last executing test programs: 15m58.34282492s ago: executing program 3 (id=8): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x3, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, 0x0) read(r3, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, 0x0) close(r2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x40) 15m57.978536679s ago: executing program 3 (id=9): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, 0x0}, 0x0) r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x1) flock(r1, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) clock_getres(0xffffffffffffffed, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) flock(r0, 0x5) landlock_create_ruleset(&(0x7f0000000040)={0x1f4a, 0x0, 0x1}, 0x30, 0x0) 15m57.705021887s ago: executing program 3 (id=11): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000440)=0xce0, 0x4) sendmsg$nl_generic(r2, 0x0, 0x80000) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r0, 0xc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, r9, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) 15m57.573717124s ago: executing program 3 (id=13): mlockall(0x4) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl(r0, 0x400452c8, &(0x7f0000000100)="000000000000000000000000000000000000000001") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x181403, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0x40000000, 0x0, 0x6}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/rfcomm0\x00', 0x802, 0x0) write(r4, &(0x7f0000000300)="c7401b1e0741d6201c31a1d182ded8d555d2", 0x12) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone3(&(0x7f0000000080)={0x4000011, 0x0, 0x0, 0x0, {0x8000011}, 0x0, 0x0, 0x0, 0x0}, 0x58) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000001) unlinkat(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 15m57.320162372s ago: executing program 3 (id=15): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = openat$autofs(0xffffff9c, &(0x7f0000000100), 0x1, 0x0) r4 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000280), 0x64540, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, r4, {0x5}}, './file0\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400000001020102000000000000000000000000c8a6b0741cf46994a84b9431659438a04e6de1e7bd6c57f84b6c075d1c414bda999aeb3434871790ff208b85c36e2bc39ab6129b27d486b38d09e28173c8aaf55fc82665130c8bd9b2528f0327751291b979809a2ba83466aac37919d5ee595b3dd117e2928eebe979ff71052a7709647300963a23197377816ebc8a3d02c1b2062c0b4e3ea6ff737527dbc705d14a835b4da2ea9a4aa20f2bed3a034c7865805fe1ac7cf865413a32ad2f22906410aa6b994ad132c68fbfa99090b693ba5e90876555fe8b72ac2ab275fb7aeb44"], 0x24}}, 0x0) 15m56.853044501s ago: executing program 3 (id=18): fsopen(&(0x7f0000000000)='pvfs2\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x2) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00'}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x891}, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000240)={0x1, 0x7, 0x2}) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000340)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000380)=@userptr={0x0, 0x1, 0x400000, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000000400)}, 0x400000}) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000480)=0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[], 0x50) sendmsg$nl_route(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001b40)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001c00)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r6}]}}}]}, 0x6c}}, 0x0) 15m56.748275671s ago: executing program 32 (id=18): fsopen(&(0x7f0000000000)='pvfs2\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x2) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00'}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x891}, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000240)={0x1, 0x7, 0x2}) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000340)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000380)=@userptr={0x0, 0x1, 0x400000, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000000400)}, 0x400000}) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000480)=0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[], 0x50) sendmsg$nl_route(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001b40)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001c00)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r6}]}}}]}, 0x6c}}, 0x0) 15m35.073585706s ago: executing program 2 (id=78): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r0, &(0x7f00000003c0)}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x24, @short={0x2, 0x0, 0xffff}}, 0x9, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x2008000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f00000003c0)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000480)='./file1\x00', 0x40) unlinkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x200) 15m34.023410757s ago: executing program 2 (id=81): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000440)={0x20071026}, &(0x7f0000000780)={0x200002, 0x200003, 0x801, 0x4, 0x7, 0x4}) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, &(0x7f00000007c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x41, 0x48) write$rfkill(r1, 0x0, 0x0) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@id, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = syz_open_dev$video(&(0x7f0000000800), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000840)={0x1, 0x2, 0x2}) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000880)=0x2) ioctl$VIDIOC_DECODER_CMD(r4, 0xc0485660, &(0x7f00000008c0)={0x1}) ioctl$VIDIOC_DECODER_CMD(r4, 0xc0485660, &(0x7f0000000940)={0x1, 0x1, @start={0x9}}) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)={0x4, 0x615, 0x200, {0x0, 0x2710}, {}, {0x2, 0x1, 0x0, 0x1}, 0x1, @can={{}, 0x7, 0x3, 0x0, 0x0, "e570e1815799ac76"}}, 0x34}}, 0x40010) shutdown(r2, 0x2) 15m32.705666698s ago: executing program 2 (id=82): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000100)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet6_int(r2, 0x29, 0x35, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000300)=@ethtool_rxfh={0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0xa}}) r4 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) shutdown(r5, 0x1) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2717, 0x0, &(0x7f0000000000)) write$cgroup_netprio_ifpriomap(r4, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r1], 0xa) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) io_submit(0x0, 0x1, &(0x7f00000013c0)=[0x0]) ioctl$RTC_WKALM_SET(r7, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x10, 0x0, 0x18, 0x0, 0x5c, 0x4}}) pread64(r7, 0x0, 0x0, 0x10000) 15m31.294883392s ago: executing program 2 (id=86): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@gettfilter={0x23, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xffe8}, {0xf, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x200008c1}, 0x4041080) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfd, {{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast1, 0x4e23, 0x200, 0x4e20, 0x0, 0xcae7388a885de62c, 0xe0, 0x20, 0x3b}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, {0x9, 0x100000001, 0x6, 0x2, 0x1, 0x7, 0xc0d, 0x9}, {0xffffffff7fffffff, 0x0, 0x8000000000000, 0x2}, {0x7, 0x2000000, 0x488}, 0x70bd26, 0x3505, 0x2, 0x86fa708a8da4f410, 0x6, 0x82}, 0x0, 0xe}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x4040888) sendmsg$inet(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r5 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r6, 0x0, 0x22, 0x0, &(0x7f0000000840)="00000000000000000000000008004500002800000000400600007f0000017f000001", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.discovery,reconnect_delay=1', 0xb2) 15m31.264937293s ago: executing program 4 (id=87): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000340)='autofs\x00', 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, 0x0, 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x2) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) fchdir(r3) readlink(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000240)=""/184, 0xb8) sendmmsg(0xffffffffffffffff, &(0x7f0000000100), 0x3ef, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) brk(0x5) 15m31.264356923s ago: executing program 2 (id=88): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0xc0a45320, &(0x7f00000001c0)={0x80, 0x0, 'client1\x00', 0x80000001, "786281f043ca447c", "b437067509007708e18f85bb3d22ac7a6568af9ebb8891fdffa0225452869ac0", 0x0, 0xfffffffe}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000580)=[{&(0x7f00000005c0)='=@w', 0x3}], 0x1, 0x1) recvmmsg(r6, &(0x7f0000000600)=[{{&(0x7f0000000640)=@un=@abs, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)=""/1}, {&(0x7f0000000740)=""/102}, {&(0x7f0000000e40)=""/4096}, {&(0x7f0000001e40)=""/111}]}}], 0x700, 0x40002002, 0x0) setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f0000001f00)=0x55b7, 0x4) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) 15m27.809371344s ago: executing program 4 (id=91): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x22601, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff83, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x2}}]}}]}, 0x48}}, 0x4c050) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0xb}, {0x0, 0xfff3}, {0x9, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x9, 0x9}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041006}, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl(r3, 0x40186f40, &(0x7f0000000340)) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000005c0)={0x0, "94c492eb2665203d36bec70800890100000000e1100a0000005900", 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049d0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r3, r2, 0x25, 0x7, @void}, 0x10) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x20001a, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) faccessat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x3, 0x1000) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000000), 0x4) r7 = syz_open_procfs(0x0, &(0x7f0000000600)='wchan\x00') mount$9p_fd(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) 15m27.637855007s ago: executing program 0 (id=92): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) socket$inet(0x2, 0x2, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x41) syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x8) ioctl$DVB_DEMUX_DMX_GET_STC(0xffffffffffffffff, 0xc0106f32, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000180)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000200)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000400)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) syz_ublk_setup_queues(r9, r7, &(0x7f0000000440)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x92e0, 0x400, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x19e0, 0x400, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2000, 0x0, 0x801f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x80, 0x2, 0x367}}], 0x1, &(0x7f0000000780)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x1, 0x0, 0x0}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, 0x0) 15m27.623396543s ago: executing program 4 (id=93): syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x141102) r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_add_watch(0xffffffffffffffff, 0x0, 0x850003d1) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000a40)=ANY=[], 0x10) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r3, @ANYBLOB="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"], 0x1c8}}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000a00)={0x3, 0x1, 0x0, &(0x7f0000000880)=""/181, 0x0, 0x222b0fff}) shmctl$SHM_INFO(0x0, 0xe, 0x0) r4 = openat$dir(0xffffff9c, &(0x7f0000000340)='./file0\x00', 0x200000, 0x2) getdents64(r4, 0x0, 0x0) 15m27.450810233s ago: executing program 2 (id=94): socket$packet(0x11, 0x2, 0x300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fanotify_init(0x200, 0x400) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0x400, 0x1, 0x244}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x8, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x803, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0x80, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) syz_open_dev$usbfs(0x0, 0xfffffffe, 0x10000) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 15m26.445381434s ago: executing program 4 (id=95): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000005e80), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000a1f000/0x1000)=nil, 0x1000) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = openat$dm_control(0xffffff9c, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000b40)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000b80)="21000000470010aaaaaaaaaa0003000000000000000000000000000000030000", 0x20) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x800, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x198, 0x138, 0x1, 0x0, 0x10, 0x0, 0x0, @by_dev={r3}, [@writecache={0x0, 0x1000, 0x0, 0x60, 'writecache\x00', {0x73, 0x20, @ram={'/dev/ram', 0x1}, 0x20, @ram={'/dev/ram', 0x0}, 0x20, '4096', 0x20, '2 autocommit_time 100'}}]}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x1a8, 0x138, 0x1, 0x0, 0x800, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, [@clone={0x0, 0x2890, 0x0, 0x70, 'clone\x00', {@ram_num={'1:', 0x0}, 0x20, @ram={'/dev/ram', 0x0}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, '256', ' 1 no_discard_passdown'}}]}) ioctl$DM_DEV_RENAME(r0, 0xc138fd05, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_dev={r4}, @name={'syz', 0x0, '2\x00'}}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, 0x0, 0x0) 15m25.79670775s ago: executing program 4 (id=96): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@gettfilter={0x23, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xffe8}, {0xf, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x200008c1}, 0x4041080) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfd, {{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast1, 0x4e23, 0x200, 0x4e20, 0x0, 0xcae7388a885de62c, 0xe0, 0x20, 0x3b}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, {0x9, 0x100000001, 0x6, 0x2, 0x1, 0x7, 0xc0d, 0x9}, {0xffffffff7fffffff, 0x0, 0x8000000000000, 0x2}, {0x7, 0x2000000, 0x488}, 0x70bd26, 0x3505, 0x2, 0x86fa708a8da4f410, 0x6, 0x82}, 0x0, 0xe}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x4040888) sendmsg$inet(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r5 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r6, 0x0, 0x22, 0x0, &(0x7f0000000840)="00000000000000000000000008004500002800000000400600007f0000017f000001", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.discovery,reconnect_delay=1', 0xb2) 15m25.574744346s ago: executing program 0 (id=97): syz_emit_ethernet(0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca5b500028003a91a46cab0000010000010000126700000000000000000000f600112233441122334472625aa6443af0de"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x6c, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0xa0}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xfffffffb}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$bt_hci(r1, 0x119, 0x2, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r3, 0xe6e964277ae08d57, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000003c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000003f80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20019054}, 0x400c044) 15m25.481295671s ago: executing program 4 (id=98): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000340)) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000400)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000500)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000540)={&(0x7f00002b9000/0x400000)=nil, &(0x7f000036e000/0x3000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000c7f000/0x3000)=nil, 0x3000, 0x15) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000005c0)={0x60, 0x0, &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xf0, 0x0, 0x0, 0xa00, 0x48, 0x0, 0x51, 0x30}) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000440)={0x60, 0x0, &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x100000001, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x4d, 0x5f}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000780)="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") ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r5}) 15m24.583286935s ago: executing program 0 (id=100): io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r2, 0x0, 0x24000840) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB, @ANYRES32, @ANYRES32=r0, @ANYBLOB, @ANYRES32=r1, @ANYBLOB], 0x50) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) capset(&(0x7f0000000200)={0x20071026}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x19, 0x0, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) 15m22.729219575s ago: executing program 0 (id=101): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) accept4(r0, &(0x7f0000000500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x80, 0x81000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x80, 0x3, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x2, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x4, 0x9, 0x4}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x250, 0x67, 0xe, 0x55, 0xff}, 0x16, &(0x7f00000005c0)={0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xff, 0x7, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xa, 0x1, 0x6}]}, 0x2, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x444}}]}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x2000, 0x2, 0x5, 0x8, 0x4}, 0x9c) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 15m13.2833855s ago: executing program 0 (id=102): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x9, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000340)={'fscrypt:', @desc2}, &(0x7f00000003c0)={0x0, "fd8deec5909976c9c242a4cd0833c7a82fc869e46d8f86d3d676668a6d55a66b1a15483d2c56b0eed46634af8b223ebe70d4f86a8671c18a3b02d61b4ba48be6", 0x3a}, 0x48, 0xffffffffffffffff) syz_fuse_handle_req(r4, &(0x7f00000042c0)="0d9ec529eb18ec94a35378619cb10ff8c913f67139447b7ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c67c0432c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a59c4699c94d7379e1e190c6dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc5019a9f4d20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b891a7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a10911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593f16430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114c1948d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31662db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccce2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138228c7e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632cab5acb5e08d6f973003c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282cc7e96cf5582c4eaf874a2fe6369534176429b7505eb0aade883260806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43cb65febea224c2b554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243fc3787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60492813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07085bb1cd74f5d63763f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d117d03a8fabc85f5ecdd0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4d9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f634eba98f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac3a2da1bf52da017c3312095403d50dcde39671242b610f13132773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737aee63ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce6ca71de75c9174e8744ba1098513bb6c7fdc6a3c7c8e5870223d6cc0b18b5d6edea926d5376aeb85488d3712e8f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b31492b19410d6f681d614eaa20029592c00c948a98973a9fba87f1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb41c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac866268d914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f755a219993e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a89a2d5a4e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909193ce64b20470e3480c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e9531e7295f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9efdd5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a6cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34e84b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5da12a0fe58f95d6b911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b524008794ffa0c179753ab48d0f73e5ff13624b3b90287edaf6a5367dcfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde070a004c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfdddd9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6ea0ee6b7e840344fbcd377b995bfb1faf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f580f262c64c57fce8ef933f18904f001809cfdf94eb679c9eced5d125b4f1d0064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912f3fcd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de1eff7d41477bb25052f32cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b21629e1989e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a05762943073d5992aac4d9b0d411ba25905c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a45626cd18c79d46f5c77c2d359e19ea870cd230709b5e33cd52fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4edab4007c988998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd597de0ce9d2cf03333a0c7121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb9c0d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f1b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab533998a1fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc74249424310dff81116b8f2076b8ebece84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a7e8ed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815f728bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4f86c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8c5fc684d12efae1859c53e2cc3e2f508a9cd0410ec036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4490093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc66a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c375696ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe51ce7f250adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a44fafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe285ad7c7a41133ed85c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c6013042b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe961b99b2d025538c3888bfff8957e3592ee5326a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6594fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c0231600f9b4b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98bcd35ad3f1fb1d5a7d00541a8a202c8590e35360bb9d25d6431476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8f2f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d045370ce3b77365c5320892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, &(0x7f000000dcc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0x0, 0xa, {0x8, 0x0, 0x0, {0x4, 0xffffffffffffff9f, 0x10000000000, 0x8, 0x40000000000003, 0xfffffffffffffffe, 0x0, 0x35741061, 0x52, 0xa593e9c1ca988eda, 0xfffffff8, 0x0, 0x0, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700000064000000140001800800030064000000"], 0x2c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f0000000100)) 15m12.354015722s ago: executing program 33 (id=94): socket$packet(0x11, 0x2, 0x300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fanotify_init(0x200, 0x400) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0x400, 0x1, 0x244}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x8, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x803, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0x80, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) syz_open_dev$usbfs(0x0, 0xfffffffe, 0x10000) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 15m12.017068827s ago: executing program 0 (id=105): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f000000bc00)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000300)={0x40000000, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000400)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r3, &(0x7f0000000540), 0x800001d, 0x1c) 15m9.37320587s ago: executing program 34 (id=98): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000340)) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000400)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000500)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000540)={&(0x7f00002b9000/0x400000)=nil, &(0x7f000036e000/0x3000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000c7f000/0x3000)=nil, 0x3000, 0x15) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000005c0)={0x60, 0x0, &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xf0, 0x0, 0x0, 0xa00, 0x48, 0x0, 0x51, 0x30}) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000440)={0x60, 0x0, &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x100000001, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x4d, 0x5f}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000780)="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") ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r5}) 14m56.941048979s ago: executing program 35 (id=105): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f000000bc00)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000300)={0x40000000, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000400)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r3, &(0x7f0000000540), 0x800001d, 0x1c) 13.383410385s ago: executing program 6 (id=2756): sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_io_uring_setup(0x111, 0x0, 0x0, 0x0, &(0x7f0000000140)) signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) r0 = fsopen(&(0x7f00000022c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0xa) fchdir(r1) r2 = open(&(0x7f0000002300)='./bus\x00', 0x1031c2, 0x0) ftruncate(r2, 0x2007ffb) r3 = open(&(0x7f0000002340)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) fcntl$setsig(r3, 0xa, 0x21) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000023c0)={0x0, 0x0, 0xfd8b, 0x5}) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002400), 0x42, 0x0) write$dsp(r4, &(0x7f0000002440)="5cba91a4", 0xffffffd9) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000002480)={{0x0, 0x989680}, {0x77359400}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioctl$SNDCTL_DSP_STEREO(r4, 0xc0045003, &(0x7f0000002500)=0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002380)='./bus\x00', 0x88882, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x15, 0x5, 0x0) 13.233725478s ago: executing program 7 (id=2758): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket(0x2b, 0x80801, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'geneve1\x00'}) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@dellink={0x34, 0x11, 0x1, 0x470bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0xc0a742c700a80d57, 0x301}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, 0x0) socket$inet6(0xa, 0x3, 0x1) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff) mount(&(0x7f00000002c0)=@filename='./dev/sda1\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)='ext4\x00', 0x8410, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r7, 0x4004662b, &(0x7f00000003c0)=0x1) 12.758911337s ago: executing program 7 (id=2759): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac-aes-ce\x00'}, 0x58) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r4, &(0x7f0000001dc0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xc1db, 0xfffffffffffffffe) 11.138213075s ago: executing program 7 (id=2764): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x19e) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mkdirat(r0, 0x0, 0x0) mount(0x0, &(0x7f0000000580)='./proc/sys/net/ipv4/tcp_ecn\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/tcp_ecn\x00', 0x1, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000003c0)={0x1, &(0x7f0000000540)=[{0x6, 0x1, 0x0, 0x45e2}]}, 0x8) close(0x3) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000300)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000340), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000380)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) write(r0, &(0x7f0000000500)='3', 0x4e) 9.955140365s ago: executing program 7 (id=2768): r0 = socket(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x4020) msgsnd(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x32, 0x800) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) recvfrom(r0, &(0x7f0000000580)=""/211, 0xd3, 0x10000, &(0x7f0000000680)=@sco, 0x80) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x81) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x300, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x2, &(0x7f0000000880)=ANY=[@ANYBLOB="9d95000104000000152bfeffffffffff3d86bca5bf287d387efe11f655165f4ecd3eabe59617747f3c58a2406913355f212242428fb94ece26927c359b2d77ff86c865dd0382ef93eaa420615a04f6dfd02cf29806abd7a8ea28a49460d3a8707dd3ff9e0372c200d61846525edce6be59f848ecffa31f6204831c3f72f3b57d48e85df235e7c3069cebf40cdf97922183285635e5769e2c2a2d2590250feba269c23fc283367521104f9ba0b393248e51ac42829674665410bd9e7de1c2b7516df4"], &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x5c, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[r1, r1, r1], &(0x7f0000000400)=[{0x4, 0x2, 0xd}, {0x1, 0x2, 0xe, 0x1}], 0x10, 0x7848}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r3, 0x0, 0x25, 0x4, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) 9.921307882s ago: executing program 6 (id=2769): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000540)={0xff, "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"}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001600010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="14160600020000000100"], 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r3 = eventfd(0xfffffdfe) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) bind$packet(r4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x81, 0x6, @remote}, 0x14) sendmmsg$sock(r4, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@timestamping={{0x10}}], 0x10}}], 0x1, 0x54876) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0, 0x54000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x9) ioctl$BTRFS_IOC_SEND(r6, 0x40489426, &(0x7f00000003c0)={{r6}, 0x8, &(0x7f0000000100)=[0xffffffffffff8000, 0x1, 0x800, 0x9, 0x0, 0x6, 0x8d, 0x6], 0x8, 0x4, 0x1}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x1f, 0x0, 0x0}) 8.657632104s ago: executing program 6 (id=2772): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000000c0)={0x7e9a, 0x8, {}, {0xffffffffffffffff}, 0x2, 0x3}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x1, 0x7ffffffd, 0x1, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0xfffffff0, @private1, 0x400014}, 0x1c) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x10000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt(r2, 0x0, 0x483, &(0x7f0000000300)="060000007f00000100150000000000006d6800"/44, 0x2c) setsockopt(r2, 0x0, 0x489, &(0x7f0000000400), 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000340), 0xe1ce, 0xffffffffffffffff, 0x0, 0xa0028000}, 0x38) setsockopt(r2, 0x0, 0x488, &(0x7f0000000500)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44) 8.403999745s ago: executing program 7 (id=2773): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) symlinkat(&(0x7f0000000680)='.\x00', 0xffffffffffffff9c, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000007c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000840), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000880), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000900)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000980), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000009c0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000c00)={0x20000014}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00038008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000dc0)={0xa0000001}) epoll_wait(r1, &(0x7f0000000e00)=[{}], 0x1, 0x4d0d) mkdirat(0xffffffffffffff9c, &(0x7f0000000e40)='./file1\x00', 0x1c0) 8.386810313s ago: executing program 1 (id=2774): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x9972, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000780)=ANY=[@ANYBLOB="3c1204"], 0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000007c0)={0x0, 0x1c, &(0x7f0000000800)=[@in6={0xa, 0x4e20, 0x44, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}]}, &(0x7f0000000840)=0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40804) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="b2", 0x1, 0x24000045, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)={0xdf, 0x0, 0x4000}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f00000005c0)="520000002300010100020600"/41, 0x29) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000940)={0x2, 0x0, @ioapic={0x5000, 0x8004, 0x1, 0x2, 0x0, [{0x44, 0xc, 0x7, '\x00', 0x38}, {0x9, 0xde, 0x7a, '\x00', 0x9}, {0x2, 0xb3, 0x1, '\x00', 0x5}, {0x5, 0x9, 0x6, '\x00', 0x4}, {0x5, 0x5, 0x6, '\x00', 0x7c}, {0x0, 0x80, 0x0, '\x00', 0x6}, {0x4, 0x8, 0xff, '\x00', 0x45}, {0x52, 0xc, 0x9, '\x00', 0xbb}, {0x7, 0x6, 0x73, '\x00', 0x3}, {0xff, 0xb7, 0x89, '\x00', 0x7}, {0x16, 0x24, 0xa9, '\x00', 0x81}, {0x3, 0x1, 0x14, '\x00', 0xb}, {0x6, 0x5, 0x5, '\x00', 0x3}, {0x19, 0x9, 0x89, '\x00', 0x4}, {0x5, 0x1, 0x3, '\x00', 0x1}, {0x8, 0x9, 0xdb, '\x00', 0x5}, {0x4, 0xe, 0xb, '\x00', 0x5}, {0x9, 0x0, 0xf6, '\x00', 0x5}, {0x44, 0xff, 0x3}, {0xf4, 0x8, 0x7, '\x00', 0xf8}, {0x4, 0x7, 0x31, '\x00', 0xf7}, {0x7, 0x4, 0x4, '\x00', 0xb}, {0xff, 0x8, 0x3, '\x00', 0xa}, {0x7, 0x0, 0x4, '\x00', 0xff}]}}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b4050000000000006910a40000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49b"], &(0x7f0000000400)='GPL\x00', 0x5, 0xc3, &(0x7f0000000440)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000540), 0x8, 0x10, &(0x7f0000000580), 0x10}, 0x94) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) 8.029100286s ago: executing program 5 (id=2775): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x2, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x278, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000000)) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100", 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00'}) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001800dd8d0000c6b00000df2502100000fc00fe070015000006001500060000000c0016800500040002000000"], 0x30}}, 0x40044) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) 7.759792827s ago: executing program 6 (id=2776): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8}}}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)=0x0) nanosleep(&(0x7f0000001a00)={0x5}, &(0x7f0000001a40)) r9 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r9}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) nanosleep(&(0x7f0000001a80)={0x5}, &(0x7f0000001ac0)) r10 = syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x0) pread64$ublk_bdev(r10, &(0x7f0000005000)=""/4096, 0x1000, 0x0) syz_ublk_process_io(r8, 0x0, 0x1, &(0x7f0000000e00), 0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000f00)=@ublk_stop_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207507, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5}}) io_uring_enter(r1, 0x0, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000001000)=@ublk_del_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5}}) io_uring_enter(r1, 0x0, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) 7.719998411s ago: executing program 1 (id=2777): openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x82084, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x5) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0xc5, &(0x7f0000000300)={0x0, 0x10f211, 0x4, 0x2002, 0x40001c, 0x0, r0}, &(0x7f00000007c0), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000680)="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", 0x102}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x2, 0x14) shutdown(r2, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xb, 0x1, 'TCPMSS\x00'}, @NFTA_TARGET_INFO={0xd, 0x3, "ac1a91d256ebf87b31"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2004095) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000040), 0x10) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 6.423145427s ago: executing program 6 (id=2778): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x2, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x278, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000000)) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100", 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00'}) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001800dd8d0000c6b00000df2502100000fc00fe070015000006001500060000000c0016800500040002000000"], 0x30}}, 0x40044) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) 6.181409359s ago: executing program 1 (id=2779): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='reiserfs\x00', 0x38130d1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_getaffinity(r2, 0x8, &(0x7f0000000280)) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) ioctl$FS_IOC_SETFSLABEL(r1, 0x8927, &(0x7f0000000cc0)="37c4a5e33a6081f2a3fcc30a2ea92ef80f6427c344d1178a1c43ca4f0000ec67b9f27cd83b08959c0e471c4ae78b9cc4c7603c7a040782f3c379a03019e3bfd92533743c915077dd984784f531853d184c539dcac54ff2e955ba3fd1c00b016be57263b9695d15c56bbfcc195f2becfab2fc273ea8aee645f9062c6ac6c6c02f59935620d42a59a7e285c4e602b45acbf3e1bfd871e98e4f37b281b5e13b55a48e24a9981b78fe161a9de127f5b2c8ae0a12cbc189b6a1f44e298ff0acca36aac1967ea538fb4d8ca3ff03884b543d868eac5217ad9b6e5c0f7bba6311f4b36020ec81e814f17062e2d5766abba3d757582a9b922b726173db7a852dc7983fdc") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 6.150325151s ago: executing program 7 (id=2780): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000006000079b005"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000240)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) ptrace(0x8, r0) ptrace$getregset(0x4205, r0, 0x200, &(0x7f00000002c0)={&(0x7f0000000340)=""/112, 0x70}) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100008e88052086800095d8b6010203010902120001"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000480), 0x2, 0x40402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000004c0)={&(0x7f0000000500)=[{0x1e, 0x5011, 0x0, 0x0}], 0x1}) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x100010, r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x14201, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000600)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter={0x1, 0x0, 0x100, 0x0, 0xffffffff}}]}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys\x00', 0x1ff) ioctl$TIOCGPTPEER(r4, 0x5441, 0xfffff001) mount(0x0, &(0x7f0000000780)='./sys\x00', &(0x7f00000007c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) write(r5, &(0x7f0000000880)='1', 0x1) 5.372043415s ago: executing program 5 (id=2781): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000000c0)={0x7e9a, 0x8, {}, {0xffffffffffffffff}, 0x2, 0x3}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x1, 0x7ffffffd, 0x1, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0xfffffff0, @private1, 0x400014}, 0x1c) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x10000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt(r2, 0x0, 0x483, &(0x7f0000000300)="060000007f00000100150000000000006d6800"/44, 0x2c) setsockopt(r2, 0x0, 0x489, &(0x7f0000000400), 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000340), 0xe1ce, 0xffffffffffffffff, 0x0, 0xa0028000}, 0x38) setsockopt(r2, 0x0, 0x488, &(0x7f0000000500)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44) 5.208933319s ago: executing program 1 (id=2782): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000000c0)={0x7e9a, 0x8, {}, {0xffffffffffffffff}, 0x2, 0x3}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x1, 0x7ffffffd, 0x1, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0xfffffff0, @private1, 0x400014}, 0x1c) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x10000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt(r2, 0x0, 0x483, &(0x7f0000000300)="060000007f00000100150000000000006d6800"/44, 0x2c) setsockopt(r2, 0x0, 0x489, &(0x7f0000000400), 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000340), 0xe1ce, 0xffffffffffffffff, 0x0, 0xa0028000}, 0x38) setsockopt(r2, 0x0, 0x488, &(0x7f0000000500)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44) 3.108668139s ago: executing program 1 (id=2783): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/file0\x00', 0x42) r1 = openat(0xffffffffffffff9c, 0x0, 0x16000, 0x0) write(r1, 0x0, 0x0) r2 = dup(r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) syz_open_dev$usbmon(0x0, 0x80000001, 0x82002) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) waitid(0x1, r4, 0x0, 0x61000006, &(0x7f0000000340)) ptrace$getregset(0x4205, r4, 0x202, &(0x7f00000003c0)={0x0}) sched_setscheduler(r4, 0x2, &(0x7f0000000500)=0x49) r5 = syz_io_uring_setup(0xf0c, &(0x7f0000000400)={0x0, 0x595d, 0x8, 0x1, 0x1000051}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x3208}}) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) pause() r9 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r9}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 3.108215053s ago: executing program 5 (id=2784): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000000c0)={0x7e9a, 0x8, {}, {0xffffffffffffffff}, 0x2, 0x3}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x1, 0x7ffffffd, 0x1, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0xfffffff0, @private1, 0x400014}, 0x1c) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x10000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt(r2, 0x0, 0x483, &(0x7f0000000300)="060000007f00000100150000000000006d6800"/44, 0x2c) setsockopt(r2, 0x0, 0x489, &(0x7f0000000400), 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000340), 0xe1ce, 0xffffffffffffffff, 0x0, 0xa0028000}, 0x38) setsockopt(r2, 0x0, 0x488, &(0x7f0000000500)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44) 2.207885279s ago: executing program 5 (id=2785): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x9972, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000780)=ANY=[@ANYBLOB="3c1204"], 0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000007c0)={0x0, 0x1c, &(0x7f0000000800)=[@in6={0xa, 0x4e20, 0x44, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}]}, &(0x7f0000000840)=0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40804) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="b2", 0x1, 0x24000045, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)={0xdf, 0x0, 0x4000}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f00000005c0)="520000002300010100020600"/41, 0x29) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000940)={0x2, 0x0, @ioapic={0x5000, 0x8004, 0x1, 0x2, 0x0, [{0x44, 0xc, 0x7, '\x00', 0x38}, {0x9, 0xde, 0x7a, '\x00', 0x9}, {0x2, 0xb3, 0x1, '\x00', 0x5}, {0x5, 0x9, 0x6, '\x00', 0x4}, {0x5, 0x5, 0x6, '\x00', 0x7c}, {0x0, 0x80, 0x0, '\x00', 0x6}, {0x4, 0x8, 0xff, '\x00', 0x45}, {0x52, 0xc, 0x9, '\x00', 0xbb}, {0x7, 0x6, 0x73, '\x00', 0x3}, {0xff, 0xb7, 0x89, '\x00', 0x7}, {0x16, 0x24, 0xa9, '\x00', 0x81}, {0x3, 0x1, 0x14, '\x00', 0xb}, {0x6, 0x5, 0x5, '\x00', 0x3}, {0x19, 0x9, 0x89, '\x00', 0x4}, {0x5, 0x1, 0x3, '\x00', 0x1}, {0x8, 0x9, 0xdb, '\x00', 0x5}, {0x4, 0xe, 0xb, '\x00', 0x5}, {0x9, 0x0, 0xf6, '\x00', 0x5}, {0x44, 0xff, 0x3}, {0xf4, 0x8, 0x7, '\x00', 0xf8}, {0x4, 0x7, 0x31, '\x00', 0xf7}, {0x7, 0x4, 0x4, '\x00', 0xb}, {0xff, 0x8, 0x3, '\x00', 0xa}, {0x7, 0x0, 0x4, '\x00', 0xff}]}}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b4050000000000006910a40000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49b"], &(0x7f0000000400)='GPL\x00', 0x5, 0xc3, &(0x7f0000000440)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000540), 0x8, 0x10, &(0x7f0000000580), 0x10}, 0x94) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) 2.112259182s ago: executing program 1 (id=2786): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c0002800500010000000000240001"], 0x80}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() fanotify_init(0xef0, 0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x4) 1.480419436s ago: executing program 5 (id=2787): syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYRESHEX], 0x8) openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000001c0)={0x4, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000300)=0x2) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc044560f, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000002e00)='ns/cgroup\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) 1.369004294s ago: executing program 6 (id=2788): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x141000, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x5ad080, 0x0) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000300)=@name, &(0x7f0000000500)=0x10) r1 = syz_open_dev$sndmidi(0x0, 0xffffffff, 0x412100) writev(r1, &(0x7f0000000840), 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x80, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, &(0x7f00000028c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioprio_set$uid(0x3, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$vhost_msg_v2(r3, &(0x7f0000000340)={0x2, 0x0, {&(0x7f00000009c0)=""/205, 0xcd, 0x0, 0x2, 0x2}}, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000240)={'veth1_macvtap\x00', 0x2000}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) ioprio_get$pid(0x1, r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f00000002c0)='./bus/file0\x00', 0x1a4) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r6) r7 = syz_open_dev$ndb(&(0x7f0000000540), 0x0, 0x101000) ioctl$BLKTRACESETUP(r7, 0xc0401273, &(0x7f00000005c0)={'\x00', 0x8001, 0x8, 0x10000, 0xffffffffffffdc2c, 0x5}) 0s ago: executing program 5 (id=2789): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket(0x2b, 0x80801, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, 0x41014, 0x54c1f}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x20040000) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@dellink={0x34, 0x11, 0x1, 0x470bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0xc0a742c700a80d57, 0x301}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, 0x0) socket$inet6(0xa, 0x3, 0x1) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff) mount(&(0x7f00000002c0)=@filename='./dev/sda1\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)='ext4\x00', 0x8410, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r7, 0x4004662b, &(0x7f00000003c0)=0x1) kernel console output (not intermixed with test programs): k: 48 bytes leftover after parsing attributes in process `syz.5.2263'. [ 781.704594][T16482] i801_smbus 0000:00:1f.3: SMBus using PCI interrupt [ 781.705036][T16482] FAULT_INJECTION: forcing a failure. [ 781.705036][T16482] name failslab, interval 1, probability 0, space 0, times 0 [ 781.705063][T16482] CPU: 2 UID: 0 PID: 16482 Comm: syz.5.2263 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 781.705093][T16482] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 781.705102][T16482] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 781.705116][T16482] Call Trace: [ 781.705123][T16482] [ 781.705131][T16482] dump_stack_lvl+0x100/0x190 [ 781.705162][T16482] should_fail_ex.cold+0x5/0xa [ 781.705192][T16482] should_failslab+0xc2/0x120 [ 781.705240][T16482] kmem_cache_alloc_noprof+0x92/0x6a0 [ 781.705267][T16482] ? __asan_memcpy+0x3c/0x60 [ 781.705290][T16482] ? __kernfs_new_node+0xd2/0xa10 [ 781.705320][T16482] __kernfs_new_node+0xd2/0xa10 [ 781.705345][T16482] ? device_driver_attach+0xaa/0x230 [ 781.705381][T16482] ? __pfx___kernfs_new_node+0x10/0x10 [ 781.705409][T16482] ? lock_acquire+0x1d1/0x380 [ 781.705428][T16482] ? kernfs_root+0x23/0x2a0 [ 781.705448][T16482] ? find_held_lock+0x2b/0x80 [ 781.705473][T16482] ? kernfs_root+0xee/0x2a0 [ 781.705493][T16482] ? kernfs_root+0xee/0x2a0 [ 781.705519][T16482] kernfs_new_node+0x194/0x200 [ 781.705544][T16482] ? __pfx_kernfs_new_node+0x10/0x10 [ 781.705566][T16482] ? kernfs_create_link+0xe4/0x280 [ 781.705591][T16482] ? kernfs_create_link+0xe4/0x280 [ 781.705621][T16482] kernfs_create_link+0x100/0x280 [ 781.705651][T16482] sysfs_do_create_link_sd+0x90/0x140 [ 781.705673][T16482] sysfs_create_link+0x61/0xc0 [ 781.705693][T16482] acpi_bind_one+0x4b4/0x650 [ 781.705723][T16482] ? __pfx_acpi_bind_one+0x10/0x10 [ 781.705753][T16482] ? lockdep_init_map_type+0x5c/0x250 [ 781.705777][T16482] acpi_device_notify+0x50/0x510 [ 781.705805][T16482] device_add+0x2b4/0x1970 [ 781.705827][T16482] ? __pfx_device_add+0x10/0x10 [ 781.705845][T16482] ? __pfx_idr_replace+0x10/0x10 [ 781.705869][T16482] ? dput.part.0+0x4a/0x240 [ 781.705891][T16482] ? dput+0x24/0x30 [ 781.705916][T16482] i2c_register_adapter+0x862/0x13f0 [ 781.705938][T16482] ? of_alias_get_id+0xb1/0x110 [ 781.705968][T16482] i801_probe.cold+0x30c/0x8bf [ 781.705995][T16482] ? __pfx_i801_probe+0x10/0x10 [ 781.706030][T16482] ? mark_held_locks+0x40/0x70 [ 781.706060][T16482] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 781.706092][T16482] ? lockdep_hardirqs_on+0x7d/0x110 [ 781.706114][T16482] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 781.706149][T16482] ? __pfx_i801_probe+0x10/0x10 [ 781.706172][T16482] local_pci_probe+0xdd/0x1b0 [ 781.706204][T16482] pci_call_probe+0x176/0x800 [ 781.706222][T16482] ? pci_match_device+0x147/0x7d0 [ 781.706252][T16482] ? __pfx_pci_call_probe+0x10/0x10 [ 781.706277][T16482] ? __pfx_pci_match_device+0x10/0x10 [ 781.706322][T16482] pci_device_probe+0x25b/0x400 [ 781.706341][T16482] ? __pfx_pci_device_probe+0x10/0x10 [ 781.706368][T16482] ? sysfs_create_link+0x68/0xc0 [ 781.706388][T16482] ? __pfx_pci_device_probe+0x10/0x10 [ 781.706409][T16482] really_probe+0x241/0xa60 [ 781.706441][T16482] __driver_probe_device+0x210/0x460 [ 781.706476][T16482] device_driver_attach+0xaa/0x230 [ 781.706507][T16482] bind_store+0x123/0x1d0 [ 781.706528][T16482] ? __pfx_bind_store+0x10/0x10 [ 781.706552][T16482] drv_attr_store+0x74/0xb0 [ 781.706570][T16482] ? __pfx_drv_attr_store+0x10/0x10 [ 781.706588][T16482] sysfs_kf_write+0xf2/0x150 [ 781.706620][T16482] kernfs_fop_write_iter+0x3e0/0x5f0 [ 781.706644][T16482] ? __pfx_sysfs_kf_write+0x10/0x10 [ 781.706676][T16482] vfs_write+0x6af/0x1050 [ 781.706703][T16482] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 781.706732][T16482] ? __pfx_vfs_write+0x10/0x10 [ 781.706755][T16482] ? find_held_lock+0x2b/0x80 [ 781.706798][T16482] ksys_write+0x12a/0x250 [ 781.706823][T16482] ? __pfx_ksys_write+0x10/0x10 [ 781.706857][T16482] __do_fast_syscall_32+0x14b/0x8c0 [ 781.706885][T16482] do_fast_syscall_32+0x32/0x70 [ 781.706908][T16482] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 781.706932][T16482] RIP: 0023:0xf747efbc [ 781.706949][T16482] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 781.706966][T16482] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 781.706985][T16482] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000800005c0 [ 781.706998][T16482] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 781.707014][T16482] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 781.707026][T16482] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 781.707037][T16482] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 781.707065][T16482] [ 781.717288][T16482] acpi device:10: Failed to create link physical_node1 (-12) [ 781.754817][T16474] iowarrior 12-1:0.0: Error -90 while submitting URB [ 781.758250][T16474] iowarrior 12-1:0.0: Error -90 while submitting URB [ 781.763329][T11533] usb 12-1: USB disconnect, device number 41 [ 781.877133][T16484] Invalid ELF header magic: != ELF [ 782.085914][T16482] i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD [ 782.823973][T16491] net_ratelimit: 484 callbacks suppressed [ 782.824011][T16491] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 782.830861][T16491] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2265'. [ 782.830904][T16491] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2265'. [ 782.830912][T16491] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 783.554746][T16500] hd3ss3220 0-0004: supply vdd5 not found, using dummy regulator [ 783.557923][T16500] hd3ss3220 0-0004: supply vcc33 not found, using dummy regulator [ 783.636242][T16500] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x04 [ 784.748027][T16507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2269'. [ 785.038703][T16510] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1953718136 (3907436272 ns) > initial count (3906132690 ns). Using initial count to start timer. [ 786.427696][T16526] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2273'. [ 786.427710][T16526] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2273'. [ 786.427717][T16526] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 786.505555][ T6735] usb 12-1: new high-speed USB device number 42 using dummy_hcd [ 786.665515][ T6735] usb 12-1: Using ep0 maxpacket: 8 [ 786.665993][ T6735] usb 12-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 786.666848][ T6735] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 786.666867][ T6735] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 786.666899][ T6735] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.670701][ T6735] usb 12-1: config 0 descriptor?? [ 786.852950][T16537] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2276'. [ 786.852996][T16537] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2276'. [ 786.853037][T16537] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 787.039234][ T6735] iowarrior 12-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 787.199931][T16529] iowarrior 12-1:0.0: Error -90 while submitting URB [ 787.205041][T16529] iowarrior 12-1:0.0: Error -90 while submitting URB [ 787.212799][T11995] usb 12-1: USB disconnect, device number 42 [ 787.742939][T16544] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2279'. [ 787.981333][T16542] netlink: 'syz.1.2278': attribute type 4 has an invalid length. [ 788.552086][T16562] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 788.553685][T16562] i2c i2c-0: delete_device: Can't find device in list [ 788.611047][T16563] netlink: 'syz.6.2277': attribute type 4 has an invalid length. [ 788.633991][ T43] kauditd_printk_skb: 53 callbacks suppressed [ 788.634008][ T43] audit: type=1326 audit(1793100068.816:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16555 comm="syz.5.2282" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efbc code=0x7ffc0000 [ 788.634334][ T43] audit: type=1326 audit(1793100068.816:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16555 comm="syz.5.2282" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efbc code=0x7ffc0000 [ 788.637571][ T43] audit: type=1326 audit(1793100068.826:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16555 comm="syz.5.2282" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf747efbc code=0x7ffc0000 [ 788.637980][ T43] audit: type=1326 audit(1793100068.826:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16555 comm="syz.5.2282" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efbc code=0x7ffc0000 [ 788.638388][ T43] audit: type=1326 audit(1793100068.826:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16555 comm="syz.5.2282" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efbc code=0x7ffc0000 [ 788.673053][ T43] audit: type=1326 audit(1793100068.826:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16555 comm="syz.5.2282" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf747efbc code=0x7ffc0000 [ 788.673095][ T43] audit: type=1326 audit(1793100068.826:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16555 comm="syz.5.2282" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efbc code=0x7ffc0000 [ 788.673120][ T43] audit: type=1326 audit(1793100068.826:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16555 comm="syz.5.2282" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efbc code=0x7ffc0000 [ 788.673142][ T43] audit: type=1326 audit(1793100068.826:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16555 comm="syz.5.2282" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf747efbc code=0x7ffc0000 [ 788.673163][ T43] audit: type=1326 audit(1793100068.826:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16555 comm="syz.5.2282" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efbc code=0x7ffc0000 [ 789.045389][ C0] net_ratelimit: 595 callbacks suppressed [ 789.790145][T16569] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2283'. [ 789.790161][T16569] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2283'. [ 789.790168][T16569] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 790.078256][T16570] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2284'. [ 790.078269][T16570] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2284'. [ 790.078276][T16570] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 790.787365][T16590] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2288'. [ 790.787419][T16590] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2288'. [ 790.787428][T16590] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 791.085386][T16587] netlink: 'syz.6.2286': attribute type 4 has an invalid length. [ 791.360774][T16596] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2290'. [ 791.453487][T16596] i801_smbus 0000:00:1f.3: SMBus using PCI interrupt [ 791.453893][T16596] FAULT_INJECTION: forcing a failure. [ 791.453893][T16596] name failslab, interval 1, probability 0, space 0, times 0 [ 791.453921][T16596] CPU: 2 UID: 0 PID: 16596 Comm: syz.1.2290 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 791.453951][T16596] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 791.453960][T16596] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 791.453973][T16596] Call Trace: [ 791.453981][T16596] [ 791.453990][T16596] dump_stack_lvl+0x100/0x190 [ 791.454022][T16596] should_fail_ex.cold+0x5/0xa [ 791.454048][T16596] should_failslab+0xc2/0x120 [ 791.454077][T16596] kmem_cache_alloc_noprof+0x92/0x6a0 [ 791.454099][T16596] ? __asan_memcpy+0x3c/0x60 [ 791.454121][T16596] ? __kernfs_new_node+0xd2/0xa10 [ 791.454148][T16596] __kernfs_new_node+0xd2/0xa10 [ 791.454173][T16596] ? device_driver_attach+0xaa/0x230 [ 791.454202][T16596] ? __pfx___kernfs_new_node+0x10/0x10 [ 791.454228][T16596] ? lock_acquire+0x1d1/0x380 [ 791.454246][T16596] ? kernfs_root+0x23/0x2a0 [ 791.454265][T16596] ? find_held_lock+0x2b/0x80 [ 791.454289][T16596] ? kernfs_root+0xee/0x2a0 [ 791.454308][T16596] ? kernfs_root+0xee/0x2a0 [ 791.454335][T16596] kernfs_new_node+0x194/0x200 [ 791.454360][T16596] ? __pfx_kernfs_new_node+0x10/0x10 [ 791.454381][T16596] ? kernfs_create_link+0xe4/0x280 [ 791.454407][T16596] ? kernfs_create_link+0xe4/0x280 [ 791.454441][T16596] kernfs_create_link+0x100/0x280 [ 791.454472][T16596] sysfs_do_create_link_sd+0x90/0x140 [ 791.454496][T16596] sysfs_create_link+0x61/0xc0 [ 791.454516][T16596] acpi_bind_one+0x4b4/0x650 [ 791.454555][T16596] ? __pfx_acpi_bind_one+0x10/0x10 [ 791.454587][T16596] ? lockdep_init_map_type+0x5c/0x250 [ 791.454612][T16596] acpi_device_notify+0x50/0x510 [ 791.454642][T16596] device_add+0x2b4/0x1970 [ 791.454667][T16596] ? __pfx_device_add+0x10/0x10 [ 791.454682][T16596] ? __pfx_idr_replace+0x10/0x10 [ 791.454705][T16596] ? dput.part.0+0x4a/0x240 [ 791.454725][T16596] ? dput+0x24/0x30 [ 791.454747][T16596] i2c_register_adapter+0x862/0x13f0 [ 791.454770][T16596] ? of_alias_get_id+0xb1/0x110 [ 791.454794][T16596] i801_probe.cold+0x30c/0x8bf [ 791.454817][T16596] ? __pfx_i801_probe+0x10/0x10 [ 791.454839][T16596] ? mark_held_locks+0x40/0x70 [ 791.454863][T16596] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 791.454893][T16596] ? lockdep_hardirqs_on+0x7d/0x110 [ 791.454914][T16596] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 791.454947][T16596] ? __pfx_i801_probe+0x10/0x10 [ 791.454969][T16596] local_pci_probe+0xdd/0x1b0 [ 791.455000][T16596] pci_call_probe+0x176/0x800 [ 791.455018][T16596] ? pci_match_device+0x147/0x7d0 [ 791.455044][T16596] ? __pfx_pci_call_probe+0x10/0x10 [ 791.455069][T16596] ? __pfx_pci_match_device+0x10/0x10 [ 791.455112][T16596] pci_device_probe+0x25b/0x400 [ 791.455130][T16596] ? __pfx_pci_device_probe+0x10/0x10 [ 791.455152][T16596] ? sysfs_create_link+0x68/0xc0 [ 791.455171][T16596] ? __pfx_pci_device_probe+0x10/0x10 [ 791.455188][T16596] really_probe+0x241/0xa60 [ 791.455213][T16596] __driver_probe_device+0x210/0x460 [ 791.455242][T16596] device_driver_attach+0xaa/0x230 [ 791.455267][T16596] bind_store+0x123/0x1d0 [ 791.455305][T16596] ? __pfx_bind_store+0x10/0x10 [ 791.455327][T16596] drv_attr_store+0x74/0xb0 [ 791.455346][T16596] ? __pfx_drv_attr_store+0x10/0x10 [ 791.455367][T16596] sysfs_kf_write+0xf2/0x150 [ 791.455421][T16596] kernfs_fop_write_iter+0x3e0/0x5f0 [ 791.455447][T16596] ? __pfx_sysfs_kf_write+0x10/0x10 [ 791.455478][T16596] vfs_write+0x6af/0x1050 [ 791.455502][T16596] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 791.455536][T16596] ? __pfx_vfs_write+0x10/0x10 [ 791.455559][T16596] ? find_held_lock+0x2b/0x80 [ 791.455598][T16596] ksys_write+0x12a/0x250 [ 791.455618][T16596] ? __pfx_ksys_write+0x10/0x10 [ 791.455646][T16596] __do_fast_syscall_32+0x14b/0x8c0 [ 791.455669][T16596] do_fast_syscall_32+0x32/0x70 [ 791.455690][T16596] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 791.455713][T16596] RIP: 0023:0xf7fd2fbc [ 791.455728][T16596] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 791.455747][T16596] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 791.455766][T16596] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000800005c0 [ 791.455778][T16596] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 791.455788][T16596] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 791.455800][T16596] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 791.455811][T16596] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 791.455836][T16596] [ 791.490185][T16596] acpi device:10: Failed to create link physical_node1 (-12) [ 791.664673][T16596] i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD [ 791.965438][T16606] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2292'. [ 792.061973][T16608] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1953718136 (3907436272 ns) > initial count (3906132690 ns). Using initial count to start timer. [ 792.662208][T16614] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2294'. [ 792.662221][T16614] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2294'. [ 792.662229][T16614] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 793.149425][T16625] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2297'. [ 793.149436][T16625] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2297'. [ 793.149443][T16625] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 793.989239][T16641] netlink: 'syz.6.2295': attribute type 4 has an invalid length. [ 794.003702][T16643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2302'. [ 794.146745][T16643] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1953718136 (3907436272 ns) > initial count (3906132690 ns). Using initial count to start timer. [ 794.381605][T16650] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2301'. [ 794.381623][T16650] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2301'. [ 794.381630][T16650] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 794.421556][T16649] net_ratelimit: 766 callbacks suppressed [ 794.421564][T16649] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 794.894231][T16652] netlink: 'syz.1.2303': attribute type 4 has an invalid length. [ 795.615424][ T858] usb 11-1: new high-speed USB device number 39 using dummy_hcd [ 795.754642][T16658] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2307'. [ 795.754665][T16658] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2307'. [ 795.754676][T16658] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 795.763756][ T43] kauditd_printk_skb: 13 callbacks suppressed [ 795.763770][ T43] audit: type=1326 audit(1793100075.946:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16653 comm="syz.1.2304" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fbc code=0x7ffc0000 [ 795.763799][ T43] audit: type=1326 audit(1793100075.946:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16653 comm="syz.1.2304" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fbc code=0x7ffc0000 [ 795.767971][ T43] audit: type=1326 audit(1793100075.956:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16653 comm="syz.1.2304" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd2fbc code=0x7ffc0000 [ 795.768109][ T43] audit: type=1326 audit(1793100075.956:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16653 comm="syz.1.2304" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fbc code=0x7ffc0000 [ 795.768231][ T43] audit: type=1326 audit(1793100075.956:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16653 comm="syz.1.2304" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fbc code=0x7ffc0000 [ 795.768697][ T43] audit: type=1326 audit(1793100075.956:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16653 comm="syz.1.2304" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd2fbc code=0x7ffc0000 [ 795.769022][ T43] audit: type=1326 audit(1793100075.956:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16653 comm="syz.1.2304" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fbc code=0x7ffc0000 [ 795.769162][ T43] audit: type=1326 audit(1793100075.956:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16653 comm="syz.1.2304" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fbc code=0x7ffc0000 [ 795.772139][ T43] audit: type=1326 audit(1793100075.956:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16653 comm="syz.1.2304" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd2fbc code=0x7ffc0000 [ 795.772429][ T43] audit: type=1326 audit(1793100075.956:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16653 comm="syz.1.2304" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fbc code=0x7ffc0000 [ 795.819782][ T858] usb 11-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 795.838063][ T858] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 795.838128][ T858] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.848331][ T858] keyspan 11-1:1.0: Keyspan 2 port adapter converter detected [ 795.848521][ T858] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 81 [ 795.848585][ T858] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 1 [ 795.876089][ T858] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 84 [ 795.876138][ T858] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 2 [ 795.877291][ T858] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 795.879767][ T858] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 88 [ 795.879808][ T858] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 6 [ 795.884047][ T858] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 797.970112][T16687] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2312'. [ 797.970122][T16687] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2312'. [ 797.970129][T16687] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 798.349153][T16689] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2313'. [ 798.468937][ T50] usb 11-1: USB disconnect, device number 39 [ 798.475694][ T50] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 798.521350][ T50] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 798.522517][ T50] keyspan 11-1:1.0: device disconnected [ 799.299195][T16705] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2317'. [ 799.508855][T16700] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.563334][T16698] netlink: 'syz.1.2314': attribute type 4 has an invalid length. [ 799.685856][ C2] net_ratelimit: 707 callbacks suppressed [ 799.876264][T16702] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.958096][T16702] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.040961][T16716] netlink: 'syz.6.2315': attribute type 4 has an invalid length. [ 800.082795][T16702] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.355778][ T13] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.365883][ T5832] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.365924][ T5832] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.365954][ T5832] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.473213][T16729] macvlan0: left promiscuous mode [ 801.729475][T16729] gretap1: left promiscuous mode [ 801.941085][ T5832] ip6_tunnel: M xmit: Local address not yet configured! [ 801.941415][ T5832] ip6_tunnel: M xmit: Local address not yet configured! [ 801.965617][ T1031] ip6_tunnel: M xmit: Local address not yet configured! [ 801.986324][ T1031] ip6_tunnel: M xmit: Local address not yet configured! [ 802.035879][ T1031] ip6_tunnel: M xmit: Local address not yet configured! [ 802.163116][T16739] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2323'. [ 802.354366][T16748] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1953718136 (3907436272 ns) > initial count (3906132690 ns). Using initial count to start timer. [ 802.382291][T16747] hd3ss3220 0-0004: supply vdd5 not found, using dummy regulator [ 802.393304][T16747] hd3ss3220 0-0004: supply vcc33 not found, using dummy regulator [ 802.408287][T16747] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x04 [ 802.416233][T16747] i2c i2c-0: delete_device: Can't find device in list [ 802.681812][T16753] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2325'. [ 802.744761][T16753] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1635021663 (3270043326 ns) > initial count (1089000154 ns). Using initial count to start timer. [ 802.802225][T16755] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2324'. [ 802.802241][T16755] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2324'. [ 802.802249][T16755] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 802.849953][T16757] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2326'. [ 802.897276][T16757] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1953718136 (3907436272 ns) > initial count (3906132690 ns). Using initial count to start timer. [ 803.358203][ T50] ip6_tunnel: M xmit: Local address not yet configured! [ 804.168141][ T50] ip6_tunnel: M xmit: Local address not yet configured! [ 804.820084][T16774] netlink: 'syz.5.2327': attribute type 4 has an invalid length. [ 804.989391][T16778] netlink: 'syz.1.2329': attribute type 4 has an invalid length. [ 805.596299][T10457] net_ratelimit: 624 callbacks suppressed [ 805.817243][T16781] fuse: Bad value for 'fd' [ 805.915560][ C3] ip6_tunnel: M xmit: Local address not yet configured! [ 806.887383][T16795] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2334'. [ 807.033314][T16795] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1953718136 (3907436272 ns) > initial count (3906132690 ns). Using initial count to start timer. [ 807.279922][T16803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2335'. [ 807.343160][T16806] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2338'. [ 807.423622][T16809] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 807.424831][T16809] i2c i2c-0: delete_device: Can't find device in list [ 807.489663][T16808] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1935636577 (3871273154 ns) > initial count (3537556184 ns). Using initial count to start timer. [ 807.896761][T16806] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1953718136 (3907436272 ns) > initial count (3906132690 ns). Using initial count to start timer. [ 808.157252][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.604150][ T7071] ip6_tunnel: M xmit: Local address not yet configured! [ 808.635640][T11995] usb 11-1: new high-speed USB device number 40 using dummy_hcd [ 808.805428][T11995] usb 11-1: Using ep0 maxpacket: 8 [ 808.806035][T11995] usb 11-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 808.807003][T11995] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 808.807036][T11995] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.812870][T11995] usb 11-1: config 0 descriptor?? [ 809.024519][T11995] iowarrior 11-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 809.138434][ T7071] ip6_tunnel: M xmit: Local address not yet configured! [ 809.215364][T16828] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2341'. [ 809.215377][T16828] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2341'. [ 809.215383][T16828] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 809.463837][T16830] netlink: 'syz.7.2343': attribute type 4 has an invalid length. [ 809.641643][T11534] usb 11-1: USB disconnect, device number 40 [ 810.233120][T16843] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2347'. [ 810.340211][T16843] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1953718136 (3907436272 ns) > initial count (3906132690 ns). Using initial count to start timer. [ 810.514715][T16854] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2348'. [ 810.541264][T16839] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.601783][T16854] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1953718136 (3907436272 ns) > initial count (3906132690 ns). Using initial count to start timer. [ 810.848365][T16859] netlink: 'syz.6.2349': attribute type 2 has an invalid length. [ 810.868091][T16859] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2349'. [ 811.082769][T16866] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2350'. [ 811.100014][T16866] net_ratelimit: 1441 callbacks suppressed [ 811.188786][T16846] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.335037][T16875] fuse: Bad value for 'fd' [ 811.341287][T16867] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1953718136 (3907436272 ns) > initial count (3906132690 ns). Using initial count to start timer. [ 811.684779][T16879] e1000e 0000:00:02.0: resetting [ 811.875990][T16879] e1000e 0000:00:02.0: reset done [ 814.432903][T16846] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.555600][ C3] ip6_tunnel: M xmit: Local address not yet configured! [ 814.609479][T16846] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.801975][T16891] netlink: 'syz.6.2353': attribute type 4 has an invalid length. [ 814.936010][ T6614] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.951220][T16892] xt_SECMARK: invalid mode: 0 [ 815.245570][ T5832] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.245598][ T5832] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.255487][ T5832] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.386490][T16898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2357'. [ 815.791581][T16898] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1953718136 (3907436272 ns) > initial count (3906132690 ns). Using initial count to start timer. [ 816.395564][ C2] net_ratelimit: 724 callbacks suppressed [ 818.845597][T11533] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 818.996816][T11533] usb 6-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 818.999444][T11533] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 818.999479][T11533] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.137232][T11533] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 819.137353][T11533] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 819.137392][T11533] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 819.138077][T11533] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 819.138118][T11533] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 819.156353][T11533] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 819.157349][T11533] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 819.157406][T11533] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 819.296517][T11533] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 821.595564][T10469] net_ratelimit: 130 callbacks suppressed [ 821.650157][ T7071] usb 6-1: USB disconnect, device number 39 [ 821.659250][ T7071] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 821.670642][ T7071] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 821.671785][ T7071] keyspan 6-1:1.0: device disconnected [ 821.721478][T16958] fuse: Bad value for 'fd' [ 821.723181][T16962] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2364'. [ 821.803631][T16962] i801_smbus 0000:00:1f.3: SMBus using PCI interrupt [ 821.831664][T16962] FAULT_INJECTION: forcing a failure. [ 821.831664][T16962] name failslab, interval 1, probability 0, space 0, times 0 [ 821.831688][T16962] CPU: 2 UID: 0 PID: 16962 Comm: syz.7.2364 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 821.831721][T16962] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 821.831729][T16962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 821.831737][T16962] Call Trace: [ 821.831742][T16962] [ 821.831748][T16962] dump_stack_lvl+0x100/0x190 [ 821.831771][T16962] should_fail_ex.cold+0x5/0xa [ 821.831790][T16962] should_failslab+0xc2/0x120 [ 821.831811][T16962] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 821.831828][T16962] ? __pfx_stack_trace_save+0x10/0x10 [ 821.831848][T16962] ? kstrdup_const+0x63/0x80 [ 821.831866][T16962] kstrdup+0x51/0xe0 [ 821.831878][T16962] kstrdup_const+0x63/0x80 [ 821.831892][T16962] __kernfs_new_node+0x9b/0xa10 [ 821.831915][T16962] ? device_driver_attach+0xaa/0x230 [ 821.831957][T16962] ? __pfx___kernfs_new_node+0x10/0x10 [ 821.831975][T16962] ? lock_acquire+0x1d1/0x380 [ 821.831987][T16962] ? kernfs_root+0x23/0x2a0 [ 821.832015][T16962] ? find_held_lock+0x2b/0x80 [ 821.832032][T16962] ? kernfs_root+0xee/0x2a0 [ 821.832045][T16962] ? kernfs_root+0xee/0x2a0 [ 821.832062][T16962] kernfs_new_node+0x194/0x200 [ 821.832081][T16962] ? __pfx_kernfs_new_node+0x10/0x10 [ 821.832096][T16962] ? kernfs_create_link+0xe4/0x280 [ 821.832113][T16962] ? kernfs_create_link+0xe4/0x280 [ 821.832135][T16962] kernfs_create_link+0x100/0x280 [ 821.832154][T16962] sysfs_do_create_link_sd+0x90/0x140 [ 821.832169][T16962] sysfs_create_link+0x61/0xc0 [ 821.832182][T16962] acpi_bind_one+0x4b4/0x650 [ 821.832201][T16962] ? __pfx_acpi_bind_one+0x10/0x10 [ 821.832220][T16962] ? lockdep_init_map_type+0x5c/0x250 [ 821.832236][T16962] acpi_device_notify+0x50/0x510 [ 821.832253][T16962] device_add+0x2b4/0x1970 [ 821.832268][T16962] ? __pfx_device_add+0x10/0x10 [ 821.832279][T16962] ? __pfx_idr_replace+0x10/0x10 [ 821.832295][T16962] ? dput.part.0+0x4a/0x240 [ 821.832309][T16962] ? dput+0x24/0x30 [ 821.832325][T16962] i2c_register_adapter+0x862/0x13f0 [ 821.832355][T16962] ? of_alias_get_id+0xb1/0x110 [ 821.832385][T16962] i801_probe.cold+0x30c/0x8bf [ 821.832405][T16962] ? __pfx_i801_probe+0x10/0x10 [ 821.832434][T16962] ? mark_held_locks+0x40/0x70 [ 821.832453][T16962] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 821.832475][T16962] ? lockdep_hardirqs_on+0x7d/0x110 [ 821.832489][T16962] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 821.832513][T16962] ? __pfx_i801_probe+0x10/0x10 [ 821.832528][T16962] local_pci_probe+0xdd/0x1b0 [ 821.832550][T16962] pci_call_probe+0x176/0x800 [ 821.832562][T16962] ? pci_match_device+0x147/0x7d0 [ 821.832582][T16962] ? __pfx_pci_call_probe+0x10/0x10 [ 821.832599][T16962] ? __pfx_pci_match_device+0x10/0x10 [ 821.832627][T16962] pci_device_probe+0x25b/0x400 [ 821.832639][T16962] ? __pfx_pci_device_probe+0x10/0x10 [ 821.832657][T16962] ? sysfs_create_link+0x68/0xc0 [ 821.832670][T16962] ? __pfx_pci_device_probe+0x10/0x10 [ 821.832683][T16962] really_probe+0x241/0xa60 [ 821.832703][T16962] __driver_probe_device+0x210/0x460 [ 821.832724][T16962] device_driver_attach+0xaa/0x230 [ 821.832744][T16962] bind_store+0x123/0x1d0 [ 821.832757][T16962] ? __pfx_bind_store+0x10/0x10 [ 821.832772][T16962] drv_attr_store+0x74/0xb0 [ 821.832786][T16962] ? __pfx_drv_attr_store+0x10/0x10 [ 821.832799][T16962] sysfs_kf_write+0xf2/0x150 [ 821.832818][T16962] kernfs_fop_write_iter+0x3e0/0x5f0 [ 821.832835][T16962] ? __pfx_sysfs_kf_write+0x10/0x10 [ 821.832855][T16962] vfs_write+0x6af/0x1050 [ 821.832872][T16962] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 821.832890][T16962] ? __pfx_vfs_write+0x10/0x10 [ 821.832912][T16962] ? find_held_lock+0x2b/0x80 [ 821.832942][T16962] ksys_write+0x12a/0x250 [ 821.832960][T16962] ? __pfx_ksys_write+0x10/0x10 [ 821.832983][T16962] __do_fast_syscall_32+0x14b/0x8c0 [ 821.833002][T16962] do_fast_syscall_32+0x32/0x70 [ 821.833018][T16962] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 821.833035][T16962] RIP: 0023:0xf7f22fbc [ 821.833047][T16962] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 821.833059][T16962] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 821.833073][T16962] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000800005c0 [ 821.833081][T16962] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 821.833089][T16962] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 821.833096][T16962] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 821.833103][T16962] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 821.833122][T16962] [ 821.835472][T16962] acpi device:10: Failed to create link physical_node1 (-12) [ 822.196736][T16962] i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD [ 822.306205][T16963] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.745998][T16963] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.229101][T16963] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.291953][T16973] hd3ss3220 0-0004: supply vdd5 not found, using dummy regulator [ 824.311298][T16973] hd3ss3220 0-0004: supply vcc33 not found, using dummy regulator [ 824.364186][T16973] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x04 [ 824.574413][T16963] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.835483][ T12] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.835505][ T12] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.887435][ T5832] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.887460][ T5832] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.081467][T16986] fuse: Bad value for 'fd' [ 826.297992][T16984] xt_connbytes: Forcing CT accounting to be enabled [ 826.298007][T16984] xt_SECMARK: invalid mode: 0 [ 826.561498][T17002] sctp_transport_update_pmtu: 40 callbacks suppressed [ 826.561530][T17002] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 826.562484][T17002] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 826.563602][T17002] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 826.564591][T17002] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 826.585675][T17002] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 826.591343][T17002] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 826.592365][T17002] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 826.594629][T17002] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 826.607483][T17002] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 826.612882][T17002] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 826.635489][ C2] net_ratelimit: 132 callbacks suppressed [ 827.595601][ T50] usb 11-1: new high-speed USB device number 41 using dummy_hcd [ 827.784149][ T50] usb 11-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 827.786076][ T50] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 827.786115][ T50] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.801499][ T50] keyspan 11-1:1.0: Keyspan 2 port adapter converter detected [ 827.801700][ T50] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 81 [ 827.801758][ T50] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 1 [ 827.811599][ T50] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 84 [ 827.811665][ T50] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 2 [ 827.816666][ T50] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 827.818828][ T50] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 88 [ 827.818895][ T50] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 6 [ 827.825525][ T50] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 827.936067][T17008] all (unregistering): Released all slaves [ 828.635830][ C3] ip6_tunnel: M xmit: Local address not yet configured! [ 830.261292][T17029] warn_alloc: 1 callbacks suppressed [ 830.261313][T17029] syz.7.2378: page allocation failure: order:2, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 830.261426][T17029] CPU: 2 UID: 0 PID: 17029 Comm: syz.7.2378 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 830.261456][T17029] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 830.261464][T17029] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 830.261477][T17029] Call Trace: [ 830.261486][T17029] [ 830.261497][T17029] dump_stack_lvl+0x100/0x190 [ 830.261530][T17029] warn_alloc.cold+0x9e/0xb2 [ 830.261554][T17029] ? __pfx_warn_alloc+0x10/0x10 [ 830.261584][T17029] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 830.261609][T17029] ? __pfx_get_page_from_freelist+0x10/0x10 [ 830.261655][T17029] __alloc_frozen_pages_noprof+0x17ab/0x3190 [ 830.261689][T17029] ? kernel_text_address+0x90/0x100 [ 830.261722][T17029] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 830.261751][T17029] ? stack_trace_save+0x8e/0xc0 [ 830.261793][T17029] ? kasan_save_track+0x14/0x30 [ 830.261817][T17029] ? __kasan_kmalloc+0xaa/0xb0 [ 830.261836][T17029] ? __kmalloc_noprof+0x32f/0x840 [ 830.261855][T17029] ? comedi_isadma_alloc+0xc6/0x620 [ 830.261896][T17029] ? pcl816_attach+0x909/0xb30 [ 830.261953][T17029] alloc_pages_node_noprof+0x93/0x200 [ 830.261977][T17029] ? __pfx_alloc_pages_node_noprof+0x10/0x10 [ 830.262006][T17029] alloc_pages_exact_nid_noprof+0x32/0xe0 [ 830.262028][T17029] __dma_direct_alloc_pages.isra.0+0x34e/0x510 [ 830.262057][T17029] ? dma_alloc_from_dev_coherent+0x2e0/0x570 [ 830.262091][T17029] dma_direct_alloc+0x3d1/0x8a0 [ 830.262122][T17029] dma_alloc_attrs+0x1b9/0x3e0 [ 830.262148][T17029] ? __pfx_dma_alloc_attrs+0x10/0x10 [ 830.262171][T17029] ? __kmalloc_noprof+0x350/0x840 [ 830.262195][T17029] ? dma_direct_supported+0xca/0x220 [ 830.262228][T17029] comedi_isadma_alloc+0x331/0x620 [ 830.262254][T17029] ? __pfx_comedi_isadma_alloc+0x10/0x10 [ 830.262278][T17029] ? request_threaded_irq+0x27b/0x3e0 [ 830.262311][T17029] pcl816_attach+0x909/0xb30 [ 830.262343][T17029] comedi_device_attach+0x40e/0x6b0 [ 830.262386][T17029] do_devconfig_ioctl+0x1b3/0x6d0 [ 830.262406][T17029] ? comedi_unlocked_ioctl+0x180/0x3310 [ 830.262431][T17029] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 830.262461][T17029] ? tomoyo_path_number_perm+0x46d/0x580 [ 830.262489][T17029] ? kasan_save_stack+0x3f/0x50 [ 830.262514][T17029] ? kasan_save_stack+0x30/0x50 [ 830.262537][T17029] ? kasan_save_track+0x14/0x30 [ 830.262562][T17029] ? kasan_save_free_info+0x3b/0x70 [ 830.262588][T17029] comedi_unlocked_ioctl+0x860/0x3310 [ 830.262618][T17029] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 830.262663][T17029] ? kasan_quarantine_put+0x104/0x240 [ 830.262687][T17029] ? lockdep_hardirqs_on+0x7d/0x110 [ 830.262709][T17029] ? find_held_lock+0x2b/0x80 [ 830.262734][T17029] ? tomoyo_path_number_perm+0x28f/0x580 [ 830.262762][T17029] ? tomoyo_path_number_perm+0x28f/0x580 [ 830.262794][T17029] ? tomoyo_path_number_perm+0x188/0x580 [ 830.262827][T17029] comedi_compat_ioctl+0x438/0xe20 [ 830.262854][T17029] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 830.262878][T17029] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 830.262900][T17029] ? do_vfs_ioctl+0x226/0x13e0 [ 830.262926][T17029] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 830.262954][T17029] ? __fget_files+0x34/0x3d0 [ 830.262979][T17029] ? find_held_lock+0x2b/0x80 [ 830.263001][T17029] ? __fget_files+0x215/0x3d0 [ 830.263026][T17029] ? hook_file_ioctl_common+0x140/0x440 [ 830.263061][T17029] ? __fget_files+0x21f/0x3d0 [ 830.263094][T17029] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 830.263117][T17029] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 830.263144][T17029] __do_fast_syscall_32+0x14b/0x8c0 [ 830.263169][T17029] ? lockdep_hardirqs_on+0x7d/0x110 [ 830.263191][T17029] do_fast_syscall_32+0x32/0x70 [ 830.263214][T17029] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 830.263263][T17029] RIP: 0023:0xf7f22fbc [ 830.263280][T17029] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 830.263298][T17029] RSP: 002b:00000000f539450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 830.263317][T17029] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000040946400 [ 830.263331][T17029] RDX: 0000000080000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 830.263341][T17029] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 830.263351][T17029] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 830.263368][T17029] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 830.263396][T17029] [ 830.353324][ T50] usb 11-1: USB disconnect, device number 41 [ 830.386845][ T50] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 830.447256][T17029] Mem-Info: [ 830.447269][T17029] active_anon:1143 inactive_anon:1015 isolated_anon:0 [ 830.447269][T17029] active_file:5605 inactive_file:15660 isolated_file:0 [ 830.447269][T17029] unevictable:0 dirty:424 writeback:0 [ 830.447269][T17029] slab_reclaimable:6843 slab_unreclaimable:64889 [ 830.447269][T17029] mapped:25023 shmem:9 pagetables:2359 [ 830.447269][T17029] sec_pagetables:340 bounce:0 [ 830.447269][T17029] kernel_misc_reclaimable:0 [ 830.447269][T17029] free:32006 free_pcp:0 free_cma:0 [ 830.447297][T17029] Node 0 active_anon:0kB inactive_anon:92kB active_file:124kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7872kB pagetables:1100kB sec_pagetables:1128kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 830.447326][T17029] Node 0 DMA free:2688kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 830.447395][T17029] lowmem_reserve[]: 0 256 256 256 256 [ 830.447417][T17029] Node 0 DMA: 116*4kB (UM) 12*8kB (UM) 3*16kB (UM) 17*32kB (U) 6*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2688kB [ 830.447493][T17029] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 830.447502][T17029] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 830.447510][T17029] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 830.447518][T17029] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 830.447527][T17029] 22536 total pagecache pages [ 830.447531][T17029] 1264 pages in swap cache [ 830.447535][T17029] Free swap = 88664kB [ 830.447539][T17029] Total swap = 124996kB [ 830.447544][T17029] 524155 pages RAM [ 830.447547][T17029] 0 pages HighMem/MovableOnly [ 830.447551][T17029] 217545 pages reserved [ 830.447555][T17029] 0 pages cma reserved [ 831.205493][ C3] ip6_tunnel: M xmit: Local address not yet configured! [ 831.571273][ T50] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 831.572886][ T50] keyspan 11-1:1.0: device disconnected [ 831.755468][ C0] net_ratelimit: 87 callbacks suppressed [ 832.612778][T17047] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16) [ 832.620356][T17047] i2c i2c-0: delete_device: Can't find device in list [ 833.457088][T17052] netlink: 'syz.1.2384': attribute type 4 has an invalid length. [ 834.646828][ T7071] usb 11-1: new high-speed USB device number 42 using dummy_hcd [ 835.153317][ T7071] usb 11-1: Using ep0 maxpacket: 32 [ 835.154123][ T7071] usb 11-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 835.155226][ T7071] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 835.155249][ T7071] usb 11-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 835.728696][ T7071] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.728707][ T7071] usb 11-1: Product: syz [ 835.728715][ T7071] usb 11-1: Manufacturer: syz [ 835.728723][ T7071] usb 11-1: SerialNumber: syz [ 835.730444][ T7071] usb 11-1: config 0 descriptor?? [ 836.949622][T17083] net_ratelimit: 69 callbacks suppressed [ 837.067732][T17086] sctp_transport_update_pmtu: 39 callbacks suppressed [ 837.067777][T17086] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 837.070400][T17086] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 837.073406][T17086] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 837.075260][T17086] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 837.089669][T17086] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 837.092447][T17086] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 837.094422][T17086] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 837.099436][T17086] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 837.102224][T17086] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 837.104054][T17086] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 837.333222][ T1031] usb 11-1: USB disconnect, device number 42 [ 838.137179][T17089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2399'. [ 839.671780][T17116] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2395'. [ 839.671844][T17116] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2395'. [ 839.671896][T17116] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 840.176149][T17119] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 842.075379][ C0] net_ratelimit: 437 callbacks suppressed [ 842.434919][T17132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2400'. [ 843.703504][T17141] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2402'. [ 843.845240][T17141] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1953718136 (3907436272 ns) > initial count (3906132690 ns). Using initial count to start timer. [ 845.648092][T17169] warn_alloc: 1 callbacks suppressed [ 845.648112][T17169] syz.6.2406: page allocation failure: order:2, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 845.648170][T17169] CPU: 2 UID: 0 PID: 17169 Comm: syz.6.2406 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 845.648198][T17169] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 845.648207][T17169] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 845.648219][T17169] Call Trace: [ 845.648226][T17169] [ 845.648234][T17169] dump_stack_lvl+0x100/0x190 [ 845.648267][T17169] warn_alloc.cold+0x9e/0xb2 [ 845.648290][T17169] ? __pfx_warn_alloc+0x10/0x10 [ 845.648321][T17169] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 845.648345][T17169] ? __pfx_get_page_from_freelist+0x10/0x10 [ 845.648376][T17169] __alloc_frozen_pages_noprof+0x17ab/0x3190 [ 845.648409][T17169] ? kernel_text_address+0x90/0x100 [ 845.648443][T17169] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 845.648473][T17169] ? stack_trace_save+0x8e/0xc0 [ 845.648508][T17169] ? do_raw_write_lock+0x11e/0x260 [ 845.648536][T17169] ? kasan_save_track+0x14/0x30 [ 845.648561][T17169] ? __kasan_kmalloc+0xaa/0xb0 [ 845.648585][T17169] ? __kmalloc_noprof+0x32f/0x840 [ 845.648607][T17169] ? comedi_isadma_alloc+0xc6/0x620 [ 845.648628][T17169] ? pcl816_attach+0x909/0xb30 [ 845.648671][T17169] alloc_pages_node_noprof+0x93/0x200 [ 845.648700][T17169] ? __pfx_alloc_pages_node_noprof+0x10/0x10 [ 845.648732][T17169] alloc_pages_exact_nid_noprof+0x32/0xe0 [ 845.648760][T17169] __dma_direct_alloc_pages.isra.0+0x34e/0x510 [ 845.648788][T17169] ? dma_alloc_from_dev_coherent+0x2e0/0x570 [ 845.648823][T17169] dma_direct_alloc+0x3d1/0x8a0 [ 845.648852][T17169] dma_alloc_attrs+0x1b9/0x3e0 [ 845.648879][T17169] ? __pfx_dma_alloc_attrs+0x10/0x10 [ 845.648903][T17169] ? __kmalloc_noprof+0x350/0x840 [ 845.648926][T17169] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 845.648957][T17169] ? dma_direct_supported+0xca/0x220 [ 845.648991][T17169] comedi_isadma_alloc+0x331/0x620 [ 845.649034][T17169] ? __pfx_comedi_isadma_alloc+0x10/0x10 [ 845.649058][T17169] ? request_threaded_irq+0x27b/0x3e0 [ 845.649093][T17169] pcl816_attach+0x909/0xb30 [ 845.649124][T17169] comedi_device_attach+0x40e/0x6b0 [ 845.649159][T17169] do_devconfig_ioctl+0x1b3/0x6d0 [ 845.649179][T17169] ? comedi_unlocked_ioctl+0x180/0x3310 [ 845.649205][T17169] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 845.649239][T17169] ? tomoyo_path_number_perm+0x46d/0x580 [ 845.649269][T17169] ? kasan_save_stack+0x3f/0x50 [ 845.649292][T17169] ? kasan_save_stack+0x30/0x50 [ 845.649315][T17169] ? kasan_save_track+0x14/0x30 [ 845.649338][T17169] ? kasan_save_free_info+0x3b/0x70 [ 845.649364][T17169] comedi_unlocked_ioctl+0x860/0x3310 [ 845.649397][T17169] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 845.649444][T17169] ? kasan_quarantine_put+0x104/0x240 [ 845.649469][T17169] ? lockdep_hardirqs_on+0x7d/0x110 [ 845.649492][T17169] ? find_held_lock+0x2b/0x80 [ 845.649516][T17169] ? tomoyo_path_number_perm+0x28f/0x580 [ 845.649543][T17169] ? tomoyo_path_number_perm+0x28f/0x580 [ 845.649576][T17169] ? tomoyo_path_number_perm+0x188/0x580 [ 845.649610][T17169] comedi_compat_ioctl+0x438/0xe20 [ 845.649636][T17169] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 845.649662][T17169] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 845.649691][T17169] ? do_vfs_ioctl+0x226/0x13e0 [ 845.649716][T17169] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 845.649745][T17169] ? __fget_files+0x34/0x3d0 [ 845.649773][T17169] ? find_held_lock+0x2b/0x80 [ 845.649796][T17169] ? __fget_files+0x215/0x3d0 [ 845.649821][T17169] ? hook_file_ioctl_common+0x140/0x440 [ 845.649856][T17169] ? __fget_files+0x21f/0x3d0 [ 845.649888][T17169] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 845.649913][T17169] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 845.649942][T17169] __do_fast_syscall_32+0x14b/0x8c0 [ 845.649964][T17169] ? lockdep_hardirqs_on+0x7d/0x110 [ 845.649987][T17169] do_fast_syscall_32+0x32/0x70 [ 845.650010][T17169] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 845.650035][T17169] RIP: 0023:0xf746efbc [ 845.650052][T17169] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 845.650070][T17169] RSP: 002b:00000000f544450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 845.650089][T17169] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000040946400 [ 845.650102][T17169] RDX: 0000000080000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 845.650114][T17169] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 845.650125][T17169] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 845.650136][T17169] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 845.650163][T17169] [ 845.656094][T17169] Mem-Info: [ 845.656106][T17169] active_anon:2524 inactive_anon:588 isolated_anon:0 [ 845.656106][T17169] active_file:2259 inactive_file:19456 isolated_file:0 [ 845.656106][T17169] unevictable:0 dirty:678 writeback:0 [ 845.656106][T17169] slab_reclaimable:6801 slab_unreclaimable:64917 [ 845.656106][T17169] mapped:23379 shmem:1176 pagetables:2325 [ 845.656106][T17169] sec_pagetables:340 bounce:0 [ 845.656106][T17169] kernel_misc_reclaimable:0 [ 845.656106][T17169] free:27763 free_pcp:0 free_cma:0 [ 845.766623][T17169] Node 0 active_anon:0kB inactive_anon:96kB active_file:104kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176kB dirty:20kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7872kB pagetables:1100kB sec_pagetables:1128kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 845.766656][T17169] Node 0 DMA free:2688kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 845.766687][T17169] lowmem_reserve[]: 0 256 256 256 256 [ 845.766707][T17169] Node 0 DMA: 116*4kB (UM) 12*8kB (UM) 3*16kB (UM) 17*32kB (U) 6*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2688kB [ 845.766824][T17169] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 845.766834][T17169] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 845.766842][T17169] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 845.766851][T17169] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 845.766859][T17169] 24149 total pagecache pages [ 845.766864][T17169] 1280 pages in swap cache [ 845.766867][T17169] Free swap = 88508kB [ 845.766872][T17169] Total swap = 124996kB [ 845.766876][T17169] 524155 pages RAM [ 845.766880][T17169] 0 pages HighMem/MovableOnly [ 845.766884][T17169] 217545 pages reserved [ 845.766887][T17169] 0 pages cma reserved [ 847.073813][T17194] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2411'. [ 847.115402][ C2] net_ratelimit: 852 callbacks suppressed [ 847.373339][T17194] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1953718136 (3907436272 ns) > initial count (3906132690 ns). Using initial count to start timer. [ 847.797718][T17202] netlink: 'syz.7.2408': attribute type 4 has an invalid length. [ 848.521851][T17206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 848.531555][T17206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 848.542105][T17206] bond0 (unregistering): Released all slaves [ 848.789773][T17219] netlink: 'syz.5.2412': attribute type 4 has an invalid length. [ 849.628827][T17234] all (unregistering): Released all slaves [ 851.367785][T17255] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2421'. [ 851.495591][T17255] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1953718136 (3907436272 ns) > initial count (3906132690 ns). Using initial count to start timer. [ 852.136173][T17266] netlink: 'syz.5.2423': attribute type 2 has an invalid length. [ 852.319819][T17271] fuse: Bad value for 'fd' [ 852.565388][ C2] net_ratelimit: 422 callbacks suppressed [ 852.909982][T17279] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2422'. [ 852.910066][T17279] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2422'. [ 852.910147][T17279] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 855.127150][T17306] netlink: 'syz.6.2428': attribute type 4 has an invalid length. [ 855.278344][T17310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2432'. [ 855.408705][T17310] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1953718136 (3907436272 ns) > initial count (3906132690 ns). Using initial count to start timer. [ 855.839279][T17324] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2435'. [ 855.981246][T17324] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1953718136 (3907436272 ns) > initial count (3906132690 ns). Using initial count to start timer. [ 856.201610][T17330] netlink: 'syz.5.2436': attribute type 2 has an invalid length. [ 856.630430][T17321] xt_SECMARK: invalid mode: 0 [ 857.097470][T17338] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2438'. [ 857.097482][T17338] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2438'. [ 857.097489][T17338] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 857.184474][T17343] all (unregistering): Released all slaves [ 857.925380][ C0] net_ratelimit: 638 callbacks suppressed [ 858.358973][T17353] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 858.686199][T17355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2442'. [ 858.861573][T17360] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2445'. [ 858.904182][T17355] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1635021663 (3270043326 ns) > initial count (1089000154 ns). Using initial count to start timer. [ 858.929855][T17360] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1635021663 (3270043326 ns) > initial count (1089000154 ns). Using initial count to start timer. [ 860.050847][T17389] netlink: 'syz.1.2447': attribute type 4 has an invalid length. [ 860.216112][ T43] kauditd_printk_skb: 13 callbacks suppressed [ 860.216126][ T43] audit: type=1326 audit(1793100140.406:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17357 comm="syz.5.2444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efbc code=0x7ffc0000 [ 860.216171][ T43] audit: type=1326 audit(1793100140.406:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17357 comm="syz.5.2444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efbc code=0x7ffc0000 [ 860.225364][ T43] audit: type=1326 audit(1793100140.406:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17357 comm="syz.5.2444" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf747efbc code=0x7ffc0000 [ 860.225401][ T43] audit: type=1326 audit(1793100140.406:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17357 comm="syz.5.2444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efbc code=0x7ffc0000 [ 860.225422][ T43] audit: type=1326 audit(1793100140.406:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17357 comm="syz.5.2444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efbc code=0x7ffc0000 [ 860.472906][T17394] netlink: 'syz.7.2449': attribute type 2 has an invalid length. [ 861.123365][T17404] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2450'. [ 861.123380][T17404] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2450'. [ 861.123388][T17404] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 861.524940][T17410] all (unregistering): Released all slaves [ 862.871386][T17428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2456'. [ 862.989058][T17418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 863.003451][T17418] bond0 (unregistering): Released all slaves [ 863.042867][T17428] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1635021663 (3270043326 ns) > initial count (1089000154 ns). Using initial count to start timer. [ 863.207035][T17437] net_ratelimit: 1057 callbacks suppressed [ 863.499136][T17444] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 863.502895][T17444] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2459'. [ 863.502908][T17444] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2459'. [ 863.502915][T17444] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 864.306644][T17454] netlink: 'syz.1.2461': attribute type 3 has an invalid length. [ 864.306674][T17454] netlink: 'syz.1.2461': attribute type 1 has an invalid length. [ 864.306689][T17454] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2461'. [ 864.308734][T17454] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2461'. [ 864.475940][ C3] ip6_tunnel: M xmit: Local address not yet configured! [ 866.033449][T17464] netlink: 'syz.1.2463': attribute type 4 has an invalid length. [ 868.235501][ C3] net_ratelimit: 87 callbacks suppressed [ 868.369307][T17481] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 868.913900][T17493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2467'. [ 869.602750][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.289979][ T43] audit: type=1326 audit(1793100150.476:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17498 comm="syz.6.2471" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efbc code=0x7ffc0000 [ 870.290088][ T43] audit: type=1326 audit(1793100150.476:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17498 comm="syz.6.2471" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efbc code=0x7ffc0000 [ 870.291914][ T43] audit: type=1326 audit(1793100150.476:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17498 comm="syz.6.2471" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf746efbc code=0x7ffc0000 [ 870.291940][ T43] audit: type=1326 audit(1793100150.476:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17498 comm="syz.6.2471" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efbc code=0x7ffc0000 [ 870.291961][ T43] audit: type=1326 audit(1793100150.476:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17498 comm="syz.6.2471" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efbc code=0x7ffc0000 [ 870.292570][ T43] audit: type=1326 audit(1793100150.476:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17498 comm="syz.6.2471" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf746efbc code=0x7ffc0000 [ 870.292594][ T43] audit: type=1326 audit(1793100150.476:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17498 comm="syz.6.2471" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efbc code=0x7ffc0000 [ 870.292615][ T43] audit: type=1326 audit(1793100150.476:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17498 comm="syz.6.2471" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efbc code=0x7ffc0000 [ 870.293074][ T43] audit: type=1326 audit(1793100150.476:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17498 comm="syz.6.2471" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf746efbc code=0x7ffc0000 [ 870.293191][ T43] audit: type=1326 audit(1793100150.476:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17498 comm="syz.6.2471" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf746efbc code=0x7ffc0000 [ 872.235246][T17534] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2476'. [ 872.271959][T17536] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 872.563379][T17534] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1953718136 (3907436272 ns) > initial count (3906132690 ns). Using initial count to start timer. [ 872.838539][T17541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2478'. [ 873.308302][T17541] net_ratelimit: 803 callbacks suppressed [ 875.837649][T17562] netlink: 'syz.1.2482': attribute type 4 has an invalid length. [ 877.978741][T17582] ubi0: attaching mtd0 [ 878.019092][T17582] ubi0: scanning is finished [ 878.019216][T17582] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 878.227121][T17595] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 878.614354][T10458] net_ratelimit: 225 callbacks suppressed [ 878.719396][T17582] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 879.835572][ C3] ip6_tunnel: M xmit: Local address not yet configured! [ 879.851746][T17604] Invalid ELF header magic: != ELF [ 880.230781][T17612] FAULT_INJECTION: forcing a failure. [ 880.230781][T17612] name failslab, interval 1, probability 0, space 0, times 0 [ 880.230804][T17612] CPU: 0 UID: 0 PID: 17612 Comm: syz.1.2492 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 880.230823][T17612] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 880.230828][T17612] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 880.230835][T17612] Call Trace: [ 880.230840][T17612] [ 880.230845][T17612] dump_stack_lvl+0x100/0x190 [ 880.230866][T17612] should_fail_ex.cold+0x5/0xa [ 880.230883][T17612] should_failslab+0xc2/0x120 [ 880.230901][T17612] kmem_cache_alloc_noprof+0x92/0x6a0 [ 880.230916][T17612] ? do_epoll_ctl_file+0x1445/0x36e0 [ 880.230928][T17612] ? do_epoll_ctl_file+0xccf/0x36e0 [ 880.230944][T17612] do_epoll_ctl_file+0xccf/0x36e0 [ 880.230962][T17612] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 880.230975][T17612] ? lock_acquire+0x1d1/0x380 [ 880.231008][T17612] ? __fget_files+0x34/0x3d0 [ 880.231025][T17612] ? find_held_lock+0x2b/0x80 [ 880.231043][T17612] ? __fget_files+0x215/0x3d0 [ 880.231064][T17612] ? __fget_files+0x21f/0x3d0 [ 880.231084][T17612] ? do_epoll_ctl+0xfd/0x1a0 [ 880.231096][T17612] do_epoll_ctl+0xfd/0x1a0 [ 880.231108][T17612] ? __pfx_do_epoll_ctl+0x10/0x10 [ 880.231129][T17612] __ia32_sys_epoll_ctl+0x15b/0x1e0 [ 880.231142][T17612] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 880.231160][T17612] __do_fast_syscall_32+0x14b/0x8c0 [ 880.231177][T17612] do_fast_syscall_32+0x32/0x70 [ 880.231191][T17612] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 880.231205][T17612] RIP: 0023:0xf7fd2fbc [ 880.231215][T17612] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 880.231225][T17612] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 00000000000000ff [ 880.231237][T17612] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000000001 [ 880.231244][T17612] RDX: 0000000000000007 RSI: 0000000080000380 RDI: 0000000000000000 [ 880.231252][T17612] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 880.231258][T17612] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 880.231265][T17612] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 880.231281][T17612] [ 880.886119][T17623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2496'. [ 881.400777][T17623] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1953718136 (3907436272 ns) > initial count (3906132690 ns). Using initial count to start timer. [ 881.761381][T17618] all (unregistering): Released all slaves [ 881.854558][T17619] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2495'. [ 882.847619][T17646] tmpfs: Unknown parameter 'usrquotaû©Ò))9‡c>¶Pc°˜‚qt9¿òœ§`ÎÌ' [ 883.675910][T10456] net_ratelimit: 439 callbacks suppressed [ 887.177722][ T43] kauditd_printk_skb: 276 callbacks suppressed [ 887.177731][ T43] audit: type=1326 audit(1793100167.366:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17670 comm="syz.7.2504" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fbc code=0x7ffc0000 [ 887.177771][ T43] audit: type=1326 audit(1793100167.366:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17670 comm="syz.7.2504" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fbc code=0x7ffc0000 [ 887.180865][ T43] audit: type=1326 audit(1793100167.366:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17670 comm="syz.7.2504" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf7f22fbc code=0x7ffc0000 [ 887.181056][ T43] audit: type=1326 audit(1793100167.366:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17670 comm="syz.7.2504" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fbc code=0x7ffc0000 [ 887.181199][ T43] audit: type=1326 audit(1793100167.366:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17670 comm="syz.7.2504" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fbc code=0x7ffc0000 [ 888.096215][T17684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 888.127965][T17684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 888.139850][T17684] bond0 (unregistering): Released all slaves [ 888.799059][T10587] net_ratelimit: 128 callbacks suppressed [ 889.590497][T17726] syz.6.2513: page allocation failure: order:2, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 889.590542][T17726] CPU: 3 UID: 0 PID: 17726 Comm: syz.6.2513 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 889.590559][T17726] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 889.590564][T17726] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 889.590570][T17726] Call Trace: [ 889.590575][T17726] [ 889.590580][T17726] dump_stack_lvl+0x100/0x190 [ 889.590600][T17726] warn_alloc.cold+0x9e/0xb2 [ 889.590613][T17726] ? __pfx_warn_alloc+0x10/0x10 [ 889.590631][T17726] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 889.590645][T17726] ? __pfx_get_page_from_freelist+0x10/0x10 [ 889.590663][T17726] __alloc_frozen_pages_noprof+0x17ab/0x3190 [ 889.590682][T17726] ? kernel_text_address+0x90/0x100 [ 889.590701][T17726] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 889.590718][T17726] ? stack_trace_save+0x8e/0xc0 [ 889.590738][T17726] ? do_raw_write_lock+0x11e/0x260 [ 889.590754][T17726] ? kasan_save_track+0x14/0x30 [ 889.590769][T17726] ? __kasan_kmalloc+0xaa/0xb0 [ 889.590782][T17726] ? __kmalloc_noprof+0x32f/0x840 [ 889.590796][T17726] ? comedi_isadma_alloc+0xc6/0x620 [ 889.590808][T17726] ? pcl816_attach+0x909/0xb30 [ 889.590831][T17726] alloc_pages_node_noprof+0x93/0x200 [ 889.590845][T17726] ? __pfx_alloc_pages_node_noprof+0x10/0x10 [ 889.590862][T17726] alloc_pages_exact_nid_noprof+0x32/0xe0 [ 889.590877][T17726] __dma_direct_alloc_pages.isra.0+0x34e/0x510 [ 889.590894][T17726] ? dma_alloc_from_dev_coherent+0x2e0/0x570 [ 889.590914][T17726] dma_direct_alloc+0x3d1/0x8a0 [ 889.590932][T17726] dma_alloc_attrs+0x1b9/0x3e0 [ 889.590970][T17726] ? __pfx_dma_alloc_attrs+0x10/0x10 [ 889.590985][T17726] ? __kmalloc_noprof+0x350/0x840 [ 889.590998][T17726] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 889.591016][T17726] ? dma_direct_supported+0xca/0x220 [ 889.591035][T17726] comedi_isadma_alloc+0x331/0x620 [ 889.591053][T17726] ? __pfx_comedi_isadma_alloc+0x10/0x10 [ 889.591067][T17726] ? request_threaded_irq+0x27b/0x3e0 [ 889.591087][T17726] pcl816_attach+0x909/0xb30 [ 889.591105][T17726] comedi_device_attach+0x40e/0x6b0 [ 889.591125][T17726] do_devconfig_ioctl+0x1b3/0x6d0 [ 889.591137][T17726] ? comedi_unlocked_ioctl+0x180/0x3310 [ 889.591152][T17726] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 889.591171][T17726] ? tomoyo_path_number_perm+0x46d/0x580 [ 889.591188][T17726] ? kasan_save_stack+0x3f/0x50 [ 889.591202][T17726] ? kasan_save_stack+0x30/0x50 [ 889.591216][T17726] ? kasan_save_track+0x14/0x30 [ 889.591230][T17726] ? kasan_save_free_info+0x3b/0x70 [ 889.591244][T17726] comedi_unlocked_ioctl+0x860/0x3310 [ 889.591275][T17726] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 889.591301][T17726] ? kasan_quarantine_put+0x104/0x240 [ 889.591315][T17726] ? lockdep_hardirqs_on+0x7d/0x110 [ 889.591328][T17726] ? find_held_lock+0x2b/0x80 [ 889.591342][T17726] ? tomoyo_path_number_perm+0x28f/0x580 [ 889.591358][T17726] ? tomoyo_path_number_perm+0x28f/0x580 [ 889.591377][T17726] ? tomoyo_path_number_perm+0x188/0x580 [ 889.591396][T17726] comedi_compat_ioctl+0x438/0xe20 [ 889.591411][T17726] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 889.591426][T17726] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 889.591440][T17726] ? do_vfs_ioctl+0x226/0x13e0 [ 889.591454][T17726] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 889.591470][T17726] ? __fget_files+0x34/0x3d0 [ 889.591486][T17726] ? find_held_lock+0x2b/0x80 [ 889.591500][T17726] ? __fget_files+0x215/0x3d0 [ 889.591514][T17726] ? hook_file_ioctl_common+0x140/0x440 [ 889.591535][T17726] ? __fget_files+0x21f/0x3d0 [ 889.591553][T17726] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 889.591567][T17726] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 889.591583][T17726] __do_fast_syscall_32+0x14b/0x8c0 [ 889.591596][T17726] ? lockdep_hardirqs_on+0x7d/0x110 [ 889.591609][T17726] do_fast_syscall_32+0x32/0x70 [ 889.591623][T17726] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 889.591638][T17726] RIP: 0023:0xf746efbc [ 889.591648][T17726] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 889.591659][T17726] RSP: 002b:00000000f544450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 889.591670][T17726] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000040946400 [ 889.591677][T17726] RDX: 0000000080000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 889.591684][T17726] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 889.591690][T17726] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 889.591697][T17726] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 889.591712][T17726] [ 889.591743][T17726] Mem-Info: [ 889.591750][T17726] active_anon:6742 inactive_anon:1905 isolated_anon:0 [ 889.591750][T17726] active_file:9293 inactive_file:3797 isolated_file:0 [ 889.591750][T17726] unevictable:0 dirty:479 writeback:0 [ 889.591750][T17726] slab_reclaimable:6815 slab_unreclaimable:65713 [ 889.591750][T17726] mapped:27590 shmem:2872 pagetables:2602 [ 889.591750][T17726] sec_pagetables:342 bounce:0 [ 889.591750][T17726] kernel_misc_reclaimable:0 [ 889.591750][T17726] free:23641 free_pcp:14 free_cma:0 [ 889.591777][T17726] Node 0 active_anon:8kB inactive_anon:108kB active_file:84kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:152kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7776kB pagetables:1100kB sec_pagetables:1128kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 889.591804][T17726] Node 0 DMA free:2592kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:56kB local_pcp:0kB free_cma:0kB [ 889.591835][T17726] lowmem_reserve[]: 0 256 256 256 256 [ 889.591855][T17726] Node 0 DMA: 116*4kB (UM) 12*8kB (UM) 3*16kB (UM) 14*32kB (U) 6*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2592kB [ 889.591929][T17726] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 889.591938][T17726] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 889.591950][T17726] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 889.591962][T17726] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 889.591973][T17726] 17512 total pagecache pages [ 889.591979][T17726] 1552 pages in swap cache [ 889.591984][T17726] Free swap = 88412kB [ 889.591989][T17726] Total swap = 124996kB [ 889.591995][T17726] 524155 pages RAM [ 889.592000][T17726] 0 pages HighMem/MovableOnly [ 889.592006][T17726] 217545 pages reserved [ 889.592012][T17726] 0 pages cma reserved [ 890.745576][ T1031] usb 11-1: new high-speed USB device number 43 using dummy_hcd [ 890.810647][ T43] audit: type=1326 audit(1793100170.996:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17752 comm="syz.5.2518" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efbc code=0x7ffc0000 [ 890.810767][ T43] audit: type=1326 audit(1793100170.996:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17752 comm="syz.5.2518" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efbc code=0x7ffc0000 [ 890.812625][ T43] audit: type=1326 audit(1793100170.996:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17752 comm="syz.5.2518" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf747efbc code=0x7ffc0000 [ 890.812695][ T43] audit: type=1326 audit(1793100170.996:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17752 comm="syz.5.2518" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efbc code=0x7ffc0000 [ 890.812720][ T43] audit: type=1326 audit(1793100170.996:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17752 comm="syz.5.2518" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efbc code=0x7ffc0000 [ 890.895862][ T1031] usb 11-1: Using ep0 maxpacket: 8 [ 890.896478][ T1031] usb 11-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 890.897747][ T1031] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 890.897768][ T1031] usb 11-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 890.897798][ T1031] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.901377][ T1031] usb 11-1: config 0 descriptor?? [ 890.903170][ T1031] iowarrior 11-1:0.0: no interrupt-in endpoint found [ 893.651524][T11534] usb 11-1: USB disconnect, device number 43 [ 893.835367][ C1] net_ratelimit: 146 callbacks suppressed [ 897.576525][ T1031] usb 12-1: new high-speed USB device number 43 using dummy_hcd [ 897.776329][ T1031] usb 12-1: Using ep0 maxpacket: 8 [ 897.779054][ T1031] usb 12-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 897.784997][ T1031] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 897.785096][ T1031] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.840696][ T1031] usb 12-1: config 0 descriptor?? [ 897.859366][ T1031] iowarrior 12-1:0.0: no interrupt-in endpoint found [ 898.882662][ T43] kauditd_printk_skb: 248 callbacks suppressed [ 898.882671][ T43] audit: type=1800 audit(1793100179.066:1186): pid=17818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2529" name="file0" dev="overlay" ino=3364 res=0 errno=-22 [ 899.035715][T10587] net_ratelimit: 75 callbacks suppressed [ 899.557480][ T1031] usb 12-1: USB disconnect, device number 43 [ 899.584952][T17815] netlink: 'syz.5.2527': attribute type 4 has an invalid length. [ 900.450460][T17839] erofs (device nbd1): cannot find valid erofs superblock [ 900.784295][T17843] netlink: 'syz.1.2535': attribute type 39 has an invalid length. [ 901.178650][T17851] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2537'. [ 901.231702][T17851] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1635021663 (3270043326 ns) > initial count (1089000154 ns). Using initial count to start timer. [ 901.446940][ T43] audit: type=1326 audit(1793100181.636:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17853 comm="syz.1.2538" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fbc code=0x7ffc0000 [ 901.446982][ T43] audit: type=1326 audit(1793100181.636:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17853 comm="syz.1.2538" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fbc code=0x7ffc0000 [ 901.453181][ T43] audit: type=1326 audit(1793100181.636:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17853 comm="syz.1.2538" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7fd2fbc code=0x7ffc0000 [ 901.453212][ T43] audit: type=1326 audit(1793100181.636:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17853 comm="syz.1.2538" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fbc code=0x7ffc0000 [ 901.453233][ T43] audit: type=1326 audit(1793100181.636:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17853 comm="syz.1.2538" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fbc code=0x7ffc0000 [ 901.453869][ T43] audit: type=1326 audit(1793100181.636:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17853 comm="syz.1.2538" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fd2fbc code=0x7ffc0000 [ 901.453893][ T43] audit: type=1326 audit(1793100181.636:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17853 comm="syz.1.2538" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fbc code=0x7ffc0000 [ 901.453914][ T43] audit: type=1326 audit(1793100181.636:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17853 comm="syz.1.2538" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2fbc code=0x7ffc0000 [ 901.454257][ T43] audit: type=1326 audit(1793100181.636:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17853 comm="syz.1.2538" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7fd2fbc code=0x7ffc0000 [ 901.826162][ T1031] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 902.006959][ T1031] usb 10-1: Using ep0 maxpacket: 8 [ 902.007930][ T1031] usb 10-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 902.008841][ T1031] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 902.008873][ T1031] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.010135][ T1031] usb 10-1: config 0 descriptor?? [ 902.019227][ T1031] iowarrior 10-1:0.0: no interrupt-in endpoint found [ 902.325844][ T1031] usb 11-1: new high-speed USB device number 44 using dummy_hcd [ 902.477023][ T1031] usb 11-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00 [ 902.477924][ T1031] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 902.477958][ T1031] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.690817][ T1031] qmi_wwan 11-1:1.0: cdc-wdm0: USB WDM device [ 902.717094][ T1031] wwan wwan0: port wwan0qmi0 attached [ 902.918310][ T1031] qmi_wwan 11-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.6-1, WWAN/QMI device, de:da:3e:65:41:68 [ 903.121852][ T1031] usb 11-1: USB disconnect, device number 44 [ 903.123769][ T1031] qmi_wwan 11-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.6-1, WWAN/QMI device [ 903.237174][ T1031] wwan wwan0: port wwan0qmi0 disconnected [ 904.578402][ T6735] usb 10-1: USB disconnect, device number 49 [ 904.627695][T17903] net_ratelimit: 382 callbacks suppressed [ 904.651844][T17905] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2546'. [ 904.718971][T17905] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1635021663 (3270043326 ns) > initial count (1089000154 ns). Using initial count to start timer. [ 905.420955][T17916] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 906.173050][T17927] Invalid ELF header magic: != ELF [ 907.499641][T17940] netlink: 'syz.5.2548': attribute type 4 has an invalid length. [ 907.715500][T11533] usb 12-1: new high-speed USB device number 44 using dummy_hcd [ 907.804394][T17947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2557'. [ 907.877356][T11533] usb 12-1: Using ep0 maxpacket: 8 [ 907.878375][T11533] usb 12-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 907.880084][T11533] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 907.880149][T11533] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.885016][T11533] usb 12-1: config 0 descriptor?? [ 907.910027][T11533] iowarrior 12-1:0.0: no interrupt-in endpoint found [ 907.987735][T17947] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1953718136 (3907436272 ns) > initial count (3906132690 ns). Using initial count to start timer. [ 910.226490][T17986] net_ratelimit: 782 callbacks suppressed [ 910.567072][T11995] usb 12-1: USB disconnect, device number 44 [ 911.659308][T18009] binfmt_misc: register: failed to install interpreter ./file0 [ 911.914360][T18013] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2566'. [ 912.097669][T18013] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1635021663 (3270043326 ns) > initial count (1089000154 ns). Using initial count to start timer. [ 912.259557][T18023] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2567'. [ 912.259612][T18023] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2567'. [ 912.259660][T18023] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 913.414948][T18035] ubi0: attaching mtd0 [ 913.425261][T18035] ubi0: scanning is finished [ 913.425404][T18035] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 913.445393][T11533] usb 11-1: new high-speed USB device number 45 using dummy_hcd [ 913.461317][T18025] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2569'. [ 913.461330][T18025] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2569'. [ 913.461337][T18025] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 913.596579][T11533] usb 11-1: Using ep0 maxpacket: 8 [ 913.598904][T11533] usb 11-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 913.600126][T11533] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 913.600144][T11533] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 913.600174][T11533] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.602358][T18039] netlink: 'syz.1.2573': attribute type 2 has an invalid length. [ 913.606027][T11533] usb 11-1: config 0 descriptor?? [ 913.761203][T18035] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 913.822258][T11533] iowarrior 11-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 914.156341][T18031] iowarrior 11-1:0.0: Error -90 while submitting URB [ 914.164374][T18031] iowarrior 11-1:0.0: Error -90 while submitting URB [ 914.187447][ T7071] usb 11-1: USB disconnect, device number 45 [ 915.177009][T18060] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2577'. [ 915.177864][T18060] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2577'. [ 915.178853][T18060] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 915.351000][T18062] net_ratelimit: 409 callbacks suppressed [ 915.351041][T18062] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 916.570764][T18083] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2588'. [ 916.570806][T18083] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2588'. [ 916.570846][T18083] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 917.202914][T18089] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2592'. [ 917.202926][T18089] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2592'. [ 917.202932][T18089] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 917.269549][T18092] netlink: 'syz.5.2584': attribute type 2 has an invalid length. [ 917.395950][ T6735] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 918.128282][T18116] ubi0: attaching mtd0 [ 918.141268][T18116] ubi0: scanning is finished [ 918.141429][T18116] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 918.278025][T18116] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 920.292417][T18150] netlink: 'syz.6.2593': attribute type 4 has an invalid length. [ 920.795691][T10584] net_ratelimit: 132 callbacks suppressed [ 926.475441][ C2] net_ratelimit: 94 callbacks suppressed [ 927.862039][T18168] netlink: 'syz.7.2598': attribute type 2 has an invalid length. [ 928.241458][T18169] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2596'. [ 928.241472][T18169] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2596'. [ 928.241478][T18169] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 928.259084][T18172] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2597'. [ 928.259108][T18172] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2597'. [ 928.259121][T18172] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 928.470797][T18182] ubi0: attaching mtd0 [ 928.483728][T18182] ubi0: scanning is finished [ 928.483792][T18182] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 928.781314][T18182] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 929.852067][T18204] rxe_eth0 speed is unknown, defaulting to 1000 [ 929.947138][T18203] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 929.999228][T18204] lo speed is unknown, defaulting to 1000 [ 931.036393][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.625591][T11533] usb 11-1: new high-speed USB device number 46 using dummy_hcd [ 931.701202][T18232] net_ratelimit: 184 callbacks suppressed [ 931.701274][T18232] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 931.714061][T18232] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2612'. [ 931.714138][T18232] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2612'. [ 931.714207][T18232] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 931.995835][ T5790] Bluetooth: hci4: command 0x0406 tx timeout [ 932.220301][T18240] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 932.228956][T18242] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2613'. [ 932.228974][T18242] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2613'. [ 932.228986][T18242] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 932.628217][T18244] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2614'. [ 932.738717][T18244] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1953718136 (3907436272 ns) > initial count (3906132690 ns). Using initial count to start timer. [ 932.841341][T11533] usb 11-1: unable to get BOS descriptor or descriptor too short [ 932.841363][T11533] usb 11-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=0.00 [ 932.841382][T11533] usb 11-1: no configurations [ 932.841388][T11533] usb 11-1: can't read configurations, error -22 [ 933.363310][T18257] bond0 (unregistering): Released all slaves [ 934.290236][T18272] netlink: 'syz.7.2619': attribute type 2 has an invalid length. [ 935.329326][T18287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2625'. [ 935.491545][T18292] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2624'. [ 935.491556][T18292] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2624'. [ 935.491563][T18292] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 935.932105][T18289] netlink: 'syz.6.2618': attribute type 4 has an invalid length. [ 936.155901][ C3] ip6_tunnel: M xmit: Local address not yet configured! [ 936.373552][T18306] bond0 (unregistering): Released all slaves [ 936.907436][T18321] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2631'. [ 936.907447][T18321] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2631'. [ 936.907453][T18321] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 936.959721][T18310] netlink: 'syz.5.2630': attribute type 4 has an invalid length. [ 937.045332][T18326] net_ratelimit: 646 callbacks suppressed [ 938.511772][T18349] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2637'. [ 941.403882][T18374] dummy0 speed is unknown, defaulting to 1000 [ 941.403917][T18374] dummy0 speed is unknown, defaulting to 1000 [ 941.404322][T18374] dummy0 speed is unknown, defaulting to 1000 [ 941.417743][T18374] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 941.417770][T18374] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 941.417793][T18374] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 941.454497][T18374] dummy0 speed is unknown, defaulting to 1000 [ 941.475497][T18374] dummy0 speed is unknown, defaulting to 1000 [ 941.476642][T18374] dummy0 speed is unknown, defaulting to 1000 [ 941.477727][T18374] dummy0 speed is unknown, defaulting to 1000 [ 942.017931][T18371] bond0 (unregistering): Released all slaves [ 942.330914][T18387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 942.351228][T18387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 942.359798][T18387] bond0 (unregistering): Released all slaves [ 942.683334][T18396] net_ratelimit: 434 callbacks suppressed [ 942.838962][T18380] netlink: 'syz.1.2640': attribute type 4 has an invalid length. [ 943.153036][T18384] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2643'. [ 943.153049][T18384] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2643'. [ 943.153056][T18384] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 943.498738][T18401] netlink: 'syz.1.2647': attribute type 2 has an invalid length. [ 945.315968][T18436] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2655'. [ 945.422972][T18436] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1635021663 (3270043326 ns) > initial count (1089000154 ns). Using initial count to start timer. [ 946.166469][T18441] netlink: 'syz.1.2656': attribute type 4 has an invalid length. [ 947.132576][T18448] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 947.178344][T18448] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 947.178623][T18448] block device autoloading is deprecated and will be removed. [ 947.327570][T18453] md: md7 stopped. [ 947.376230][T18448] md: invalid raid superblock magic on ram15 [ 947.376240][T18448] md: ram15 does not have a valid v0.90 superblock, not importing! [ 947.376277][T18448] md: md_import_device returned -22 [ 947.828555][T18462] net_ratelimit: 373 callbacks suppressed [ 949.613075][T18473] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2665'. [ 949.613087][T18473] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2665'. [ 949.613095][T18473] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 949.922286][T18484] netlink: 'syz.7.2664': attribute type 4 has an invalid length. [ 951.433104][T18489] netlink: 'syz.6.2668': attribute type 4 has an invalid length. [ 952.849541][T10469] net_ratelimit: 131 callbacks suppressed [ 953.670993][T18535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2678'. [ 953.742109][T18535] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1635021663 (3270043326 ns) > initial count (1089000154 ns). Using initial count to start timer. [ 953.774048][T18536] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2677'. [ 953.774067][T18536] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2677'. [ 953.774080][T18536] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 953.803216][ T43] kauditd_printk_skb: 203 callbacks suppressed [ 953.803230][ T43] audit: type=1326 audit(1793100233.986:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18538 comm="syz.7.2680" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fbc code=0x7ffc0000 [ 953.804001][ T43] audit: type=1326 audit(1793100233.986:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18538 comm="syz.7.2680" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fbc code=0x7ffc0000 [ 953.807673][ T43] audit: type=1326 audit(1793100233.996:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18538 comm="syz.7.2680" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f22fbc code=0x7ffc0000 [ 953.807720][ T43] audit: type=1326 audit(1793100233.996:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18538 comm="syz.7.2680" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fbc code=0x7ffc0000 [ 953.807798][ T43] audit: type=1326 audit(1793100233.996:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18538 comm="syz.7.2680" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fbc code=0x7ffc0000 [ 953.809329][ T43] audit: type=1326 audit(1793100233.996:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18538 comm="syz.7.2680" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f22fbc code=0x7ffc0000 [ 953.809375][ T43] audit: type=1326 audit(1793100233.996:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18538 comm="syz.7.2680" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fbc code=0x7ffc0000 [ 953.809413][ T43] audit: type=1326 audit(1793100233.996:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18538 comm="syz.7.2680" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fbc code=0x7ffc0000 [ 953.809680][ T43] audit: type=1326 audit(1793100233.996:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18538 comm="syz.7.2680" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f22fbc code=0x7ffc0000 [ 953.809919][ T43] audit: type=1326 audit(1793100233.996:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18538 comm="syz.7.2680" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f22fbc code=0x7ffc0000 [ 956.927774][T18594] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2690'. [ 957.007924][T18594] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1953718136 (3907436272 ns) > initial count (3906132690 ns). Using initial count to start timer. [ 957.917490][T10584] net_ratelimit: 592 callbacks suppressed [ 958.768380][ T1031] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 959.314900][T18643] netlink: 'syz.7.2699': attribute type 4 has an invalid length. [ 959.724536][T18658] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2702'. [ 959.847139][T18658] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1635021663 (3270043326 ns) > initial count (1089000154 ns). Using initial count to start timer. [ 960.429659][T18673] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2704'. [ 960.625741][T18673] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1953718136 (3907436272 ns) > initial count (3906132690 ns). Using initial count to start timer. [ 963.035487][T10587] net_ratelimit: 629 callbacks suppressed [ 968.717595][T10584] net_ratelimit: 98 callbacks suppressed [ 968.822354][T18699] input: syz1 as /devices/virtual/input/input28 [ 969.095060][T18708] tipc: Enabling of bearer rejected, failed to enable media [ 969.095725][T18706] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2708'. [ 973.760098][ T6731] net_ratelimit: 119 callbacks suppressed [ 973.985533][T18731] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2714'. [ 974.009953][T18734] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2713'. [ 975.276443][T18765] netlink: 'syz.5.2715': attribute type 4 has an invalid length. [ 976.966399][T18788] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2724'. [ 977.449137][T18798] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2726'. [ 977.667214][T18783] FAULT_INJECTION: forcing a failure. [ 977.667214][T18783] name failslab, interval 1, probability 0, space 0, times 0 [ 977.667239][T18783] CPU: 3 UID: 0 PID: 18783 Comm: syz.1.2722 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 977.667259][T18783] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 977.667264][T18783] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 977.667272][T18783] Call Trace: [ 977.667278][T18783] [ 977.667283][T18783] dump_stack_lvl+0x100/0x190 [ 977.667305][T18783] should_fail_ex.cold+0x5/0xa [ 977.667322][T18783] should_failslab+0xc2/0x120 [ 977.667342][T18783] kmem_cache_alloc_noprof+0x92/0x6a0 [ 977.667359][T18783] ? dst_alloc+0x99/0x1a0 [ 977.667377][T18783] dst_alloc+0x99/0x1a0 [ 977.667394][T18783] rt_dst_alloc+0x35/0x3a0 [ 977.667408][T18783] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 977.667429][T18783] ip_route_output_key_hash+0x118/0x2b0 [ 977.667445][T18783] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 977.667463][T18783] ? lock_acquire+0x1d1/0x380 [ 977.667476][T18783] ? icmp_route_lookup.constprop.0+0x39e/0x15b0 [ 977.667494][T18783] ? icmp_route_lookup.constprop.0+0x39e/0x15b0 [ 977.667513][T18783] icmp_route_lookup.constprop.0+0x3e5/0x15b0 [ 977.667531][T18783] ? __lock_acquire+0x5c0/0x1f40 [ 977.667542][T18783] ? __pfx_icmp_route_lookup.constprop.0+0x10/0x10 [ 977.667562][T18783] ? __ip_options_echo+0x707/0x1190 [ 977.667574][T18783] ? __icmp_send+0x76d/0x2be0 [ 977.667591][T18783] ? __pfx___ip_options_echo+0x10/0x10 [ 977.667606][T18783] __icmp_send+0xb0d/0x2be0 [ 977.667629][T18783] ? __pfx___icmp_send+0x10/0x10 [ 977.667646][T18783] ? ipt_do_table+0xcf0/0x1b10 [ 977.667669][T18783] ? lock_acquire+0x1d1/0x380 [ 977.667679][T18783] ? ip_dst_mtu_maybe_forward+0x73/0x960 [ 977.667700][T18783] ? ip_dst_mtu_maybe_forward+0x41d/0x960 [ 977.667715][T18783] ip_fragment.constprop.0+0x1e3/0x240 [ 977.667729][T18783] __ip_finish_output.part.0+0x3ef/0x6f0 [ 977.667744][T18783] ip_output+0x392/0xc00 [ 977.667758][T18783] ? __pfx_ip_output+0x10/0x10 [ 977.667772][T18783] ? __pfx_ip_finish_output+0x10/0x10 [ 977.667787][T18783] ? __pfx_ip_output+0x10/0x10 [ 977.667800][T18783] ip_local_out+0x193/0x1f0 [ 977.667813][T18783] __ip_queue_xmit+0x876/0x1f50 [ 977.667827][T18783] ? tcp_rcv_state_process+0x4d70/0x7060 [ 977.667844][T18783] ? __pfx_ip_queue_xmit+0x10/0x10 [ 977.667858][T18783] __tcp_transmit_skb+0x34d9/0x4f00 [ 977.667889][T18783] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 977.667906][T18783] ? kmalloc_reserve+0xf9/0x350 [ 977.667936][T18783] tcp_write_xmit+0x1133/0x84d0 [ 977.667963][T18783] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 977.667980][T18783] __tcp_push_pending_frames+0xaf/0x3b0 [ 977.667999][T18783] tcp_send_fin+0x11f/0x10d0 [ 977.668019][T18783] __tcp_close+0x9ef/0x10e0 [ 977.668038][T18783] tcp_close+0x28/0x110 [ 977.668053][T18783] inet_release+0xed/0x200 [ 977.668068][T18783] __sock_release+0xb3/0x260 [ 977.668083][T18783] ? __pfx_sock_close+0x10/0x10 [ 977.668097][T18783] sock_close+0x1c/0x30 [ 977.668110][T18783] __fput+0x3fb/0xb50 [ 977.668129][T18783] ? _raw_spin_unlock_irq+0x23/0x50 [ 977.668155][T18783] task_work_run+0x150/0x240 [ 977.668177][T18783] ? __pfx_task_work_run+0x10/0x10 [ 977.668216][T18783] get_signal+0x1bd/0x21d0 [ 977.668244][T18783] ? inet_recvmsg+0xdc/0x4c0 [ 977.668299][T18783] ? fput+0xdc/0x100 [ 977.668318][T18783] ? __sys_recvfrom+0x258/0x2f0 [ 977.668333][T18783] ? __pfx_get_signal+0x10/0x10 [ 977.668352][T18783] ? __pfx___sys_recvfrom+0x10/0x10 [ 977.668370][T18783] arch_do_signal_or_restart+0x91/0x7a0 [ 977.668388][T18783] ? blkcg_maybe_throttle_current+0x5e7/0xeb0 [ 977.668406][T18783] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 977.668432][T18783] exit_to_user_mode_loop+0x139/0x700 [ 977.668446][T18783] ? rcu_is_watching+0x13/0xc0 [ 977.668461][T18783] __do_fast_syscall_32+0x5b0/0x8c0 [ 977.668477][T18783] do_fast_syscall_32+0x32/0x70 [ 977.668490][T18783] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 977.668505][T18783] RIP: 0023:0xf7fd2fbc [ 977.668515][T18783] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 977.668526][T18783] RSP: 002b:00000000f546550c EFLAGS: 00000292 ORIG_RAX: 0000000000000173 [ 977.668537][T18783] RAX: fffffffffffffe00 RBX: 0000000000000007 RCX: 0000000080000380 [ 977.668544][T18783] RDX: 00000000fffffd0b RSI: 00000000c9100120 RDI: 0000000000000000 [ 977.668551][T18783] RBP: 00000000fffffd25 R08: 0000000000000000 R09: 0000000000000000 [ 977.668558][T18783] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 977.668565][T18783] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 977.668579][T18783] [ 977.687559][ T43] kauditd_printk_skb: 157 callbacks suppressed [ 977.687572][ T43] audit: type=1326 audit(1793100257.876:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18794 comm="syz.6.2725" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efbc code=0x7ffc0000 [ 977.687607][ T43] audit: type=1326 audit(1793100257.876:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18794 comm="syz.6.2725" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efbc code=0x7ffc0000 [ 977.695830][ T43] audit: type=1326 audit(1793100257.876:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18794 comm="syz.6.2725" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf746efbc code=0x7ffc0000 [ 977.695864][ T43] audit: type=1326 audit(1793100257.876:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18794 comm="syz.6.2725" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efbc code=0x7ffc0000 [ 977.695885][ T43] audit: type=1326 audit(1793100257.876:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18794 comm="syz.6.2725" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efbc code=0x7ffc0000 [ 977.695906][ T43] audit: type=1326 audit(1793100257.876:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18794 comm="syz.6.2725" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf746efbc code=0x7ffc0000 [ 977.695928][ T43] audit: type=1326 audit(1793100257.876:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18794 comm="syz.6.2725" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efbc code=0x7ffc0000 [ 977.696362][ T43] audit: type=1326 audit(1793100257.886:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18794 comm="syz.6.2725" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efbc code=0x7ffc0000 [ 977.700716][ T43] audit: type=1326 audit(1793100257.886:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18794 comm="syz.6.2725" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf746efbc code=0x7ffc0000 [ 977.700743][ T43] audit: type=1326 audit(1793100257.886:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18794 comm="syz.6.2725" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efbc code=0x7ffc0000 [ 978.243231][T18813] pim6reg: entered allmulticast mode [ 978.925847][T18813] pim6reg: left allmulticast mode [ 979.035367][ C0] net_ratelimit: 1360 callbacks suppressed [ 979.158767][T18824] netlink: 'syz.6.2730': attribute type 4 has an invalid length. [ 979.571497][T18831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2733'. [ 980.700507][T18840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2736'. [ 981.318543][T18838] netlink: 'syz.1.2735': attribute type 4 has an invalid length. [ 982.177811][T10589] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8f6648f5-2c89-4c96-944c-3c35a7c2b476. [ 982.276695][T18852] nvme nvme0: creating 4 I/O queues. [ 982.299388][T18852] nvme nvme0: new ctrl: "testsubsys" [ 982.763016][T18869] cgroup: fork rejected by pids controller in /syz5 [ 983.970975][T18939] netlink: 'syz.1.2745': attribute type 4 has an invalid length. [ 984.272773][T10587] net_ratelimit: 349 callbacks suppressed [ 984.424467][T18944] netlink: 'syz.6.2748': attribute type 4 has an invalid length. [ 986.041004][T18958] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2750'. [ 986.041072][T18958] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2750'. [ 986.041085][T18958] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 986.547917][T18963] netlink: 'syz.6.2751': attribute type 2 has an invalid length. [ 986.775588][T18957] FAULT_INJECTION: forcing a failure. [ 986.775588][T18957] name fail_futex, interval 1, probability 0, space 0, times 1 [ 986.775608][T18957] CPU: 3 UID: 0 PID: 18957 Comm: syz.5.2749 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 986.775627][T18957] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 986.775633][T18957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 986.775640][T18957] Call Trace: [ 986.775645][T18957] [ 986.775651][T18957] dump_stack_lvl+0x100/0x190 [ 986.775672][T18957] should_fail_ex.cold+0x5/0xa [ 986.775691][T18957] get_futex_key+0xf5d/0x13e0 [ 986.775709][T18957] ? __pfx_get_futex_key+0x10/0x10 [ 986.775725][T18957] ? __mutex_unlock_slowpath+0x35d/0x930 [ 986.775745][T18957] futex_wake+0xf4/0x5e0 [ 986.775769][T18957] ? __pfx_futex_wake+0x10/0x10 [ 986.775791][T18957] ? detach_task_ctx_data+0x83/0x490 [ 986.775814][T18957] do_futex+0x2b2/0x440 [ 986.775832][T18957] ? __pfx_do_futex+0x10/0x10 [ 986.775847][T18957] ? __might_fault+0xc5/0x140 [ 986.775865][T18957] mm_exit_exec_release+0x256/0x2f0 [ 986.775886][T18957] do_exit+0x6d8/0x2a00 [ 986.775903][T18957] ? __pfx_do_exit+0x10/0x10 [ 986.775917][T18957] ? do_raw_spin_lock+0x128/0x260 [ 986.775932][T18957] ? find_held_lock+0x2b/0x80 [ 986.775948][T18957] ? get_signal+0x7db/0x21d0 [ 986.775969][T18957] do_group_exit+0xd5/0x2a0 [ 986.775985][T18957] get_signal+0x1ebd/0x21d0 [ 986.776005][T18957] ? __local_bh_enable_ip+0xa5/0x120 [ 986.776024][T18957] ? tcp_sendmsg+0x38/0x50 [ 986.776041][T18957] ? __pfx_tcp_sendmsg+0x10/0x10 [ 986.776062][T18957] ? __pfx_get_signal+0x10/0x10 [ 986.776080][T18957] ? __pfx___sys_sendto+0x10/0x10 [ 986.776100][T18957] arch_do_signal_or_restart+0x91/0x7a0 [ 986.776118][T18957] ? rcu_is_watching+0x13/0xc0 [ 986.776135][T18957] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 986.776163][T18957] exit_to_user_mode_loop+0x139/0x700 [ 986.776179][T18957] ? rcu_is_watching+0x13/0xc0 [ 986.776197][T18957] __do_fast_syscall_32+0x5b0/0x8c0 [ 986.776215][T18957] do_fast_syscall_32+0x32/0x70 [ 986.776237][T18957] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 986.776253][T18957] RIP: 0023:0xf747efbc [ 986.776264][T18957] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 986.776277][T18957] RSP: 002b:00000000f547550c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 986.776290][T18957] RAX: fffffffffffffe00 RBX: 0000000000000008 RCX: 0000000080000340 [ 986.776299][T18957] RDX: 00000000ffffff94 RSI: 000000000000000b RDI: 0000000000000000 [ 986.776306][T18957] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 986.776314][T18957] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 986.776322][T18957] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 986.776338][T18957] [ 988.128852][T18992] bond0: Error: Cannot enslave bond to itself. [ 989.275619][T10472] net_ratelimit: 102 callbacks suppressed [ 989.360668][ T43] kauditd_printk_skb: 13 callbacks suppressed [ 989.360678][ T43] audit: type=1326 audit(1793100269.546:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18994 comm="syz.7.2759" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fbc code=0x7ffc0000 [ 989.361128][ T43] audit: type=1326 audit(1793100269.546:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18994 comm="syz.7.2759" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fbc code=0x7ffc0000 [ 989.364154][ T43] audit: type=1326 audit(1793100269.546:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18994 comm="syz.7.2759" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f22fbc code=0x7ffc0000 [ 989.364514][ T43] audit: type=1326 audit(1793100269.546:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18994 comm="syz.7.2759" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fbc code=0x7ffc0000 [ 989.364818][ T43] audit: type=1326 audit(1793100269.546:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18994 comm="syz.7.2759" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fbc code=0x7ffc0000 [ 989.366692][ T43] audit: type=1326 audit(1793100269.556:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18994 comm="syz.7.2759" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f22fbc code=0x7ffc0000 [ 989.368879][ T43] audit: type=1326 audit(1793100269.556:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18994 comm="syz.7.2759" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fbc code=0x7ffc0000 [ 989.368909][ T43] audit: type=1326 audit(1793100269.556:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18994 comm="syz.7.2759" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fbc code=0x7ffc0000 [ 989.375436][ T43] audit: type=1326 audit(1793100269.556:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18994 comm="syz.7.2759" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f22fbc code=0x7ffc0000 [ 989.375485][ T43] audit: type=1326 audit(1793100269.556:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18994 comm="syz.7.2759" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fbc code=0x7ffc0000 [ 990.056690][T19004] netlink: 'syz.5.2760': attribute type 4 has an invalid length. [ 990.214729][T19020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2765'. [ 990.976216][T19014] FAULT_INJECTION: forcing a failure. [ 990.976216][T19014] name fail_futex, interval 1, probability 0, space 0, times 0 [ 990.976243][T19014] CPU: 3 UID: 0 PID: 19014 Comm: syz.7.2764 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 990.976271][T19014] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 990.976281][T19014] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 990.976293][T19014] Call Trace: [ 990.976300][T19014] [ 990.976309][T19014] dump_stack_lvl+0x100/0x190 [ 990.976341][T19014] should_fail_ex.cold+0x5/0xa [ 990.976368][T19014] get_futex_key+0xf5d/0x13e0 [ 990.976396][T19014] ? __pfx_get_futex_key+0x10/0x10 [ 990.976417][T19014] ? __mutex_unlock_slowpath+0x35d/0x930 [ 990.976441][T19014] futex_wake+0xf4/0x5e0 [ 990.976470][T19014] ? __pfx_futex_wake+0x10/0x10 [ 990.976500][T19014] ? detach_task_ctx_data+0x83/0x490 [ 990.976533][T19014] do_futex+0x2b2/0x440 [ 990.976560][T19014] ? __pfx_do_futex+0x10/0x10 [ 990.976583][T19014] ? __might_fault+0xc5/0x140 [ 990.976611][T19014] mm_exit_exec_release+0x256/0x2f0 [ 990.976651][T19014] do_exit+0x6d8/0x2a00 [ 990.976672][T19014] ? lockdep_hardirqs_on+0x7d/0x110 [ 990.976693][T19014] ? tcp_recvmsg+0x14c/0x680 [ 990.976724][T19014] ? __pfx_do_exit+0x10/0x10 [ 990.976747][T19014] ? do_raw_spin_lock+0x128/0x260 [ 990.976770][T19014] ? find_held_lock+0x2b/0x80 [ 990.976793][T19014] ? get_signal+0x7db/0x21d0 [ 990.976825][T19014] do_group_exit+0xd5/0x2a0 [ 990.976850][T19014] get_signal+0x1ebd/0x21d0 [ 990.976877][T19014] ? __pfx_tcp_recvmsg+0x10/0x10 [ 990.976902][T19014] ? inet_recvmsg+0xdc/0x4c0 [ 990.976927][T19014] ? rcu_is_watching+0x13/0xc0 [ 990.976958][T19014] ? __pfx_get_signal+0x10/0x10 [ 990.976986][T19014] ? __pfx___sys_recvfrom+0x10/0x10 [ 990.977018][T19014] arch_do_signal_or_restart+0x91/0x7a0 [ 990.977049][T19014] ? __fput+0x68f/0xb50 [ 990.977081][T19014] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 990.977126][T19014] exit_to_user_mode_loop+0x139/0x700 [ 990.977152][T19014] ? rcu_is_watching+0x13/0xc0 [ 990.977182][T19014] __do_fast_syscall_32+0x5b0/0x8c0 [ 990.977211][T19014] do_fast_syscall_32+0x32/0x70 [ 990.977238][T19014] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 990.977265][T19014] RIP: 0023:0xf7f22fbc [ 990.977284][T19014] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 990.977304][T19014] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000173 [ 990.977325][T19014] RAX: fffffffffffffe00 RBX: 0000000000000007 RCX: 0000000080000380 [ 990.977339][T19014] RDX: 00000000fffffd0b RSI: 00000000c9100120 RDI: 0000000000000000 [ 990.977353][T19014] RBP: 00000000fffffd25 R08: 0000000000000000 R09: 0000000000000000 [ 990.977367][T19014] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 990.977380][T19014] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 990.977406][T19014] [ 991.305113][T19040] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2769'. [ 991.749710][T19046] pim6reg: entered allmulticast mode [ 991.950095][T19046] pim6reg: left allmulticast mode [ 992.490909][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.015689][T19142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2774'. [ 993.843432][T19186] netlink: 'syz.5.2775': attribute type 4 has an invalid length. [ 994.019658][T19185] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 994.315407][ C2] net_ratelimit: 1470 callbacks suppressed [ 995.265401][ T858] usb 12-1: new high-speed USB device number 45 using dummy_hcd [ 995.425387][ T858] usb 12-1: Using ep0 maxpacket: 32 [ 995.461413][ T858] usb 12-1: New USB device found: idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 995.690337][T19197] netlink: 'syz.6.2778': attribute type 4 has an invalid length. [ 995.760456][ T858] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 995.760471][ T858] usb 12-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 995.762214][ T858] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.762224][ T858] usb 12-1: Product: syz [ 995.762231][ T858] usb 12-1: Manufacturer: syz [ 995.762239][ T858] usb 12-1: SerialNumber: syz [ 995.763783][ T858] usb 12-1: config 0 descriptor?? [ 996.106079][T19191] e1000e 0000:00:02.0 eth1: removed PHC [ 999.046212][T19231] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2785'. [ 999.525366][ C0] net_ratelimit: 286 callbacks suppressed [ 1002.138346][T19191] e1000e 0000:00:02.0 eth1: Hardware Error [ 1004.555373][ C2] net_ratelimit: 92 callbacks suppressed [ 1005.190896][T19191] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 1005.318032][T19191] kobject: 'eth1' (ffff8880416e07e0): kobject_cleanup, parent 0000000000000000 [ 1005.318049][T19191] kobject: 'eth1' (ffff8880416e07e0): calling ktype release [ 1005.318086][T19191] kobject: 'eth1': free name [ 1005.319458][T19191] ================================================================== [ 1005.319465][T19191] BUG: KASAN: slab-use-after-free in acpi_ns_get_attached_object+0x148/0x1b0 [ 1005.319484][T19191] Read of size 1 at addr ffff888022927480 by task syz.7.2780/19191 [ 1005.319493][T19191] [ 1005.319502][T19191] CPU: 3 UID: 0 PID: 19191 Comm: syz.7.2780 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1005.319518][T19191] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1005.319523][T19191] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1005.319529][T19191] Call Trace: [ 1005.319533][T19191] [ 1005.319538][T19191] dump_stack_lvl+0x100/0x190 [ 1005.319554][T19191] print_report+0x13d/0x4b0 [ 1005.319571][T19191] ? __virt_addr_valid+0x239/0x430 [ 1005.319589][T19191] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 1005.319616][T19191] kasan_report+0xdf/0x1c0 [ 1005.319634][T19191] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 1005.319648][T19191] acpi_ns_get_attached_object+0x148/0x1b0 [ 1005.319661][T19191] acpi_ex_resolve_node_to_value+0xb7/0x9a0 [ 1005.319675][T19191] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 1005.319692][T19191] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 1005.319706][T19191] ? acpi_ds_create_operand+0x267/0xc20 [ 1005.319722][T19191] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 1005.319734][T19191] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 1005.319747][T19191] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 1005.319763][T19191] ? __asan_memset+0x23/0x50 [ 1005.319775][T19191] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 1005.319793][T19191] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 1005.319808][T19191] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 1005.319825][T19191] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 1005.319840][T19191] ? acpi_ut_trace_ptr+0x101/0x2a0 [ 1005.319857][T19191] acpi_ds_exec_end_op+0xb78/0x1e60 [ 1005.319873][T19191] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 1005.319888][T19191] acpi_ps_parse_loop+0x5e1/0x26e0 [ 1005.319905][T19191] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 1005.319920][T19191] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 1005.319939][T19191] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 1005.319956][T19191] ? acpi_ut_create_thread_state+0x6d/0x170 [ 1005.319974][T19191] acpi_ps_parse_aml+0x81e/0x1120 [ 1005.319991][T19191] acpi_ps_execute_method+0x5c4/0xe90 [ 1005.320003][T19191] acpi_ns_evaluate+0x640/0x1670 [ 1005.320015][T19191] acpi_ut_evaluate_object+0xf7/0x610 [ 1005.320028][T19191] acpi_rs_get_prt_method_data+0xa0/0x150 [ 1005.320040][T19191] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 1005.320052][T19191] ? acpi_ut_status_exit+0x111/0x1c0 [ 1005.320069][T19191] ? acpi_rs_validate_parameters+0x104/0x210 [ 1005.320082][T19191] acpi_get_irq_routing_table+0xb8/0x140 [ 1005.320094][T19191] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 1005.320108][T19191] ? do_raw_spin_lock+0x128/0x260 [ 1005.320121][T19191] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 1005.320135][T19191] ? do_raw_spin_lock+0x128/0x260 [ 1005.320147][T19191] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 1005.320161][T19191] ? mark_held_locks+0x40/0x70 [ 1005.320177][T19191] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1005.320195][T19191] acpi_pci_irq_lookup+0x8e/0x6b0 [ 1005.320207][T19191] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 1005.320221][T19191] acpi_pci_irq_disable+0x1a8/0x360 [ 1005.320233][T19191] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 1005.320245][T19191] pcibios_disable_device+0x89/0xb0 [ 1005.320263][T19191] do_pci_disable_device+0x9f/0x100 [ 1005.320275][T19191] ? __pfx_do_pci_disable_device+0x10/0x10 [ 1005.320286][T19191] ? __dev_remove_pack+0x143/0x390 [ 1005.320300][T19191] pci_disable_device+0x130/0x270 [ 1005.320311][T19191] pci_device_remove+0xb2/0x1d0 [ 1005.320327][T19191] ? __pfx_pci_device_remove+0x10/0x10 [ 1005.320343][T19191] device_remove+0xcb/0x180 [ 1005.320358][T19191] device_release_driver_internal+0x441/0x610 [ 1005.320377][T19191] pci_stop_bus_device+0x120/0x160 [ 1005.320388][T19191] pci_stop_and_remove_bus_device+0x58/0xa0 [ 1005.320400][T19191] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 1005.320412][T19191] remove_store+0x123/0x140 [ 1005.320424][T19191] ? __pfx_remove_store+0x10/0x10 [ 1005.320437][T19191] ? find_held_lock+0x2b/0x80 [ 1005.320450][T19191] ? sysfs_file_kobj+0xe4/0x290 [ 1005.320466][T19191] ? sysfs_file_kobj+0xe4/0x290 [ 1005.320482][T19191] ? __pfx_remove_store+0x10/0x10 [ 1005.320494][T19191] dev_attr_store+0x58/0x80 [ 1005.320504][T19191] ? __pfx_dev_attr_store+0x10/0x10 [ 1005.320514][T19191] sysfs_kf_write+0xf2/0x150 [ 1005.320530][T19191] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1005.320544][T19191] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1005.320560][T19191] vfs_write+0x6af/0x1050 [ 1005.320574][T19191] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1005.320589][T19191] ? __pfx_vfs_write+0x10/0x10 [ 1005.320602][T19191] ? find_held_lock+0x2b/0x80 [ 1005.320619][T19191] ksys_write+0x12a/0x250 [ 1005.320632][T19191] ? __pfx_ksys_write+0x10/0x10 [ 1005.320648][T19191] __do_fast_syscall_32+0x14b/0x8c0 [ 1005.320660][T19191] ? lockdep_hardirqs_on+0x7d/0x110 [ 1005.320672][T19191] do_fast_syscall_32+0x32/0x70 [ 1005.320684][T19191] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1005.320698][T19191] RIP: 0023:0xf7f22fbc [ 1005.320708][T19191] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1005.320718][T19191] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1005.320730][T19191] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000880 [ 1005.320737][T19191] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1005.320744][T19191] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1005.320751][T19191] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1005.320757][T19191] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1005.320767][T19191] [ 1005.320771][T19191] [ 1005.320774][T19191] Allocated by task 1: [ 1005.320780][T19191] kasan_save_stack+0x30/0x50 [ 1005.320793][T19191] kasan_save_track+0x14/0x30 [ 1005.320806][T19191] __kasan_slab_alloc+0x89/0x90 [ 1005.320820][T19191] kmem_cache_alloc_noprof+0x269/0x6a0 [ 1005.320832][T19191] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 1005.320846][T19191] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 1005.320860][T19191] acpi_ds_build_internal_object+0x173/0x790 [ 1005.320873][T19191] acpi_ds_create_node+0xe3/0x280 [ 1005.320886][T19191] acpi_ds_exec_end_op+0x10cf/0x1e60 [ 1005.320899][T19191] acpi_ps_parse_loop+0x5e1/0x26e0 [ 1005.320913][T19191] acpi_ps_parse_aml+0x81e/0x1120 [ 1005.320931][T19191] acpi_ps_execute_table+0x393/0x500 [ 1005.320941][T19191] acpi_ns_execute_table+0x596/0x970 [ 1005.320952][T19191] acpi_ns_parse_table+0xcb/0x160 [ 1005.320963][T19191] acpi_ns_load_table+0xc9/0x490 [ 1005.320973][T19191] acpi_tb_load_namespace+0x2b0/0x8f0 [ 1005.320986][T19191] acpi_load_tables+0x89/0x160 [ 1005.321002][T19191] acpi_init+0x146/0x840 [ 1005.321014][T19191] do_one_initcall+0x11c/0x6f0 [ 1005.321023][T19191] kernel_init_freeable+0x6ea/0x7b0 [ 1005.321039][T19191] kernel_init+0x21/0x1d0 [ 1005.321052][T19191] ret_from_fork+0x730/0xd60 [ 1005.321061][T19191] ret_from_fork_asm+0x1a/0x30 [ 1005.321070][T19191] [ 1005.321073][T19191] Freed by task 8016: [ 1005.321078][T19191] kasan_save_stack+0x30/0x50 [ 1005.321091][T19191] kasan_save_track+0x14/0x30 [ 1005.321104][T19191] kasan_save_free_info+0x3b/0x70 [ 1005.321114][T19191] __kasan_slab_free+0x5f/0x80 [ 1005.321128][T19191] kmem_cache_free+0x127/0x6c0 [ 1005.321138][T19191] acpi_os_release_object+0x1c/0x30 [ 1005.321147][T19191] acpi_ut_delete_object_desc+0xea/0x130 [ 1005.321160][T19191] acpi_ut_update_ref_count.part.0+0x510/0x2250 [ 1005.321171][T19191] acpi_ut_update_object_reference+0x5f9/0x800 [ 1005.321182][T19191] acpi_ut_remove_reference+0x192/0x1d0 [ 1005.321192][T19191] acpi_rs_get_prt_method_data+0xcd/0x150 [ 1005.321203][T19191] acpi_get_irq_routing_table+0xb8/0x140 [ 1005.321214][T19191] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 1005.321226][T19191] acpi_pci_irq_lookup+0x8e/0x6b0 [ 1005.321236][T19191] acpi_pci_irq_disable+0x1a8/0x360 [ 1005.321247][T19191] pcibios_disable_device+0x89/0xb0 [ 1005.321262][T19191] do_pci_disable_device+0x9f/0x100 [ 1005.321272][T19191] pci_disable_device+0x130/0x270 [ 1005.321282][T19191] virtio_pci_remove+0xcf/0x110 [ 1005.321294][T19191] pci_device_remove+0xb2/0x1d0 [ 1005.321308][T19191] device_remove+0xcb/0x180 [ 1005.321321][T19191] device_release_driver_internal+0x441/0x610 [ 1005.321337][T19191] pci_stop_bus_device+0x120/0x160 [ 1005.321346][T19191] pci_stop_and_remove_bus_device+0x58/0xa0 [ 1005.321357][T19191] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 1005.321368][T19191] remove_store+0x123/0x140 [ 1005.321378][T19191] dev_attr_store+0x58/0x80 [ 1005.321387][T19191] sysfs_kf_write+0xf2/0x150 [ 1005.321401][T19191] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1005.321414][T19191] vfs_write+0x6af/0x1050 [ 1005.321426][T19191] ksys_write+0x12a/0x250 [ 1005.321438][T19191] __do_fast_syscall_32+0x14b/0x8c0 [ 1005.321449][T19191] do_fast_syscall_32+0x32/0x70 [ 1005.321460][T19191] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1005.321473][T19191] [ 1005.321475][T19191] The buggy address belongs to the object at ffff888022927478 [ 1005.321475][T19191] which belongs to the cache Acpi-Operand of size 72 [ 1005.321484][T19191] The buggy address is located 8 bytes inside of [ 1005.321484][T19191] freed 72-byte region [ffff888022927478, ffff8880229274c0) [ 1005.321494][T19191] [ 1005.321497][T19191] The buggy address belongs to the physical page: [ 1005.321502][T19191] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880229276e8 pfn:0x22927 [ 1005.321512][T19191] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1005.321522][T19191] page_type: f5(slab) [ 1005.321532][T19191] raw: 00fff00000000200 ffff88801d44da40 ffffea00008a4890 ffffea00008a4590 [ 1005.321541][T19191] raw: ffff8880229276e8 0000000200270007 00000000f5000000 0000000000000000 [ 1005.321547][T19191] page dumped because: kasan: bad access detected [ 1005.321552][T19191] page_owner tracks the page as allocated [ 1005.321556][T19191] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2369609488 [ 1005.321572][T19191] post_alloc_hook+0xfd/0x120 [ 1005.321581][T19191] get_page_from_freelist+0x1113/0x35e0 [ 1005.321593][T19191] __alloc_frozen_pages_noprof+0x2f6/0x3190 [ 1005.321604][T19191] new_slab+0xb1/0x6d0 [ 1005.321614][T19191] refill_objects+0xe3/0x410 [ 1005.321624][T19191] __pcs_replace_empty_main+0x35e/0x650 [ 1005.321634][T19191] kmem_cache_alloc_noprof+0x4bf/0x6a0 [ 1005.321647][T19191] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 1005.321660][T19191] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 1005.321674][T19191] acpi_ds_create_operand+0x6be/0xc20 [ 1005.321688][T19191] acpi_ds_eval_data_object_operands+0x125/0x640 [ 1005.321702][T19191] acpi_ds_exec_end_op+0xe41/0x1e60 [ 1005.321715][T19191] acpi_ps_parse_loop+0x5e1/0x26e0 [ 1005.321729][T19191] acpi_ps_parse_aml+0x81e/0x1120 [ 1005.321744][T19191] acpi_ps_execute_table+0x393/0x500 [ 1005.321753][T19191] acpi_ns_execute_table+0x596/0x970 [ 1005.321764][T19191] page_owner free stack trace missing [ 1005.321767][T19191] [ 1005.321770][T19191] Memory state around the buggy address: [ 1005.321775][T19191] ffff888022927380: 00 fc fc fc fc fa fb fb fb fb fb fb fb fb fc fc [ 1005.321782][T19191] ffff888022927400: fc fc fa fb fb fb fb fb fb fb fb fc fc fc fc fa [ 1005.321789][T19191] >ffff888022927480: fb fb fb fb fb fb fb fb fc fc fc fc fa fb fb fb [ 1005.321795][T19191] ^ [ 1005.321800][T19191] ffff888022927500: fb fb fb fb fb fc fc fc fc fa fb fb fb fb fb fb [ 1005.321808][T19191] ffff888022927580: fb fb fc fc fc fc fa fb fb fb fb fb fb fb fb fc [ 1005.321813][T19191] ================================================================== [ 1005.322270][T19191] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1005.705849][T19191] CPU: 2 UID: 0 PID: 19191 Comm: syz.7.2780 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1005.709176][T19191] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1005.711423][T19191] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1005.714589][T19191] Call Trace: [ 1005.715639][T19191] [ 1005.716654][T19191] dump_stack_lvl+0x100/0x190 [ 1005.718134][T19191] vpanic+0x553/0x970 [ 1005.719400][T19191] ? __pfx_vpanic+0x10/0x10 [ 1005.721081][T19191] ? mark_held_locks+0x40/0x70 [ 1005.722628][T19191] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 1005.724496][T19191] panic+0xd1/0xe0 [ 1005.725685][T19191] ? __pfx_panic+0x10/0x10 [ 1005.727070][T19191] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 1005.728934][T19191] ? preempt_schedule+0x57/0xd0 [ 1005.730541][T19191] check_panic_on_warn.cold+0x19/0x34 [ 1005.732230][T19191] end_report.part.0+0x3a/0x90 [ 1005.733741][T19191] kasan_report.cold+0xe/0x18 [ 1005.735229][T19191] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 1005.737084][T19191] acpi_ns_get_attached_object+0x148/0x1b0 [ 1005.738922][T19191] acpi_ex_resolve_node_to_value+0xb7/0x9a0 [ 1005.740853][T19191] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 1005.742482][T19191] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 1005.744495][T19191] ? acpi_ds_create_operand+0x267/0xc20 [ 1005.746270][T19191] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 1005.747972][T19191] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 1005.749903][T19191] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 1005.751593][T19191] ? __asan_memset+0x23/0x50 [ 1005.753052][T19191] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 1005.754956][T19191] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 1005.756727][T19191] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 1005.758675][T19191] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 1005.760724][T19191] ? acpi_ut_trace_ptr+0x101/0x2a0 [ 1005.762329][T19191] acpi_ds_exec_end_op+0xb78/0x1e60 [ 1005.763961][T19191] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 1005.765707][T19191] acpi_ps_parse_loop+0x5e1/0x26e0 [ 1005.767317][T19191] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 1005.768994][T19191] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 1005.770818][T19191] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 1005.772689][T19191] ? acpi_ut_create_thread_state+0x6d/0x170 [ 1005.774984][T19191] acpi_ps_parse_aml+0x81e/0x1120 [ 1005.776581][T19191] acpi_ps_execute_method+0x5c4/0xe90 [ 1005.778232][T19191] acpi_ns_evaluate+0x640/0x1670 [ 1005.779858][T19191] acpi_ut_evaluate_object+0xf7/0x610 [ 1005.781630][T19191] acpi_rs_get_prt_method_data+0xa0/0x150 [ 1005.783440][T19191] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 1005.785401][T19191] ? acpi_ut_status_exit+0x111/0x1c0 [ 1005.787061][T19191] ? acpi_rs_validate_parameters+0x104/0x210 [ 1005.788924][T19191] acpi_get_irq_routing_table+0xb8/0x140 [ 1005.790869][T19191] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 1005.792838][T19191] ? do_raw_spin_lock+0x128/0x260 [ 1005.794419][T19191] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 1005.796316][T19191] ? do_raw_spin_lock+0x128/0x260 [ 1005.797969][T19191] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 1005.799963][T19191] ? mark_held_locks+0x40/0x70 [ 1005.801462][T19191] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1005.803298][T19191] acpi_pci_irq_lookup+0x8e/0x6b0 [ 1005.804916][T19191] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 1005.806670][T19191] acpi_pci_irq_disable+0x1a8/0x360 [ 1005.808294][T19191] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 1005.810123][T19191] pcibios_disable_device+0x89/0xb0 [ 1005.811777][T19191] do_pci_disable_device+0x9f/0x100 [ 1005.813390][T19191] ? __pfx_do_pci_disable_device+0x10/0x10 [ 1005.815200][T19191] ? __dev_remove_pack+0x143/0x390 [ 1005.816799][T19191] pci_disable_device+0x130/0x270 [ 1005.818362][T19191] pci_device_remove+0xb2/0x1d0 [ 1005.819928][T19191] ? __pfx_pci_device_remove+0x10/0x10 [ 1005.821652][T19191] device_remove+0xcb/0x180 [ 1005.823093][T19191] device_release_driver_internal+0x441/0x610 [ 1005.825014][T19191] pci_stop_bus_device+0x120/0x160 [ 1005.826643][T19191] pci_stop_and_remove_bus_device+0x58/0xa0 [ 1005.828491][T19191] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 1005.830786][T19191] remove_store+0x123/0x140 [ 1005.832234][T19191] ? __pfx_remove_store+0x10/0x10 [ 1005.833833][T19191] ? find_held_lock+0x2b/0x80 [ 1005.835364][T19191] ? sysfs_file_kobj+0xe4/0x290 [ 1005.836892][T19191] ? sysfs_file_kobj+0xe4/0x290 [ 1005.838490][T19191] ? __pfx_remove_store+0x10/0x10 [ 1005.840106][T19191] dev_attr_store+0x58/0x80 [ 1005.841556][T19191] ? __pfx_dev_attr_store+0x10/0x10 [ 1005.843168][T19191] sysfs_kf_write+0xf2/0x150 [ 1005.844617][T19191] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1005.846260][T19191] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1005.847836][T19191] vfs_write+0x6af/0x1050 [ 1005.849186][T19191] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1005.851088][T19191] ? __pfx_vfs_write+0x10/0x10 [ 1005.852576][T19191] ? find_held_lock+0x2b/0x80 [ 1005.854031][T19191] ksys_write+0x12a/0x250 [ 1005.855387][T19191] ? __pfx_ksys_write+0x10/0x10 [ 1005.856906][T19191] __do_fast_syscall_32+0x14b/0x8c0 [ 1005.858555][T19191] ? lockdep_hardirqs_on+0x7d/0x110 [ 1005.860220][T19191] do_fast_syscall_32+0x32/0x70 [ 1005.861762][T19191] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1005.863720][T19191] RIP: 0023:0xf7f22fbc [ 1005.864996][T19191] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1005.871167][T19191] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1005.873729][T19191] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000880 [ 1005.876372][T19191] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1005.878921][T19191] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1005.881409][T19191] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1005.883816][T19191] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1005.886259][T19191] [ 1005.887916][T19191] Kernel Offset: disabled [ 1005.889261][T19191] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:24:44 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff9cc575c0 RBX=ffff88802ae28840 RCX=ffffffff81e8f8e3 RDX=0000000000000000 RSI=0000000000000004 RDI=0000000000000001 RBP=0000000000000046 RSP=ffffc90000007fb0 R8 =0000000000000000 R9 =ffffed10055c5108 R10=ffff88802ae28843 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81d7bd3c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880952a0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f1601000 CR3=0000000051156000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 eed3ffffffff89a8 eeaaffffffff89a8 ee81ffffffff89a8 ee64ffffffff89a8 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fa1affffffff8bdd f9c4ffffffff8bdd f9b6ffffffff89a8 ef20ffffffff89a8 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fa90ffffffff8bdd fa7bffffffff8bdd fa69ffffffff8bdd fa60ffffffff8bdd ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f623ffffffff8be3 f59bffffffff8be3 f554ffffffff8be3 f51affffffff8be3 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f509ffffffff8be3 f4bdffffffff8be3 f4aeffffffff8be3 f4a4ffffffff8be3 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f48cffffffff8be3 f44effffffff8be3 f3ffffffffff8be3 f3e5ffffffff8be3 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f385ffffffff8be3 b40bffffffff8be3 b39fffffffff8bdd faa6ffffffff8bdd ZMM24=27b9d7eb27b9d7eb 27b9d7eb27b9d7eb 27b9d7eb27b9d7eb 27b9d7eb27b9d7eb 27b9d7eb27b9d7eb 27b9d7eb27b9d7eb 27b9d7eb27b9d7eb 27b9d7eb27b9d7eb ZMM25=215d3313215d3313 215d3313215d3313 215d3313215d3313 215d3313215d3313 215d3313215d3313 215d3313215d3313 215d3313215d3313 215d3313215d3313 ZMM26=c166234ac166234a c166234ac166234a c166234ac166234a c166234ac166234a c166234ac166234a c166234ac166234a c166234ac166234a c166234ac166234a ZMM27=219a0e7d219a0e7d 219a0e7d219a0e7d 219a0e7d219a0e7d 219a0e7d219a0e7d 219a0e7d219a0e7d 219a0e7d219a0e7d 219a0e7d219a0e7d 219a0e7d219a0e7d ZMM28=000001800000017f 0000017e0000017d 0000017c0000017b 0000017a00000179 0000017800000177 0000017600000175 0000017400000173 0000017200000171 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=c9310000c9310000 c9310000c9310000 c9310000c9310000 c9310000c9310000 c9310000c9310000 c9310000c9310000 c9310000c9310000 c9310000c9310000 info registers vcpu 1 CPU#1 RAX=00000261de951cd1 RBX=ffff88802af24040 RCX=00000000000006e0 RDX=0000000000000261 RSI=ffffffff81fd1a65 RDI=ffff88801400a580 RBP=000000ea0c92607c RSP=ffffc90000590db0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=1ffff920000b21c0 R13=0000000000000001 R14=0000000000000001 R15=ffff88802af24080 RIP=ffffffff81fd1a78 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880953a0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c230000 CR3=000000000fd96000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000080000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3e9fadc45554771c a65a5c5b38968720 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4235042ec368803b 8477287b5b1183ce ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9a4530c76e80afc1 d7fd06911d09fd0d ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 48001d04ca8e6199 393504a4152d7c6e ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000006200 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000261d9000261db e3321f007b44de00 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000261de00000004 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000261da5ebaa200 5bfdd6009479ae00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 062b540020e08000 000261dbe6e76e00 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0ab589322b6a87c5 e80dc679720599f5 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b2f760460f2436b9 0c4e91af49cc2a94 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6b63617020676e69 6e7261656c20646e 6553203a29306e61 6c7663616d206576 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2930312079727428 20676e6979727465 72202c73646e6f63 6573203520726574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6661206574656c70 6d6f6320746f6e20 6469642029302530 2f31303030323a5d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313a3a5b28203834 207265657020726f 6620656b61687364 6e6148203a326777 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a647261756765 726977205d334320 2020205b5d353734 3539392e33303031 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000000d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85bd5605 RDI=ffffffff9cf197a0 RBP=ffffffff9cf19760 RSP=ffffc900242169e8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=000000000000000d R14=0000000000000007 R15=ffffc90024216d00 RIP=ffffffff85bd562f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880954a0000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7471108 CR3=00000000719e3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001e800000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff931ed3ee RDX=1ffff9200099ef43 RSI=1ffff9200099ef42 RDI=ffffc90004cf7a20 RBP=ffffc90004cf7a10 RSP=ffffc90004cf7958 R8 =ffffffff931ed3f2 R9 =0000000000000007 R10=0000000000000200 R11=0000000000019ae8 R12=ffffc90004cf7a18 R13=ffffc90004cf79c8 R14=ffffc90004cf7e40 R15=ffffc90004cf79fc RIP=ffffffff81bad6ff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880955a0000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f745e2f0 CR3=000000004cff3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000