023:0xf707efec [ 236.224888][ T9617] Code: Unable to access opcode bytes at 0xf707efc2. [ 236.224893][ T9617] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 236.224904][ T9617] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040946400 [ 236.224911][ T9617] RDX: 00000000800003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 236.224918][ T9617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 236.224924][ T9617] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 236.224930][ T9617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 236.224944][ T9617] [ 236.225041][ T9617] Mem-Info: [ 236.365044][ T9617] active_anon:1643 inactive_anon:544 isolated_anon:0 [ 236.365044][ T9617] active_file:2318 inactive_file:5365 isolated_file:3 [ 236.365044][ T9617] unevictable:1000 dirty:32 writeback:0 [ 236.365044][ T9617] slab_reclaimable:6434 slab_unreclaimable:60264 [ 236.365044][ T9617] mapped:23250 shmem:1094 pagetables:1301 [ 236.365044][ T9617] sec_pagetables:301 bounce:0 [ 236.365044][ T9617] kernel_misc_reclaimable:0 [ 236.365044][ T9617] free:27456 free_pcp:0 free_cma:0 [ 236.379071][ T9617] Node 0 active_anon:28kB inactive_anon:116kB active_file:104kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:4kB writeback:0kB shmem:8kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8512kB pagetables:1444kB sec_pagetables:1112kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 236.389190][ T9617] Node 0 DMA free:2176kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 236.398269][ T9617] lowmem_reserve[]: 0 280 280 280 280 [ 236.400186][ T9617] Node 0 DMA: 44*4kB (U) 6*8kB (U) 0*16kB 1*32kB (U) 2*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 2176kB [ 236.404628][ T9617] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 236.407562][ T9617] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 236.410571][ T9617] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 236.439359][ T9617] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 236.445818][ T9617] 9926 total pagecache pages [ 236.446486][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 236.448481][ T9617] 327 pages in swap cache [ 236.453348][ T9617] Free swap = 98724kB [ 236.455813][ T9617] Total swap = 124996kB [ 236.458458][ T9617] 524155 pages RAM [ 236.463156][ T9617] 0 pages HighMem/MovableOnly [ 236.465903][ T9617] 211494 pages reserved [ 236.468781][ T9617] 0 pages cma reserved [ 236.573416][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 236.637258][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1089'. [ 236.649986][ T9630] CIFS: Attempting to mount //127.0.0.1/share [ 236.685437][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 236.920711][ T9633] bridge_slave_0: default FDB implementation only supports local addresses [ 237.002679][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 237.192669][ T5839] usb 6-1: USB disconnect, device number 22 [ 237.259877][ T5839] Unregistered device Abilis Systems DVB-Titan [ 237.263419][ T5839] as10x_usb: device has been disconnected [ 237.263987][ T9655] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 237.272371][ T9655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1093'. [ 237.275013][ T9655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1093'. [ 237.277643][ T9655] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 237.318168][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 237.438364][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 237.467545][ T9630] CIFS: VFS: Error connecting to socket. Aborting operation. [ 237.470331][ T9630] CIFS: VFS: cifs_mount failed w/return code = -4 [ 237.681447][ T5882] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 237.834447][ T5882] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 237.837842][ T5882] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 237.840835][ T5882] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 237.847236][ T5882] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 237.850302][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.868333][ T5882] usbtmc 5-1:16.0: bulk endpoints not found [ 237.905912][ T9674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1102'. [ 237.910065][ T9674] netlink: 'syz.2.1102': attribute type 1 has an invalid length. [ 237.913045][ T9674] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1102'. [ 238.159543][ T9681] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1104'. [ 238.348414][ T9685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1106'. [ 238.412897][ T9686] CIFS: Attempting to mount //127.0.0.1/share [ 238.415237][ T9686] CIFS: VFS: Error connecting to socket. Aborting operation. [ 238.417468][ T9686] CIFS: VFS: cifs_mount failed w/return code = -101 [ 240.441136][ T9719] file system registered [ 240.456668][ T5882] usb 5-1: USB disconnect, device number 16 [ 240.495840][ T9719] ffs_data_put(): freeing [ 240.510236][ T9719] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1116'. [ 240.519911][ T9723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1118'. [ 240.529917][ T9723] CIFS: Attempting to mount //127.0.0.1/share [ 240.568094][ T7825] udevd[7825]: incorrect bcache checksum on /dev/loop0 [ 240.582663][ T9724] CIFS: VFS: Invalid response size 0 for command 0 [ 240.586773][ T9723] CIFS: VFS: cifs_mount failed w/return code = -5 [ 240.589250][ T9725] lo: entered allmulticast mode [ 240.594016][ T9722] lo: left allmulticast mode [ 240.641829][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 240.702357][ T7861] udevd[7861]: incorrect bcache checksum on /dev/loop0 [ 240.864825][ T9742] FAULT_INJECTION: forcing a failure. [ 240.864825][ T9742] name failslab, interval 1, probability 0, space 0, times 0 [ 240.874274][ T9742] CPU: 0 UID: 0 PID: 9742 Comm: syz.1.1124 Tainted: G S L syzkaller #0 PREEMPT(full) [ 240.874296][ T9742] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 240.874301][ T9742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 240.874308][ T9742] Call Trace: [ 240.874312][ T9742] [ 240.874318][ T9742] dump_stack_lvl+0x100/0x190 [ 240.874337][ T9742] should_fail_ex.cold+0x5/0xa [ 240.874350][ T9742] should_failslab+0xc2/0x120 [ 240.874366][ T9742] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 240.874388][ T9742] ? seg6_genl_set_tunsrc+0xcc/0x1b0 [ 240.874415][ T9742] kmemdup_noprof+0x29/0x60 [ 240.874429][ T9742] seg6_genl_set_tunsrc+0xcc/0x1b0 [ 240.874441][ T9742] ? __asan_memset+0x23/0x50 [ 240.874454][ T9742] genl_family_rcv_msg_doit+0x214/0x300 [ 240.874471][ T9742] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 240.874486][ T9742] ? genl_get_cmd+0x3e7/0x760 [ 240.874503][ T9742] ? bpf_lsm_capable+0x9/0x10 [ 240.874515][ T9742] ? security_capable+0x80/0x260 [ 240.874530][ T9742] genl_rcv_msg+0x560/0x800 [ 240.874546][ T9742] ? __pfx_genl_rcv_msg+0x10/0x10 [ 240.874561][ T9742] ? __pfx_seg6_genl_set_tunsrc+0x10/0x10 [ 240.874578][ T9742] netlink_rcv_skb+0x159/0x420 [ 240.874591][ T9742] ? __pfx_genl_rcv_msg+0x10/0x10 [ 240.874606][ T9742] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 240.874624][ T9742] ? netlink_deliver_tap+0x1ae/0xcc0 [ 240.874638][ T9742] genl_rcv+0x28/0x40 [ 240.874651][ T9742] netlink_unicast+0x585/0x850 [ 240.874665][ T9742] ? __pfx_netlink_unicast+0x10/0x10 [ 240.874682][ T9742] netlink_sendmsg+0x8b0/0xda0 [ 240.874698][ T9742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.874713][ T9742] ? apparmor_socket_sendmsg+0x15b/0x270 [ 240.874727][ T9742] ____sys_sendmsg+0xa4d/0xbe0 [ 240.874739][ T9742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.874753][ T9742] ? __pfx_____sys_sendmsg+0x10/0x10 [ 240.874771][ T9742] ___sys_sendmsg+0x190/0x1e0 [ 240.874784][ T9742] ? __pfx____sys_sendmsg+0x10/0x10 [ 240.874803][ T9742] ? find_held_lock+0x2b/0x80 [ 240.874827][ T9742] __sys_sendmsg+0x160/0x210 [ 240.874844][ T9742] ? __pfx___sys_sendmsg+0x10/0x10 [ 240.874864][ T9742] ? __pfx_ksys_write+0x10/0x10 [ 240.874878][ T9742] __do_fast_syscall_32+0xe7/0x970 [ 240.874896][ T9742] ? lockdep_hardirqs_on+0x78/0x100 [ 240.874913][ T9742] do_fast_syscall_32+0x32/0x70 [ 240.874930][ T9742] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 240.874944][ T9742] RIP: 0023:0xf7f97fec [ 240.874958][ T9742] Code: Unable to access opcode bytes at 0xf7f97fc2. [ 240.874963][ T9742] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 240.874975][ T9742] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002340 [ 240.874981][ T9742] RDX: 0000000000048000 RSI: 0000000000000000 RDI: 0000000000000000 [ 240.874988][ T9742] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 240.874994][ T9742] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 240.875000][ T9742] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 240.875014][ T9742] [ 240.976160][ T9747] netlink: 'syz.3.1125': attribute type 2 has an invalid length. [ 241.034650][ T9751] overlayfs: failed to resolve './bus': -2 [ 241.144491][ T9757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1130'. [ 241.154216][ T9757] CIFS: Attempting to mount //127.0.0.1/share [ 241.261494][ T5882] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 241.313395][ T9753] syzkaller0: entered promiscuous mode [ 241.315613][ T9753] syzkaller0: entered allmulticast mode [ 241.443208][ T5882] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 241.447306][ T5882] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 241.451285][ T5882] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 241.456514][ T5882] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 241.459463][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.466601][ T5882] usbtmc 6-1:16.0: bulk endpoints not found [ 241.959093][ T9761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1131'. [ 241.976606][ T9757] CIFS: VFS: Error connecting to socket. Aborting operation. [ 241.979039][ T9757] CIFS: VFS: cifs_mount failed w/return code = -4 [ 241.981597][ T9761] CIFS: Attempting to mount //127.0.0.1/share [ 241.986527][ T9761] CIFS: VFS: Error connecting to socket. Aborting operation. [ 241.988929][ T9761] CIFS: VFS: cifs_mount failed w/return code = -101 [ 243.000476][ T9779] jffs2: notice: (9779) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 243.041851][ T9784] ================================================================== [ 243.044276][ T9784] BUG: KASAN: invalid-free in f_uac2_opts_c_srate_store+0x1d4/0x260 [ 243.046772][ T9784] Free of addr ffff88805f84f48c by task syz.2.1139/9784 [ 243.049069][ T9784] [ 243.050251][ T9784] CPU: 3 UID: 0 PID: 9784 Comm: syz.2.1139 Tainted: G S L syzkaller #0 PREEMPT(full) [ 243.050271][ T9784] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 243.050277][ T9784] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 243.050286][ T9784] Call Trace: [ 243.050292][ T9784] [ 243.050298][ T9784] dump_stack_lvl+0x100/0x190 [ 243.050316][ T9784] print_report+0x13d/0x4b0 [ 243.050333][ T9784] ? __virt_addr_valid+0x239/0x430 [ 243.050347][ T9784] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 243.050368][ T9784] kasan_report_invalid_free+0xb8/0x190 [ 243.050385][ T9784] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 243.050405][ T9784] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 243.050425][ T9784] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 243.050443][ T9784] check_slab_allocation+0xe1/0xf0 [ 243.050457][ T9784] ? f_uac2_opts_c_srate_store+0x1c0/0x260 [ 243.050474][ T9784] kfree+0x1b6/0x6c0 [ 243.050483][ T9784] ? __asan_memcpy+0x3c/0x60 [ 243.050496][ T9784] f_uac2_opts_c_srate_store+0x1d4/0x260 [ 243.050514][ T9784] ? __pfx_f_uac2_opts_c_srate_store+0x10/0x10 [ 243.050537][ T9784] ? configfs_write_iter+0x388/0x4e0 [ 243.050550][ T9784] configfs_write_iter+0x302/0x4e0 [ 243.050563][ T9784] vfs_write+0x6ac/0x1050 [ 243.050574][ T9784] ? __pfx_configfs_write_iter+0x10/0x10 [ 243.050586][ T9784] ? __pfx_vfs_write+0x10/0x10 [ 243.050597][ T9784] ? find_held_lock+0x2b/0x80 [ 243.050615][ T9784] ksys_write+0x12a/0x250 [ 243.050625][ T9784] ? __pfx_ksys_write+0x10/0x10 [ 243.050637][ T9784] __do_fast_syscall_32+0xe7/0x970 [ 243.050657][ T9784] do_fast_syscall_32+0x32/0x70 [ 243.050674][ T9784] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 243.050700][ T9784] RIP: 0023:0xf709efec [ 243.050715][ T9784] Code: Unable to access opcode bytes at 0xf709efc2. [ 243.050722][ T9784] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 243.050735][ T9784] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000500 [ 243.050744][ T9784] RDX: 0000000000000023 RSI: 0000000000000000 RDI: 0000000000000000 [ 243.050751][ T9784] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 243.050759][ T9784] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 243.050767][ T9784] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 243.050779][ T9784] [ 243.050783][ T9784] [ 243.121579][ T9784] Allocated by task 9784: [ 243.122905][ T9784] kasan_save_stack+0x30/0x50 [ 243.124370][ T9784] kasan_save_track+0x14/0x30 [ 243.125845][ T9784] __kasan_kmalloc+0xaa/0xb0 [ 243.127282][ T9784] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 243.129250][ T9784] kstrdup+0x51/0xe0 [ 243.130466][ T9784] f_uac2_opts_c_srate_store+0x113/0x260 [ 243.132218][ T9784] configfs_write_iter+0x302/0x4e0 [ 243.133790][ T9784] vfs_write+0x6ac/0x1050 [ 243.135143][ T9784] ksys_write+0x12a/0x250 [ 243.136487][ T9784] __do_fast_syscall_32+0xe7/0x970 [ 243.138066][ T9784] do_fast_syscall_32+0x32/0x70 [ 243.139580][ T9784] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 243.141548][ T9784] [ 243.142308][ T9784] The buggy address belongs to the object at ffff88805f84f480 [ 243.142308][ T9784] which belongs to the cache kmalloc-64 of size 64 [ 243.146539][ T9784] The buggy address is located 12 bytes inside of [ 243.146539][ T9784] 36-byte region [ffff88805f84f480, ffff88805f84f4a4) [ 243.150531][ T9784] [ 243.151296][ T9784] The buggy address belongs to the physical page: [ 243.153218][ T9784] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805f84f700 pfn:0x5f84f [ 243.156112][ T9784] flags: 0x4fff00000000200(workingset|node=1|zone=1|lastcpupid=0x7ff) [ 243.158578][ T9784] page_type: f5(slab) [ 243.159808][ T9784] raw: 04fff00000000200 ffff88801bc428c0 ffffea0001717e10 ffffea0001bc3dd0 [ 243.162394][ T9784] raw: ffff88805f84f700 000000080020001a 00000000f5000000 0000000000000000 [ 243.164984][ T9784] page dumped because: kasan: bad access detected [ 243.166981][ T9784] page_owner tracks the page as allocated [ 243.168754][ T9784] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6060, tgid 6060 (udevd), ts 80277079068, free_ts 80268318886 [ 243.174647][ T9784] post_alloc_hook+0xfd/0x120 [ 243.176139][ T9784] get_page_from_freelist+0xf48/0x3530 [ 243.177844][ T9784] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 243.179691][ T9784] new_slab+0xa2/0x640 [ 243.180986][ T9784] refill_objects+0xe3/0x410 [ 243.182456][ T9784] __pcs_replace_empty_main+0x376/0x680 [ 243.184179][ T9784] __kmalloc_noprof+0x66d/0x820 [ 243.185727][ T9784] tomoyo_encode2+0xfb/0x3c0 [ 243.187167][ T9784] tomoyo_encode+0x29/0x50 [ 243.188566][ T9784] tomoyo_realpath_from_path+0x18c/0x690 [ 243.190306][ T9784] tomoyo_check_open_permission+0x2af/0x3c0 [ 243.192111][ T9784] tomoyo_file_open+0x6b/0x90 [ 243.193582][ T9784] security_file_open+0xb5/0x1e0 [ 243.195146][ T9784] do_dentry_open+0x588/0x14d0 [ 243.196654][ T9784] vfs_open+0x82/0x3f0 [ 243.197939][ T9784] path_openat+0x2873/0x4280 [ 243.199394][ T9784] page last free pid 6129 tgid 6129 stack trace: [ 243.201319][ T9784] __free_frozen_pages+0x79f/0x1090 [ 243.202867][ T9784] pgd_free+0x3eb/0x540 [ 243.204104][ T9784] __mmdrop+0x139/0x530 [ 243.205396][ T9784] __mmput+0x379/0x410 [ 243.206590][ T9784] mmput+0x67/0x80 [ 243.207712][ T9784] do_exit+0x8b1/0x2ae0 [ 243.208965][ T9784] do_group_exit+0xd5/0x2a0 [ 243.210355][ T9784] __x64_sys_exit_group+0x3e/0x50 [ 243.211875][ T9784] x64_sys_call+0x102c/0x1530 [ 243.213271][ T9784] do_syscall_64+0x115/0x840 [ 243.214629][ T9784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.216485][ T9784] [ 243.217251][ T9784] Memory state around the buggy address: [ 243.218965][ T9784] ffff88805f84f380: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 243.221445][ T9784] ffff88805f84f400: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 243.223855][ T9784] >ffff88805f84f480: 00 00 00 00 04 fc fc fc fc fc fc fc fc fc fc fc [ 243.226342][ T9784] ^ [ 243.227698][ T9784] ffff88805f84f500: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 243.230174][ T9784] ffff88805f84f580: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 243.232604][ T9784] ================================================================== [ 243.238503][ T9784] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 243.241009][ T9784] CPU: 3 UID: 0 PID: 9784 Comm: syz.2.1139 Tainted: G S L syzkaller #0 PREEMPT(full) [ 243.244669][ T9784] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 243.246925][ T9784] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 243.250458][ T9784] Call Trace: [ 243.251649][ T9784] [ 243.252771][ T9784] dump_stack_lvl+0x100/0x190 [ 243.254444][ T9784] vpanic+0x552/0x970 [ 243.255931][ T9784] ? __pfx_vpanic+0x10/0x10 [ 243.257613][ T9784] panic+0xd1/0xe0 [ 243.258968][ T9784] ? __pfx_panic+0x10/0x10 [ 243.260618][ T9784] ? preempt_schedule_common+0x42/0xc0 [ 243.262501][ T9784] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 243.264663][ T9784] check_panic_on_warn.cold+0x19/0x34 [ 243.266588][ T9784] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 243.268728][ T9784] end_report.part.0+0x3a/0x90 [ 243.270389][ T9784] kasan_report_invalid_free.cold+0xd/0x12 [ 243.272513][ T9784] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 243.274606][ T9784] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 243.276699][ T9784] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 243.278712][ T9784] check_slab_allocation+0xe1/0xf0 [ 243.280435][ T9784] ? f_uac2_opts_c_srate_store+0x1c0/0x260 [ 243.282223][ T9784] kfree+0x1b6/0x6c0 [ 243.283541][ T9784] ? __asan_memcpy+0x3c/0x60 [ 243.284966][ T9784] f_uac2_opts_c_srate_store+0x1d4/0x260 [ 243.286683][ T9784] ? __pfx_f_uac2_opts_c_srate_store+0x10/0x10 [ 243.288570][ T9784] ? configfs_write_iter+0x388/0x4e0 [ 243.290124][ T9784] configfs_write_iter+0x302/0x4e0 [ 243.291646][ T9784] vfs_write+0x6ac/0x1050 [ 243.292975][ T9784] ? __pfx_configfs_write_iter+0x10/0x10 [ 243.294683][ T9784] ? __pfx_vfs_write+0x10/0x10 [ 243.296137][ T9784] ? find_held_lock+0x2b/0x80 [ 243.297592][ T9784] ksys_write+0x12a/0x250 [ 243.298923][ T9784] ? __pfx_ksys_write+0x10/0x10 [ 243.300432][ T9784] __do_fast_syscall_32+0xe7/0x970 [ 243.302057][ T9784] do_fast_syscall_32+0x32/0x70 [ 243.303601][ T9784] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 243.305587][ T9784] RIP: 0023:0xf709efec [ 243.306883][ T9784] Code: Unable to access opcode bytes at 0xf709efc2. [ 243.308964][ T9784] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 243.311572][ T9784] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000500 [ 243.314043][ T9784] RDX: 0000000000000023 RSI: 0000000000000000 RDI: 0000000000000000 [ 243.316515][ T9784] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 243.318988][ T9784] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 243.321453][ T9784] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 243.323830][ T9784] [ 243.325475][ T9784] Kernel Offset: disabled [ 243.326843][ T9784] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:29:58 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010003 RBX=0000000000000001 RCX=ffffffff820c4c30 RDX=0000000000000003 RSI=0000000000000000 RDI=ffffffff8e891480 RBP=ffffffff8bd64720 RSP=ffffc90000007ae0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000003 R11=0000000000000000 R12=0000000000000003 R13=0000000000000005 R14=0000000000000001 R15=ffff888073091010 RIP=ffffffff8209bc0b RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096bf3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f729abec CR3=000000004f6d4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fc80ffd0 Opmask01=0000000000004211 Opmask02=000000007ffeffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a181245940 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a181227c38 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07e65f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffffffffffff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a552dcc606131 2a2a7f8bab0e4da8 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a15d5 2a2a2a2a2a2a2a20 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c696620732520 6465746165726300 0a73253a47000a73 253d73253a45000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40494c4305560005 4140514440574600 0a56001f47000a56 001856001f45000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 303a363631632f30 2e313a313a302d62 73752d312e646368 5f796d6d75640032 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a4db003931 0000000000000021 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73616c632f737973 2f007ad7ae621642 79732f002f6d6555 7379736275732f73 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7f7f7ff7ff7f7b77 6f7f7ed7ff7f5fff 7f7f7ffbff7f7f77 7f7f7ffffd777f73 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d756e2e646368 5f796d6d75642030 34313d736365735f 74756f656d69745f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a1812b3a10 0000000000000000 000055a181223f00 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a181002e10 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b52eaa RDX=ffff88801c74a540 RSI=ffffffff81b52ece RDI=ffff88801c74a540 RBP=0000000000000001 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=0000000000000000 RIP=ffffffff81b52ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096cf3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3b81b5 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000000a RBX=ffff88804cc6a000 RCX=ffffffff81ce101f RDX=1ffff1100998d403 RSI=ffffffff81ce0fa0 RDI=0000000000000000 RBP=0000000000000009 RSP=ffffc900060ffc30 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000000 R13=0000000000000080 R14=0000000000000080 R15=0000000000000000 RIP=ffffffff81ce0fd0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096df3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f74543e4 CR3=00000000776a3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a0ddf5 RDI=ffffffff9b9e3520 RBP=ffffffff9b9e34e0 RSP=ffffc90004b1f598 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2e7a7973203a5043 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b6e3203 R15=ffffffff85a0dd90 RIP=ffffffff85a0de1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096ef3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f709f000 CR3=000000004b7fa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000