last executing test programs: 8.279073607s ago: executing program 3 (id=1528): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x29c0, 0x0) creat(0x0, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$inet_sctp(r0, 0x0, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x1800087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), r2) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000c1}, 0x4) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) waitid(0x2, 0x0, 0x0, 0x1000000, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f00000002c0)={0x0, 0xfb87, 0x400, 0x3, 0x32c}, &(0x7f0000000740)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb140, 0x20000, 0x6, 0x15e, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed79, 0x8, 0x3, 0x148}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x3, 0x125, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x40, 0x81, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x40, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r9, '\x00', {0xfffe, 0xd3, 0x0, 0x0}}, 0x0) 6.686607182s ago: executing program 3 (id=1540): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, r2, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x24}, 0x2, 0x34005}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "4b3f7633015aff9fa5e73369ed3ed4f938752184f1af2029", "14ef0f501fd4f4fc0d232b48a86ef0222fb6364766977f816acb8f51148dba1a"}}}}}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, 0x0, 0x0) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20240, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0), 0x8000, &(0x7f00000015c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x9000}}) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) waitid(0x2, 0x0, 0x0, 0x1000000, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f00000002c0)={0x0, 0xfb87, 0x400, 0x3, 0x32c}, &(0x7f0000000740)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb140, 0x20000, 0x6, 0x15e, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed79, 0x8, 0x3, 0x148}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x3, 0x125, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x40, 0x81, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x40, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r9, '\x00', {0xfffe, 0xd3, 0x0, 0x0}}, 0x0) 5.091752488s ago: executing program 2 (id=1543): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595e, 0x10000, 0x1, 0x52}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x8, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x1, {0x2, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x20) 5.016825674s ago: executing program 2 (id=1544): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0xfffff5d4}}, './file0\x00'}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000003c0)=0x4) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) read$FUSE(r3, &(0x7f0000004800)={0x2020}, 0x2020) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0x7, 0x7, 0xd8f9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000) 4.637621931s ago: executing program 1 (id=1546): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) getsockname$llc(r2, 0x0, &(0x7f0000000100)) openat(0xffffffffffffff9c, 0x0, 0xcaa81, 0x181) mount$fuse(0x0, 0x0, 0x0, 0x50000, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @broadcast}], 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1, 0x0, 0xfffffffe}}, 0x2e) sendmsg$inet6(r4, &(0x7f0000000100)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e21, 0x6, @empty}}, 0x8003, 0xbffc, 0xe652, 0x1, 0x134, 0x48, 0x7}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x1}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) 4.58162868s ago: executing program 2 (id=1547): mkdir(&(0x7f0000000e00)='./proc_dir\x00', 0x1ff) mount(0x0, &(0x7f0000001000)='./proc_dir\x00', &(0x7f0000001100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001200)='./proc_dir/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc_dir/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 3.815647849s ago: executing program 1 (id=1549): socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000980)='0 ', 0x2}, {&(0x7f00000009a0)='4 ', 0x2}, {&(0x7f00000009c0)='0 3', 0x3}], 0x3) (fail_nth: 2) 3.635228857s ago: executing program 1 (id=1550): r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x161d02) writev(r0, &(0x7f0000000840), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) dup(0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0) ioctl$BSG_IO(r4, 0x2285, &(0x7f0000000200)={0x51, 0x0, 0x0, 0x1, &(0x7f0000000040)='$', 0x0, 0x0, 0x1, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x20, 0x0, 0xeb}) 3.191973443s ago: executing program 3 (id=1551): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) getsockname$llc(r2, 0x0, &(0x7f0000000100)) openat(0xffffffffffffff9c, 0x0, 0xcaa81, 0x181) mount$fuse(0x0, 0x0, 0x0, 0x50000, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @broadcast}], 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1, 0x0, 0xfffffffe}}, 0x2e) sendmsg$inet6(r4, &(0x7f0000000100)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e21, 0x6, @empty}}, 0x8003, 0xbffc, 0xe652, 0x1, 0x134, 0x48, 0x7}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x1}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) 3.191291421s ago: executing program 2 (id=1552): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x40040, 0xd2, 0xf}, 0x18) unlink(&(0x7f0000000100)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x200000}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_INSNLIST(r2, 0x8008640b, &(0x7f00000edb40)={0x1, &(0x7f00000ed9c0)=[{0xe000003, 0xf, &(0x7f00000016c0)=[0x0, 0x1ff, 0x3, 0x2, 0x502dd8b8, 0x4b03, 0x4, 0x4, 0x3e69, 0x0, 0x9, 0xbb, 0x4, 0x2, 0x200], 0xa145, 0x7}]}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000006180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffe, 0x4, 0x2000, 0xa8, r4, r5, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x280000, &(0x7f0000000900)={'trans=virtio,', {[{@aname={'aname', 0x3d, '9p\x00'}}, {@cache_loose}, {@fscache}, {@dfltgid={'dfltgid', 0x3d, r5}}, {@cache_fscache}, {@afid={'afid', 0x3d, 0x4}}, {@cache_none}, {@version_9p2000}, {@dfltgid={'dfltgid', 0x3d, r6}}], [{@euid_eq={'euid', 0x3d, r7}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@dont_appraise}, {@smackfsdef={'smackfsdef', 0x3d, '.[!'}}]}}) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r10 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x158}}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r10, 0xc0184800, &(0x7f0000000100)={0x4, r9}) ioctl$DMA_BUF_SET_NAME_A(r12, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x102, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x4, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r13, 0xffffffffffffffff, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.439011648s ago: executing program 1 (id=1553): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1e2e81) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f023}) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x3000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "e4a18560d99f00", 0x800000}) r4 = dup(r0) r5 = openat$autofs(0xffffff9c, &(0x7f0000000280), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x19}, './file0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x210800, &(0x7f0000000540)=ANY=[@ANYBLOB='mode=0']) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r6, 0x2000012, 0xeff, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b9", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f80)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="950000000000000095000000000000009500000000000000d1a5ff72fce514e8b1ca366680d1b6e34866b2ff98fc615378bdbaad5ae96e95276830a34ce2ce7afb4b6236bd9bad4d2bcf82f21d93878c432097e2dd9f4ab0214254d953d89daee7a8b95b14ec1417abce3f7f924a6eebb1041511fde841e9136bf5bbeacd658591b31f7d0b11fc74f76ad5802f38f150"], &(0x7f00000007c0)='syzkaller\x00', 0x7846, 0xc7, &(0x7f0000000d00)=""/199, 0x41100, 0x18, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e00)={0x3, 0x8, 0x7fffffff, 0x7}, 0xfe12, 0x0, 0x0, 0x5, &(0x7f0000000ec0)=[r7, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff, r7], &(0x7f0000000f00)=[{0x4, 0x1, 0xe, 0x5}, {0x0, 0x1, 0x10, 0x9}, {0x5, 0x5, 0x0, 0x2}, {0x1, 0x4, 0x1, 0xf}, {0x4, 0x2, 0x1, 0x6}], 0x10, 0xffba}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@ifindex, 0xf, 0x1, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0]}, 0x40) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0x80000001, 0x1}) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_SET_PROPERTY(r8, 0x40086f52, &(0x7f0000000340)={0x2b, &(0x7f0000000080)=[{0x11, '\x00', @data=0x6, 0xf}]}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0xec, 0x12, 0x1, 0x70bd25, 0x100, {{@in=@dev={0xac, 0x14, 0x14, 0x14}, @in6=@local, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfc, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xfffffffffffffffc, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc, 0x800}, 0x80, 0x3505, 0x2, 0x0, 0x0, 0x20}}, 0xec}}, 0x844) r10 = openat$ipvs(0xffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000300)={'geneve1\x00', 0x1000}) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, &(0x7f0000000280)={{0xeb4, 0x8005}, {0x8, 0x8009}, 0x10000002, 0x7}) 1.409431092s ago: executing program 3 (id=1554): times(0xfffffffffffffffe) syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x2, 0x8, 0xd780, 0xa1, 0x0, 0x6, 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0xffffffffffffff4a, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x400, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x2}, @IFLA_XFRM_LINK={0x0, 0x1, 0xfffffffb}, @IFLA_XFRM_IF_ID={0x0, 0x2, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000200), 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.408255517s ago: executing program 0 (id=1555): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRES8=r0], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r1, &(0x7f0000000c40)=[{&(0x7f0000000180)="2e1221b23bb601c494d3df9be275963d86dd", 0x12}, {0x0}], 0x2) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) (rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) syz_open_procfs(0x0, &(0x7f0000002440)='net/ipv6_route\x00') (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) (async) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async) syz_open_procfs(0x0, &(0x7f0000000300)='net/anycast6\x00') (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) (async) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.388512171s ago: executing program 3 (id=1556): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x29c0, 0x0) creat(0x0, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) sendmsg$inet_sctp(r0, 0x0, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x1800087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), r2) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000c1}, 0x4) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) waitid(0x2, 0x0, 0x0, 0x1000000, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f00000002c0)={0x0, 0xfb87, 0x400, 0x3, 0x32c}, &(0x7f0000000740)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb140, 0x20000, 0x6, 0x15e, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed79, 0x8, 0x3, 0x148}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x3, 0x125, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x40, 0x81, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x40, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r9, '\x00', {0xfffe, 0xd3, 0x0, 0x0}}, 0x0) 1.388304576s ago: executing program 0 (id=1557): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000200), 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000200)=[r4, r3, r3], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 1.200470204s ago: executing program 0 (id=1558): bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config/usb_gadget/g1/functions/uvc.0/streaming/color_matching/my_color3/bColorPrimaries\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.0/streaming/color_matching/my_color2/bMatrixCoefficients\x00', 0x2, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.0/streaming/color_matching/my_color3/bColorPrimaries\x00', 0x2, 0x0) write(r0, &(0x7f0000000640)="8f0db916577ef6e8ea998f7241fdfacf97ed0b9169de09baa6b1096b5401fe6143a0d6e255609bafbbfd58ea3ec536daed0fe07e08955e1a261b4a293493773edf8a0d33070000009b5bb8b8445315c92c4b6f865d5e5976c74082f82952048d7dd12802034e8f4a329b5fe008d0807e1098a490d40feb1134e8c2f304e8cc96e2e0ee680f55932e4eaaa248721987a249a80dbaf746ddbc002dfbbb69861bbadbb7942918571c9ef4382a10439c90509b905661f6112ccab21e952ba296311167a6228808", 0xc5) 1.042693077s ago: executing program 2 (id=1559): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, r2, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x24}, 0x2, 0x34005}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "4b3f7633015aff9fa5e73369ed3ed4f938752184f1af2029", "14ef0f501fd4f4fc0d232b48a86ef0222fb6364766977f816acb8f51148dba1a"}}}}}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, 0x0, 0x0) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20240, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0), 0x8000, &(0x7f00000015c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x9000}}) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0xffffffffffffffff}) getpeername$unix(r8, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) 382.714µs ago: executing program 0 (id=1564): r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x62, &(0x7f00000000c0)=[{&(0x7f0000000140)="8c4a", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 0s ago: executing program 2 (id=1565): r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x62, &(0x7f00000000c0)=[{&(0x7f0000000140)="8c4a", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) (fail_nth: 2) kernel console output (not intermixed with test programs): ] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 105.766976][ T6928] FAULT_INJECTION: forcing a failure. [ 105.766976][ T6928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.771787][ T6928] CPU: 0 UID: 0 PID: 6928 Comm: syz.1.311 Tainted: G S syzkaller #0 PREEMPT(full) [ 105.771807][ T6928] Tainted: [S]=CPU_OUT_OF_SPEC [ 105.771811][ T6928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.771817][ T6928] Call Trace: [ 105.771863][ T6928] [ 105.771868][ T6928] dump_stack_lvl+0x100/0x190 [ 105.771939][ T6928] should_fail_ex.cold+0x5/0xa [ 105.771959][ T6928] _copy_from_user+0x2e/0xd0 [ 105.771995][ T6928] get_compat_msghdr+0xb3/0x480 [ 105.772040][ T6928] ? __pfx_get_compat_msghdr+0x10/0x10 [ 105.772061][ T6928] ___sys_sendmsg+0x1b6/0x1e0 [ 105.772080][ T6928] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.772098][ T6928] ? find_held_lock+0x2b/0x80 [ 105.772125][ T6928] __sys_sendmsg+0x160/0x210 [ 105.772139][ T6928] ? __pfx___sys_sendmsg+0x10/0x10 [ 105.772157][ T6928] ? __pfx_ksys_write+0x10/0x10 [ 105.772176][ T6928] __do_fast_syscall_32+0xe7/0x970 [ 105.772198][ T6928] ? lockdep_hardirqs_on+0x78/0x100 [ 105.772223][ T6928] do_fast_syscall_32+0x32/0x70 [ 105.772241][ T6928] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 105.772268][ T6928] RIP: 0023:0xf7f13fec [ 105.772319][ T6928] Code: Unable to access opcode bytes at 0xf7f13fc2. [ 105.772346][ T6928] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 105.772357][ T6928] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 105.772363][ T6928] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000000 [ 105.772369][ T6928] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 105.772375][ T6928] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 105.772380][ T6928] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 105.772393][ T6928] [ 105.840022][ T6923] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 87085 usecs [ 105.856557][ T6923] pci 0000:00:01.0: Adding to iommu group 1 [ 105.866259][ T6923] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 105.868810][ T6923] pci 0000:00:01.0: vgaarb: bridge control possible [ 105.871206][ T6923] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 105.895797][ T9] usb 44-1: device descriptor read/8, error -110 [ 105.904235][ T6918] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 105.920812][ T6923] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 105.924359][ T6923] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 105.928694][ T6923] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 105.943654][ T6923] [drm] Found bochs VGA, ID 0xb0c5. [ 105.945627][ T6923] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 105.952999][ T6936] netlink: 128 bytes leftover after parsing attributes in process `syz.2.312'. [ 105.954491][ T6923] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 105.968120][ T6936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.010510][ T6923] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 106.047562][ T6942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'. [ 106.048851][ T6944] 9p: Bad value for 'rfdno' [ 106.050482][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'. [ 106.061583][ T6944] pimreg: tun_chr_ioctl cmd 1074025678 [ 106.063609][ T6944] pimreg: group set to 768 [ 106.065328][ T6944] pimreg: tun_chr_ioctl cmd 1074025677 [ 106.067731][ T6944] pimreg: linktype set to 768 [ 106.283805][ T9] usb usb44-port1: attempt power cycle [ 106.359408][ T6955] fuse: fd is not a fuse device [ 106.507969][ T6968] netlink: 128 bytes leftover after parsing attributes in process `syz.0.325'. [ 106.522036][ T6968] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.566645][ T6974] FAULT_INJECTION: forcing a failure. [ 106.566645][ T6974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.573809][ T6974] CPU: 2 UID: 0 PID: 6974 Comm: syz.1.328 Tainted: G S syzkaller #0 PREEMPT(full) [ 106.573827][ T6974] Tainted: [S]=CPU_OUT_OF_SPEC [ 106.573832][ T6974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.573838][ T6974] Call Trace: [ 106.573842][ T6974] [ 106.573847][ T6974] dump_stack_lvl+0x100/0x190 [ 106.573865][ T6974] should_fail_ex.cold+0x5/0xa [ 106.573878][ T6974] _copy_from_user+0x2e/0xd0 [ 106.573896][ T6974] move_addr_to_kernel+0x65/0x170 [ 106.573909][ T6974] get_compat_msghdr+0x3c7/0x480 [ 106.573927][ T6974] ? __pfx_get_compat_msghdr+0x10/0x10 [ 106.573946][ T6974] ? _kstrtoull+0x13c/0x1f0 [ 106.573958][ T6974] ? __pfx__kstrtoull+0x10/0x10 [ 106.573971][ T6974] ___sys_sendmsg+0x1b6/0x1e0 [ 106.573984][ T6974] ? __pfx____sys_sendmsg+0x10/0x10 [ 106.573995][ T6974] ? __lock_acquire+0x49f/0x1a40 [ 106.574030][ T6974] __sys_sendmmsg+0x309/0x440 [ 106.574048][ T6974] ? __pfx___sys_sendmmsg+0x10/0x10 [ 106.574062][ T6974] ? find_held_lock+0x2b/0x80 [ 106.574080][ T6974] ? __mutex_unlock_slowpath+0x35d/0x930 [ 106.574102][ T6974] ? fput+0x79/0x100 [ 106.574115][ T6974] ? ksys_write+0x1ac/0x250 [ 106.574128][ T6974] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 106.574145][ T6974] ? lockdep_hardirqs_on+0x78/0x100 [ 106.574159][ T6974] __do_fast_syscall_32+0xe7/0x970 [ 106.574178][ T6974] ? lockdep_hardirqs_on+0x78/0x100 [ 106.574191][ T6974] do_fast_syscall_32+0x32/0x70 [ 106.574204][ T6974] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 106.574218][ T6974] RIP: 0023:0xf7f13fec [ 106.574231][ T6974] Code: Unable to access opcode bytes at 0xf7f13fc2. [ 106.574236][ T6974] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 106.574246][ T6974] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000440 [ 106.574253][ T6974] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.574258][ T6974] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 106.574276][ T6974] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 106.574283][ T6974] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 106.574296][ T6974] [ 106.677657][ T6978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.330'. [ 106.931666][ T6992] fuse: fd is not a fuse device [ 107.185925][ T9] usb usb44-port1: unable to enumerate USB device [ 107.242075][ T6999] 9p: Bad value for 'rfdno' [ 107.424284][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.337'. [ 107.431866][ T7005] netlink: 337 bytes leftover after parsing attributes in process `syz.0.337'. [ 107.443984][ T7005] netlink: 337 bytes leftover after parsing attributes in process `syz.0.337'. [ 107.706636][ T7020] netlink: 128 bytes leftover after parsing attributes in process `syz.0.341'. [ 107.711496][ T7020] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.382401][ T7034] fuse: fd is not a fuse device [ 108.678386][ T7049] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 108.681255][ T7049] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 108.694549][ T7049] vhci_hcd vhci_hcd.0: Device attached [ 108.724945][ T7059] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 108.744940][ T7059] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 108.818701][ T7063] fuse: fd is not a fuse device [ 108.876179][ T7065] overlayfs: failed to clone upperpath [ 108.993490][ T5828] usb 44-1: SetAddress Request (10) to port 0 [ 108.999558][ T5828] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 109.206587][ T7080] overlayfs: failed to clone lowerpath [ 109.349434][ T7054] vhci_hcd: connection reset by peer [ 109.351587][ T5893] vhci_hcd vhci_hcd.3: stop threads [ 109.353879][ T5893] vhci_hcd vhci_hcd.3: release socket [ 109.359665][ T5893] vhci_hcd vhci_hcd.3: disconnect device [ 109.644377][ T7091] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 109.650861][ T7091] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 109.974216][ T7097] overlayfs: failed to clone upperpath [ 110.700980][ T7103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.504918][ T7129] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 111.685677][ T7128] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 111.709237][ T7128] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 111.711667][ T7128] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 111.716502][ T7128] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 111.719287][ T7128] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 111.735590][ T7128] pci 0000:00:01.0: Adding to iommu group 1 [ 111.744251][ T7129] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 111.752532][ T7128] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 111.754501][ T7128] pci 0000:00:01.0: vgaarb: bridge control possible [ 111.756382][ T7128] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 111.771138][ T7128] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 111.775088][ T7128] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 111.778390][ T7128] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 111.792884][ T7128] [drm] Found bochs VGA, ID 0xb0c5. [ 111.794814][ T7128] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 111.807417][ T7128] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 111.863968][ T7128] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 112.305890][ T7152] fuse: fd is not a fuse device [ 112.337805][ T7154] __nla_validate_parse: 1 callbacks suppressed [ 112.337815][ T7154] netlink: 24 bytes leftover after parsing attributes in process `syz.3.384'. [ 112.351906][ T7154] geneve2: entered promiscuous mode [ 112.778730][ T7170] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 112.857533][ T7170] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 112.893809][ T7170] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 112.896390][ T7170] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 112.898835][ T7170] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 112.906025][ T7170] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 112.953893][ T7170] pci 0000:00:01.0: Adding to iommu group 1 [ 112.962646][ T7169] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 112.967448][ T7170] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 112.969601][ T7170] pci 0000:00:01.0: vgaarb: bridge control possible [ 112.971700][ T7170] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 112.984046][ T7170] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 112.987219][ T7170] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 112.991204][ T7170] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 113.005281][ T7170] [drm] Found bochs VGA, ID 0xb0c5. [ 113.007645][ T7170] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 113.027507][ T7170] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 113.092696][ T7170] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 113.482883][ T7185] netlink: 32 bytes leftover after parsing attributes in process `syz.0.394'. [ 113.493237][ T7187] netlink: 60 bytes leftover after parsing attributes in process `syz.2.395'. [ 113.513142][ T7187] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 113.552125][ T7189] netlink: 'syz.0.396': attribute type 10 has an invalid length. [ 113.556150][ T7189] syz_tun: entered promiscuous mode [ 113.569363][ T7189] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 113.589624][ T5821] bond0: (slave bond_slave_0): interface is now down [ 113.595449][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.396'. [ 113.596983][ T5821] bond0: (slave bond_slave_1): interface is now down [ 113.604991][ T5821] bond0: (slave syz_tun): interface is now down [ 113.612628][ T5821] bond0: now running without any active interface! [ 113.862162][ T7193] Process accounting resumed [ 114.056714][ T5828] usb 44-1: device descriptor read/8, error -110 [ 114.475406][ T5828] usb usb44-port1: attempt power cycle [ 115.065467][ T5828] usb usb44-port1: unable to enumerate USB device [ 115.413573][ T7228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.408'. [ 115.523270][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 115.679233][ T10] usb 6-1: config 0 has no interfaces? [ 115.681708][ T10] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 115.685636][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.693953][ T10] usb 6-1: config 0 descriptor?? [ 115.901150][ T7212] netlink: 'syz.1.402': attribute type 39 has an invalid length. [ 115.918481][ T7263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.419'. [ 115.921636][ T7263] netlink: 277 bytes leftover after parsing attributes in process `syz.0.419'. [ 115.926141][ T7263] netlink: 277 bytes leftover after parsing attributes in process `syz.0.419'. [ 116.039012][ T5836] usb 6-1: USB disconnect, device number 7 [ 116.503758][ T7273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.423'. [ 117.015640][ T5755] Bluetooth: hci1: command 0x2016 tx timeout [ 117.077034][ T7280] wg2 speed is unknown, defaulting to 1000 [ 117.153643][ T7280] wg2 speed is unknown, defaulting to 1000 [ 117.157765][ T7280] wg2 speed is unknown, defaulting to 1000 [ 117.412810][ T24] wg2 speed is unknown, defaulting to 1000 [ 117.415608][ T7280] infiniband syz2: set active [ 117.418523][ T7280] infiniband syz2: added wg2 [ 117.419892][ T7287] netlink: 'syz.1.427': attribute type 10 has an invalid length. [ 117.428057][ T7287] netlink: 152 bytes leftover after parsing attributes in process `syz.1.427'. [ 117.436561][ T7290] netlink: 60 bytes leftover after parsing attributes in process `syz.3.428'. [ 117.442710][ T7292] afs: Unknown parameter 'uid' [ 117.445658][ T7280] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 117.453088][ T7280] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 117.466367][ T7280] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 117.575131][ T7280] RDS/IB: syz2: added [ 117.576699][ T7280] smc: adding ib device syz2 with port count 1 [ 117.578742][ T7280] smc: ib device syz2 port 1 has no pnetid [ 117.582420][ T24] wg2 speed is unknown, defaulting to 1000 [ 117.607144][ T7280] wg2 speed is unknown, defaulting to 1000 [ 117.774849][ T7280] wg2 speed is unknown, defaulting to 1000 [ 117.926666][ T7280] wg2 speed is unknown, defaulting to 1000 [ 118.030253][ T7280] wg2 speed is unknown, defaulting to 1000 [ 118.873290][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 119.014776][ T10] usb 8-1: device descriptor read/64, error -71 [ 119.093346][ T5103] Bluetooth: hci1: command 0x2016 tx timeout [ 119.253309][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 119.393279][ T10] usb 8-1: device descriptor read/64, error -71 [ 119.503511][ T10] usb usb8-port1: attempt power cycle [ 119.600731][ T7329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.440'. [ 119.843281][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 119.864150][ T10] usb 8-1: device descriptor read/8, error -71 [ 120.103290][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 120.123713][ T10] usb 8-1: device descriptor read/8, error -71 [ 120.236134][ T10] usb usb8-port1: unable to enumerate USB device [ 120.606728][ T7348] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 120.674825][ T7349] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 120.695665][ T7349] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 120.699197][ T7349] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 120.702345][ T7349] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 120.706656][ T7349] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 120.721587][ T7349] pci 0000:00:01.0: Adding to iommu group 1 [ 120.730051][ T7349] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 120.732755][ T7349] pci 0000:00:01.0: vgaarb: bridge control possible [ 120.733429][ T7344] syz.2.444 (7344) used greatest stack depth: 19104 bytes left [ 120.735543][ T7349] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 120.746276][ T7349] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 120.750187][ T7349] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 120.755000][ T7349] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 120.765346][ T7348] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 120.767849][ T7349] [drm] Found bochs VGA, ID 0xb0c5. [ 120.770886][ T7349] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 120.788393][ T7349] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 120.864077][ T7349] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 121.049388][ T7360] fuse: fd is not a fuse device [ 121.389546][ T7362] overlayfs: failed to clone lowerpath [ 121.393821][ T7362] overlayfs: failed to clone lowerpath [ 122.173726][ T7401] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 122.176376][ T7401] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 122.193398][ T7401] vhci_hcd vhci_hcd.0: Device attached [ 122.464396][ T10] usb 44-1: SetAddress Request (14) to port 0 [ 122.473708][ T10] usb 44-1: new SuperSpeed USB device number 14 using vhci_hcd [ 122.765393][ T7403] vhci_hcd: connection reset by peer [ 122.771279][ T12] vhci_hcd vhci_hcd.3: stop threads [ 122.773324][ T12] vhci_hcd vhci_hcd.3: release socket [ 122.779041][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 123.597757][ T7434] netlink: 40 bytes leftover after parsing attributes in process `syz.0.473'. [ 124.793930][ T7437] netlink: 128 bytes leftover after parsing attributes in process `syz.2.474'. [ 124.802457][ T7437] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.190909][ T7456] netlink: 72 bytes leftover after parsing attributes in process `syz.0.478'. [ 125.491196][ T7459] CUSE: unknown device info "" [ 125.492700][ T7459] CUSE: unknown device info "" [ 125.495002][ T7459] CUSE: unknown device info "" [ 125.496546][ T7459] CUSE: unknown device info "" [ 125.498182][ T7459] CUSE: unknown device info "" [ 125.500116][ T7459] CUSE: unknown device info "" [ 125.501636][ T7459] CUSE: unknown device info "" [ 125.505274][ T7459] CUSE: unknown device info "" [ 125.506842][ T7459] CUSE: unknown device info "" [ 125.508254][ T7459] CUSE: unknown device info "" [ 125.509819][ T7459] CUSE: unknown device info "" [ 125.511682][ T7459] CUSE: unknown device info "r" [ 125.513119][ T7459] CUSE: unknown device info "#" [ 125.515607][ T7459] CUSE: unknown device info "" [ 125.517161][ T7459] CUSE: unknown device info "" [ 125.518705][ T7459] CUSE: unknown device info "" [ 125.520178][ T7459] CUSE: DEVNAME unspecified [ 125.966476][ T7468] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 126.011070][ T7473] lo speed is unknown, defaulting to 1000 [ 126.014050][ T7473] lo speed is unknown, defaulting to 1000 [ 126.020251][ T7473] lo speed is unknown, defaulting to 1000 [ 126.030891][ T7475] netlink: 40 bytes leftover after parsing attributes in process `syz.3.486'. [ 126.907643][ T7485] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 126.980756][ T7485] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 127.042676][ T7469] infiniband syz1: set active [ 127.113846][ T7469] infiniband syz1: added syz_tun [ 127.267479][ T7469] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 127.302902][ T7469] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 127.325962][ T7469] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 127.409044][ T7469] RDS/IB: syz1: added [ 127.421437][ T7469] smc: adding ib device syz1 with port count 1 [ 127.449621][ T7469] smc: ib device syz1 port 1 has no pnetid [ 127.573317][ T10] usb 44-1: device descriptor read/8, error -110 [ 127.963959][ T10] usb usb44-port1: attempt power cycle [ 128.526083][ T10] usb usb44-port1: unable to enumerate USB device [ 128.669267][ T10] lo speed is unknown, defaulting to 1000 [ 128.672238][ T7473] infiniband sz1: set active [ 128.677968][ T7473] infiniband sz1: added lo [ 128.684557][ T7473] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 128.691034][ T7473] infiniband sz1: Couldn't open port 1 [ 128.698698][ T7473] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 128.703630][ T7473] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 128.708953][ T7473] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 128.730393][ T7473] RDS/IB: sz1: added [ 128.731729][ T7473] smc: adding ib device sz1 with port count 1 [ 128.734588][ T7473] smc: ib device sz1 port 1 has no pnetid [ 128.736605][ T10] lo speed is unknown, defaulting to 1000 [ 128.746522][ T7473] lo speed is unknown, defaulting to 1000 [ 128.853615][ T7473] lo speed is unknown, defaulting to 1000 [ 129.019000][ T7518] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 129.021142][ T7518] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 129.036190][ T7518] vhci_hcd vhci_hcd.0: Device attached [ 129.303438][ T55] usb 40-1: SetAddress Request (2) to port 0 [ 129.308968][ T55] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 129.359093][ T7473] lo speed is unknown, defaulting to 1000 [ 129.499635][ T7473] lo speed is unknown, defaulting to 1000 [ 129.617244][ T7519] vhci_hcd: connection reset by peer [ 129.619161][ T5821] vhci_hcd vhci_hcd.1: stop threads [ 129.620883][ T5821] vhci_hcd vhci_hcd.1: release socket [ 129.622604][ T5821] vhci_hcd vhci_hcd.1: disconnect device [ 130.731854][ T7554] netlink: 216 bytes leftover after parsing attributes in process `syz.0.509'. [ 131.239575][ T7570] netlink: 'syz.3.515': attribute type 49 has an invalid length. [ 131.391218][ T7570] ip6gretap0: entered promiscuous mode [ 131.393924][ T7570] ip6gretap0: entered allmulticast mode [ 131.552611][ T7578] binder: 7577:7578 ioctl c00c6211 0 returned -14 [ 132.546393][ T7600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.521'. [ 132.552575][ T7600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.521'. [ 132.579367][ T7602] fuse: fd is not a fuse device [ 132.582728][ T7602] fuse: fd is not a fuse device [ 132.614474][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.616669][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.639085][ T7605] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.986485][ T7621] netlink: 'syz.1.529': attribute type 4 has an invalid length. [ 132.998901][ T7622] netlink: 76 bytes leftover after parsing attributes in process `syz.2.530'. [ 133.138228][ T7629] tracefs: Bad value for 'uid' [ 133.141184][ T7629] tracefs: Bad value for 'uid' [ 133.194178][ T7635] overlayfs: failed to clone upperpath [ 133.242845][ T7638] netlink: 16 bytes leftover after parsing attributes in process `syz.2.536'. [ 133.249536][ T7638] netlink: 16 bytes leftover after parsing attributes in process `syz.2.536'. [ 134.281266][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.539'. [ 134.296996][ T7648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.539'. [ 134.316088][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.321853][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.340193][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.351175][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.373514][ T55] usb 40-1: device descriptor read/8, error -110 [ 134.418376][ T7659] netlink: 64 bytes leftover after parsing attributes in process `syz.3.542'. [ 134.427346][ T7659] syzkaller1: entered promiscuous mode [ 134.429137][ T7659] syzkaller1: entered allmulticast mode [ 134.715564][ T7669] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 134.717760][ T7669] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 134.742516][ T7669] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 134.764838][ T55] usb usb40-port1: attempt power cycle [ 134.859319][ T7669] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 134.868747][ T7669] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 134.930210][ T7669] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 134.942582][ T7669] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 134.946390][ T7669] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 135.032578][ T7669] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 135.367416][ T55] usb usb40-port1: unable to enumerate USB device [ 136.774355][ T5103] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 136.774414][ T5755] Bluetooth: hci1: command 0x2016 tx timeout [ 136.778756][ T5755] Bluetooth: hci0: command 0x0c1a tx timeout [ 136.933299][ T5755] Bluetooth: hci2: command 0x0c1a tx timeout [ 137.013750][ T5755] Bluetooth: hci3: command 0x0c1a tx timeout [ 137.377150][ T7710] overlayfs: failed to resolve './file0/file1': -2 [ 137.955277][ T7723] filter_write: 3 callbacks suppressed [ 137.955290][ T7723] msr: Write to unrecognized MSR 0x1a0 by syz.1.559 (pid: 7723), tainting CPU_OUT_OF_SPEC. [ 137.966575][ T7723] msr: See https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/about for details. [ 138.853292][ T5755] Bluetooth: hci1: command 0x2016 tx timeout [ 139.013388][ T5755] Bluetooth: hci2: command 0x0c1a tx timeout [ 139.093479][ T5755] Bluetooth: hci3: command 0x0c1a tx timeout [ 139.944193][ T7759] IPVS: Scheduler module ip_vs_ not found [ 140.141726][ T7767] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 140.222874][ T7765] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 140.256383][ T7765] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 140.259040][ T7765] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 140.262334][ T7765] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 140.283536][ T7765] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 140.294697][ T7767] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 140.298269][ T7765] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 15050 usecs [ 140.319883][ T7765] pci 0000:00:01.0: Adding to iommu group 1 [ 140.329180][ T7765] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 140.331704][ T7765] pci 0000:00:01.0: vgaarb: bridge control possible [ 140.334061][ T7765] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 140.336767][ T7771] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 140.342507][ T7771] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 140.349033][ T7765] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 140.352198][ T7765] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 140.358528][ T7765] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 140.384065][ T7765] [drm] Found bochs VGA, ID 0xb0c5. [ 140.386119][ T7765] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 140.400920][ T7765] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 140.450874][ T7765] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 140.451044][ T5755] Bluetooth: hci3: unexpected event 0x3c length: 17 > 7 [ 140.684851][ T7779] netlink: 264 bytes leftover after parsing attributes in process `syz.1.578'. [ 140.693100][ T7779] openvswitch: netlink: Tunnel attr 116 out of range max 16 [ 140.933290][ T5755] Bluetooth: hci1: command 0x2016 tx timeout [ 141.103324][ T5755] Bluetooth: hci2: command 0x0c1a tx timeout [ 141.125869][ T7786] fuse: fd is not a fuse device [ 141.173326][ T5755] Bluetooth: hci3: command 0x0c1a tx timeout [ 141.185160][ T7788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.582'. [ 141.190743][ T7788] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.194307][ T7788] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.201598][ T7788] bridge0: entered allmulticast mode [ 141.258027][ T7790] smbdirect: ib_dev[syz2] renamed to [syz0] [ 141.681385][ T7798] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 141.745776][ T7798] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 141.763674][ T7798] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 141.766997][ T7798] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 141.770258][ T7798] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 141.774290][ T7798] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 141.792133][ T7798] pci 0000:00:01.0: Adding to iommu group 1 [ 141.801332][ T7798] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 141.803426][ T7802] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 141.804237][ T7798] pci 0000:00:01.0: vgaarb: bridge control possible [ 141.804253][ T7798] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 141.859513][ T7798] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 141.867355][ T7798] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 141.876703][ T7798] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 141.899656][ T7798] [drm] Found bochs VGA, ID 0xb0c5. [ 141.905203][ T7798] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 141.930362][ T7798] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 142.078164][ T7798] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 142.218545][ T7819] fuse: fd is not a fuse device [ 142.400417][ T7822] netlink: 'syz.0.592': attribute type 4 has an invalid length. [ 142.420026][ T7822] netlink: 'syz.0.592': attribute type 4 has an invalid length. [ 142.423580][ T55] lo speed is unknown, defaulting to 1000 [ 142.437064][ T55] lo speed is unknown, defaulting to 1000 [ 142.449882][ T5836] lo speed is unknown, defaulting to 1000 [ 142.589509][ T42] kauditd_printk_skb: 164 callbacks suppressed [ 142.589529][ T42] audit: type=1800 audit(1785441559.210:176): pid=7830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.593" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 142.673731][ T7832] team0: No ports can be present during mode change [ 143.131588][ T7857] fuse: fd is not a fuse device [ 144.175848][ T7879] netlink: 'syz.2.610': attribute type 2 has an invalid length. [ 144.244035][ T7885] fuse: fd is not a fuse device [ 144.289637][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.614'. [ 144.632198][ T7916] fuse: fd is not a fuse device [ 144.698583][ T7919] IPv6: addrconf: prefix option has invalid lifetime [ 145.343659][ T7941] fuse: fd is not a fuse device [ 145.678494][ T7957] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 145.685648][ T7957] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 145.795529][ T7963] fuse: fd is not a fuse device [ 145.881271][ T7969] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 146.022585][ T7969] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 146.040451][ T7969] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 146.043798][ T7969] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 146.046851][ T7969] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 146.050840][ T7969] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 146.076304][ T7969] pci 0000:00:01.0: Adding to iommu group 1 [ 146.081775][ T7969] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 146.084013][ T7969] pci 0000:00:01.0: vgaarb: bridge control possible [ 146.086436][ T7969] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 146.091142][ T7965] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 146.097688][ T7969] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 146.100717][ T7969] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 146.105266][ T7969] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 146.135838][ T7969] [drm] Found bochs VGA, ID 0xb0c5. [ 146.138049][ T7969] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 146.157139][ T7969] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 146.192760][ T7969] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 146.218729][ T7982] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 146.229841][ T7982] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 146.369714][ T7991] fuse: fd is not a fuse device [ 146.417709][ T7995] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 146.419783][ T7995] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 146.422926][ T7995] vhci_hcd vhci_hcd.0: Device attached [ 146.428989][ T7996] vhci_hcd: connection closed [ 146.432098][ T12] vhci_hcd vhci_hcd.3: stop threads [ 146.438086][ T12] vhci_hcd vhci_hcd.3: release socket [ 146.440303][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 146.846889][ T8017] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 146.864881][ T8017] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 147.067295][ T8021] fuse: fd is not a fuse device [ 147.194360][ T8030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.665'. [ 147.590407][ T8046] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 147.595170][ T8046] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 147.830582][ T8052] fuse: fd is not a fuse device [ 148.261839][ T12] tipc: Subscription rejected, illegal request [ 148.275653][ T8066] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 148.276925][ T8066] @0: renamed from bond_slave_1 (while UP) [ 148.339678][ T8066] wg2 speed is unknown, defaulting to 1000 [ 148.462064][ T8071] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 148.467420][ T8071] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 148.685099][ T8066] lo speed is unknown, defaulting to 1000 [ 148.716767][ T8077] fuse: fd is not a fuse device [ 148.882278][ T8085] netlink: 'syz.2.684': attribute type 1 has an invalid length. [ 148.896711][ T8085] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.908995][ T8085] bond2: (slave dummy0): Enslaving as a backup interface with an up link [ 148.913245][ T8085] netlink: 'syz.2.684': attribute type 10 has an invalid length. [ 148.915816][ T8085] netlink: 40 bytes leftover after parsing attributes in process `syz.2.684'. [ 148.919205][ T8085] dummy0: entered promiscuous mode [ 148.922936][ T8085] bond2: (slave dummy0): Releasing backup interface [ 149.259022][ T8097] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 149.265237][ T8097] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 149.322100][ T8100] overlayfs: failed to clone upperpath [ 150.317616][ T8119] netlink: 'syz.3.695': attribute type 1 has an invalid length. [ 150.320853][ T8119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.695'. [ 150.562961][ T8130] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 150.608148][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'. [ 150.619272][ T8132] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.622808][ T8132] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.626974][ T8134] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 150.645292][ T8134] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 150.647862][ T8134] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 150.650153][ T8134] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 150.654180][ T8134] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 150.665335][ T8134] pci 0000:00:01.0: Adding to iommu group 1 [ 150.670610][ T8134] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 150.672801][ T8134] pci 0000:00:01.0: vgaarb: bridge control possible [ 150.674857][ T8134] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 150.685105][ T8124] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 150.685342][ T8134] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 150.690950][ T8134] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 150.695478][ T8134] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 150.706061][ T8134] [drm] Found bochs VGA, ID 0xb0c5. [ 150.707872][ T8134] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 150.720234][ T8134] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 150.757358][ T8134] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 150.781872][ T5755] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 151.107355][ T8142] fuse: fd is not a fuse device [ 151.123425][ T5843] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 151.166740][ T8144] fuse: fd is not a fuse device [ 151.296701][ T5843] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 151.301402][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.311486][ T5843] usb 6-1: Product: syz [ 151.312836][ T5843] usb 6-1: Manufacturer: syz [ 151.324055][ T5843] usb 6-1: SerialNumber: syz [ 151.342020][ T5843] usb 6-1: config 0 descriptor?? [ 151.581295][ T8140] Invalid option length (327) for dns_resolver key [ 151.601428][ T5843] usb 6-1: USB disconnect, device number 8 [ 152.282381][ T8156] netlink: 'syz.2.706': attribute type 1 has an invalid length. [ 152.313623][ T8156] 8021q: adding VLAN 0 to HW filter on device bond3 [ 152.332721][ T8156] dummy0: left promiscuous mode [ 152.342553][ T8156] bond3: (slave dummy0): Enslaving as a backup interface with an up link [ 152.351270][ T8156] netlink: 'syz.2.706': attribute type 10 has an invalid length. [ 152.354043][ T8156] netlink: 40 bytes leftover after parsing attributes in process `syz.2.706'. [ 152.357356][ T8156] dummy0: entered promiscuous mode [ 152.388025][ T8156] bond3: (slave dummy0): Releasing backup interface [ 152.603654][ T8162] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 152.626272][ T8162] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 152.707737][ T8166] fuse: fd is not a fuse device [ 152.857767][ T8175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.715'. [ 152.881583][ T8175] team0: Port device team_slave_0 removed [ 154.011182][ T8194] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 154.179630][ T8198] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 154.194287][ T8194] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 154.229893][ T8198] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 154.239017][ T8198] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 154.248272][ T8198] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 154.279034][ T8198] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 154.299834][ T8198] pci 0000:00:01.0: Adding to iommu group 1 [ 154.315826][ T8198] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 154.318543][ T8198] pci 0000:00:01.0: vgaarb: bridge control possible [ 154.321104][ T8198] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 154.338801][ T8198] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 154.342221][ T8198] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 154.352990][ T8198] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 154.370603][ T8198] [drm] Found bochs VGA, ID 0xb0c5. [ 154.372866][ T8198] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 154.397621][ T8198] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 154.403026][ T8210] fuse: fd is not a fuse device [ 154.470291][ T8198] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 154.591790][ T8218] netlink: 128 bytes leftover after parsing attributes in process `syz.2.729'. [ 154.598757][ T8218] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.723997][ T8223] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 154.726806][ T8223] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 154.730806][ T8223] vhci_hcd vhci_hcd.0: Device attached [ 155.003312][ T6199] usb 40-1: SetAddress Request (6) to port 0 [ 155.009183][ T6199] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 155.388923][ T8224] vhci_hcd: connection reset by peer [ 155.398623][ T5821] vhci_hcd vhci_hcd.1: stop threads [ 155.400428][ T5821] vhci_hcd vhci_hcd.1: release socket [ 155.405927][ T5821] vhci_hcd vhci_hcd.1: disconnect device [ 156.050674][ T8250] fuse: fd is not a fuse device [ 156.221472][ T8248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.734'. [ 156.296435][ T8259] synth uevent: /bus/platform/drivers/intel_xhci_usb_sw: unknown uevent action string [ 156.320278][ T8262] synth uevent: /bus/platform/drivers/intel_xhci_usb_sw: unknown uevent action string [ 156.876163][ T8283] fuse: fd is not a fuse device [ 157.959259][ T8311] fuse: fd is not a fuse device [ 158.461843][ T8340] fuse: fd is not a fuse device [ 158.584114][ T5828] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 158.763527][ T5828] usb 6-1: Using ep0 maxpacket: 8 [ 158.769983][ T5828] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.776806][ T5828] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.787987][ T5828] usb 6-1: config 0 interface 0 has no altsetting 0 [ 158.794426][ T5828] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 158.797086][ T8350] 9p: Bad value for 'port' [ 158.800498][ T5828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.828522][ T5828] usb 6-1: config 0 descriptor?? [ 159.296674][ T5828] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 159.306649][ T5828] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 159.310262][ T5828] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 159.312719][ T5828] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 159.315948][ T5828] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 159.321853][ T5828] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 159.391393][ T8361] fuse: fd is not a fuse device [ 159.491362][ T5828] usb 6-1: USB disconnect, device number 9 [ 159.711926][ T8367] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 159.725218][ T8367] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 159.732887][ T8369] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 159.811173][ T8369] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 159.842700][ T8378] [U] [ 159.843842][ T8378] [U] [ 159.844738][ T8378] [U] [ 159.845761][ T8378] [U] [ 159.847685][ T8378] [U] [ 159.848618][ T8378] [U] [ 159.849661][ T8378] [U] [ 159.850574][ T8378] [U] [ 159.852128][ T8378] [U] [ 159.853051][ T8378] [U] [ 159.854006][ T8378] [U] [ 159.854912][ T8378] [U] [ 159.856454][ T8378] [U] [ 159.857362][ T8378] [U] [ 159.858254][ T8378] [U] [ 159.859440][ T8378] [U] [ 159.860937][ T8378] [U] [ 159.861851][ T8378] [U] [ 159.862752][ T8378] [U] [ 159.864070][ T8378] [U] [ 159.865516][ T8378] [U] [ 159.866449][ T8378] [U] [ 159.867371][ T8378] [U] [ 159.868261][ T8378] [U] [ 159.869207][ T8378] [U] [ 159.870105][ T8378] [U] [ 159.871012][ T8378] [U] [ 159.871915][ T8378] [U] [ 159.873892][ T8378] [U] [ 159.875166][ T8378] [U] [ 159.876773][ T8378] [U] [ 159.877983][ T8378] [U] [ 159.879491][ T8378] [U] [ 159.880729][ T8378] [U] [ 159.881958][ T8378] [U] [ 159.883348][ T8378] [U] [ 159.884804][ T8378] [U] [ 159.886045][ T8378] [U] [ 159.887296][ T8378] [U] [ 159.888490][ T8378] [U] [ 159.889840][ T8378] [U] [ 159.891022][ T8378] [U] [ 159.892179][ T8378] [U] [ 159.893323][ T8378] [U] [ 159.894681][ T8378] [U] [ 159.895910][ T8378] [U] [ 159.897094][ T8378] [U] [ 159.898288][ T8378] [U] [ 159.906345][ T8378] [U] [ 159.907619][ T8378] [U] [ 159.908826][ T8378] [U] [ 159.910018][ T8378] [U] [ 159.912843][ T8378] [U] [ 159.914076][ T8378] [U] [ 159.915289][ T8378] [U] [ 159.916481][ T8378] [U] [ 159.917877][ T8378] [U] [ 159.919086][ T8378] [U] [ 159.920291][ T8378] [U] [ 159.921530][ T8378] [U] [ 159.923015][ T8378] [U] [ 159.924059][ T8378] [U] [ 159.924960][ T8378] [U] [ 159.925854][ T8378] [U] [ 159.926856][ T8378] [U] [ 159.927789][ T8378] [U] [ 159.928675][ T8378] [U] [ 159.929558][ T8378] [U] [ 159.930464][ T8378] [U] [ 159.931382][ T8378] [U] [ 159.932271][ T8378] [U] [ 159.933173][ T8378] [U] [ 159.934226][ T8378] [U] [ 159.935140][ T8378] [U] [ 159.936034][ T8378] [U] [ 159.936929][ T8378] [U] [ 159.937880][ T8378] [U] [ 159.938764][ T8378] [U] [ 159.939659][ T8378] [U] [ 159.940545][ T8378] [U] [ 159.941455][ T8378] [U] [ 159.942339][ T8378] [U] [ 159.943254][ T8378] [U] [ 159.944162][ T8378] [U] [ 159.945359][ T8378] [U] [ 159.946253][ T8378] [U] [ 159.947160][ T8378] [U] [ 159.948058][ T8378] [U] [ 159.948980][ T8378] [U] [ 159.949865][ T8378] [U] [ 159.950748][ T8378] [U] [ 159.951640][ T8378] [U] [ 159.952535][ T8378] [U] [ 159.953426][ T8378] [U] [ 159.954313][ T8378] [U] [ 159.955201][ T8378] [U] [ 159.957704][ T8378] [U] [ 159.958636][ T8378] [U] [ 159.959530][ T8378] [U] [ 159.960412][ T8378] [U] [ 159.967096][ T8378] [U] [ 159.968041][ T8378] [U] [ 159.968945][ T8378] [U] [ 159.969821][ T8378] [U] [ 159.971310][ T8378] [U] [ 159.972219][ T8378] [U] [ 159.973117][ T8378] [U] [ 159.974000][ T8378] [U] [ 159.975060][ T8378] [U] [ 159.975967][ T8378] [U] [ 159.976859][ T8378] [U] [ 159.977741][ T8378] [U] [ 159.978799][ T8378] [U] [ 159.979701][ T8378] [U] [ 159.980596][ T8378] [U] [ 159.981500][ T8378] [U] [ 159.982470][ T8378] [U] [ 159.983380][ T8378] [U] [ 159.984264][ T8378] [U] [ 159.985198][ T8378] [U] [ 159.986267][ T8378] [U] [ 159.987168][ T8378] [U] [ 159.988059][ T8378] [U] [ 159.988940][ T8378] [U] [ 159.989986][ T8378] [U] [ 159.990899][ T8378] [U] [ 159.991799][ T8378] [U] [ 160.053263][ T6199] usb 40-1: device descriptor read/8, error -110 [ 160.443803][ T6199] usb usb40-port1: attempt power cycle [ 160.462431][ T8389] netlink: 'syz.1.782': attribute type 2 has an invalid length. [ 160.615868][ T8392] FAULT_INJECTION: forcing a failure. [ 160.615868][ T8392] name failslab, interval 1, probability 0, space 0, times 0 [ 160.628657][ T8392] CPU: 0 UID: 0 PID: 8392 Comm: syz.1.783 Tainted: G S syzkaller #0 PREEMPT(full) [ 160.628684][ T8392] Tainted: [S]=CPU_OUT_OF_SPEC [ 160.628690][ T8392] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 160.628700][ T8392] Call Trace: [ 160.628726][ T8392] [ 160.628733][ T8392] dump_stack_lvl+0x100/0x190 [ 160.628833][ T8392] should_fail_ex.cold+0x5/0xa [ 160.628858][ T8392] should_failslab+0xc2/0x120 [ 160.628895][ T8392] __kmalloc_cache_noprof+0x91/0x6c0 [ 160.628920][ T8392] ? ktime_get+0x22c/0x320 [ 160.628951][ T8392] ? cec_queue_event_fh+0x4cc/0xb30 [ 160.629011][ T8392] cec_queue_event_fh+0x4cc/0xb30 [ 160.629034][ T8392] cec_ioctl+0x1b7a/0x29b0 [ 160.629059][ T8392] ? __pfx_cec_ioctl+0x10/0x10 [ 160.629078][ T8392] ? tomoyo_path_number_perm+0x188/0x580 [ 160.629127][ T8392] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 160.629147][ T8392] ? get_pid_task+0x106/0x250 [ 160.629181][ T8392] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 160.629220][ T8392] ? do_vfs_ioctl+0x226/0x13e0 [ 160.629250][ T8392] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 160.629279][ T8392] ? __fget_files+0x215/0x3d0 [ 160.629294][ T8392] ? hook_file_ioctl_common+0x140/0x440 [ 160.629319][ T8392] ? __fget_files+0x21f/0x3d0 [ 160.629339][ T8392] ? __pfx_cec_ioctl+0x10/0x10 [ 160.629360][ T8392] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 160.629385][ T8392] __do_fast_syscall_32+0xe7/0x970 [ 160.629413][ T8392] ? lockdep_hardirqs_on+0x78/0x100 [ 160.629441][ T8392] do_fast_syscall_32+0x32/0x70 [ 160.629461][ T8392] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 160.629488][ T8392] RIP: 0023:0xf7f13fec [ 160.629508][ T8392] Code: Unable to access opcode bytes at 0xf7f13fc2. [ 160.629522][ T8392] RSP: 002b:00000000f53b550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 160.629540][ T8392] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040046109 [ 160.629550][ T8392] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 160.629560][ T8392] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 160.629569][ T8392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.629578][ T8392] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 160.629602][ T8392] [ 160.739418][ T8377] [U] [ 160.976983][ T8403] netlink: 'syz.0.784': attribute type 1 has an invalid length. [ 161.016049][ T8403] 8021q: adding VLAN 0 to HW filter on device bond2 [ 161.017051][ T6199] usb usb40-port1: unable to enumerate USB device [ 161.026942][ T8407] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 161.034105][ T8407] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 161.305991][ T8412] netlink: 'syz.3.789': attribute type 12 has an invalid length. [ 161.443634][ T8423] comedi comedi2: pcm3724: I/O port conflict (0x100,16) [ 161.475618][ T8425] random: crng reseeded on system resumption [ 161.813664][ T8436] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 161.839984][ T8436] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 162.019296][ T8440] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 163.012235][ T8472] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 163.018987][ T8472] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 163.224624][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.813'. [ 163.254833][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 163.281023][ T8485] FAULT_INJECTION: forcing a failure. [ 163.281023][ T8485] name failslab, interval 1, probability 0, space 0, times 0 [ 163.285849][ T8485] CPU: 2 UID: 0 PID: 8485 Comm: syz.3.807 Tainted: G S syzkaller #0 PREEMPT(full) [ 163.285874][ T8485] Tainted: [S]=CPU_OUT_OF_SPEC [ 163.285879][ T8485] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 163.285888][ T8485] Call Trace: [ 163.285894][ T8485] [ 163.285900][ T8485] dump_stack_lvl+0x100/0x190 [ 163.285922][ T8485] should_fail_ex.cold+0x5/0xa [ 163.285958][ T8485] should_failslab+0xc2/0x120 [ 163.285981][ T8485] __kmalloc_noprof+0xfc/0x820 [ 163.286000][ T8485] ? alloc_pipe_info+0x1ec/0x590 [ 163.286021][ T8485] alloc_pipe_info+0x1ec/0x590 [ 163.286040][ T8485] splice_direct_to_actor+0x78f/0xa30 [ 163.286058][ T8485] ? __pfx_direct_splice_actor+0x10/0x10 [ 163.286076][ T8485] ? __pfx_aa_file_perm+0x10/0x10 [ 163.286100][ T8485] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 163.286122][ T8485] do_splice_direct+0x174/0x240 [ 163.286139][ T8485] ? __pfx_do_splice_direct+0x10/0x10 [ 163.286157][ T8485] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 163.286173][ T8485] ? bpf_lsm_file_permission+0x9/0x10 [ 163.286198][ T8485] ? security_file_permission+0x76/0x210 [ 163.286220][ T8485] ? rw_verify_area+0xce/0x6d0 [ 163.286245][ T8485] do_sendfile+0xadc/0xe20 [ 163.286271][ T8485] ? __pfx_do_sendfile+0x10/0x10 [ 163.286293][ T8485] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 163.286315][ T8485] ? __fget_files+0x21f/0x3d0 [ 163.286333][ T8485] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 163.286352][ T8485] ? fput+0x79/0x100 [ 163.286368][ T8485] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 163.286385][ T8485] ? ksys_write+0x1ac/0x250 [ 163.286399][ T8485] ? __pfx_ksys_write+0x10/0x10 [ 163.286417][ T8485] __do_fast_syscall_32+0xe7/0x970 [ 163.286437][ T8485] ? lockdep_hardirqs_on+0x78/0x100 [ 163.286457][ T8485] do_fast_syscall_32+0x32/0x70 [ 163.286476][ T8485] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 163.286495][ T8485] RIP: 0023:0xf70cefec [ 163.286514][ T8485] Code: Unable to access opcode bytes at 0xf70cefc2. [ 163.286526][ T8485] RSP: 002b:00000000f547b50c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 163.286541][ T8485] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000000000000a [ 163.286551][ T8485] RDX: 0000000000000000 RSI: 000000008000fb00 RDI: 0000000000000000 [ 163.286560][ T8485] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 163.286569][ T8485] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 163.286577][ T8485] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 163.286598][ T8485] [ 163.478611][ T10] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 163.483045][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.488348][ T10] usb 6-1: Product: syz [ 163.490555][ T10] usb 6-1: Manufacturer: syz [ 163.493079][ T10] usb 6-1: SerialNumber: syz [ 163.586757][ T9] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 163.884529][ T8498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.815'. [ 164.613340][ T9] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 164.617566][ T9] ath9k_htc: Failed to initialize the device [ 164.662754][ T9] usb 6-1: ath9k_htc: USB layer deinitialized [ 164.920192][ T5828] usb 6-1: USB disconnect, device number 10 [ 165.296022][ T8536] netlink: 128 bytes leftover after parsing attributes in process `syz.2.828'. [ 165.301756][ T8536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.558237][ T8543] netlink: 'syz.1.831': attribute type 16 has an invalid length. [ 165.561290][ T8543] netlink: 'syz.1.831': attribute type 17 has an invalid length. [ 165.762085][ T8543] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 165.780732][ T8543] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 165.794891][ T8543] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 166.179093][ T8552] fuse: fd is not a fuse device [ 166.364087][ T8558] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 166.454758][ T8567] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 166.916725][ T8585] fuse: fd is not a fuse device [ 167.689703][ T8593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.848'. [ 168.828812][ T42] audit: type=1326 audit(1785441841.460:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8612 comm="syz.2.856" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 168.839174][ T42] audit: type=1326 audit(1785441841.470:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8612 comm="syz.2.856" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 168.854487][ T42] audit: type=1326 audit(1785441841.470:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8612 comm="syz.2.856" exe="/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 168.873458][ T42] audit: type=1326 audit(1785441841.470:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8612 comm="syz.2.856" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 168.893517][ T42] audit: type=1326 audit(1785441841.470:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8612 comm="syz.2.856" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 168.910720][ T42] audit: type=1326 audit(1785441841.470:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8612 comm="syz.2.856" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 168.920378][ T42] audit: type=1326 audit(1785441841.470:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8612 comm="syz.2.856" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 168.935787][ T42] audit: type=1326 audit(1785441841.470:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8612 comm="syz.2.856" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 168.949131][ T42] audit: type=1326 audit(1785441841.470:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8612 comm="syz.2.856" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 168.963575][ T42] audit: type=1326 audit(1785441841.470:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8612 comm="syz.2.856" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 169.177635][ T8622] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 169.274063][ T8627] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 169.304379][ T8630] fuse: fd is not a fuse device [ 169.520812][ T8637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.865'. [ 169.828029][ T8655] netlink: 68 bytes leftover after parsing attributes in process `syz.1.870'. [ 170.729416][ T8664] fuse: fd is not a fuse device [ 170.950450][ T8669] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 170.957302][ T8669] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 171.145122][ T8680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.206011][ T8684] wg2 speed is unknown, defaulting to 1000 [ 171.617921][ T8684] lo speed is unknown, defaulting to 1000 [ 171.640008][ T8700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.886'. [ 171.870427][ T8702] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 171.883409][ T8702] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 172.147411][ T8715] random: crng reseeded on system resumption [ 172.157891][ T8715] fuse: Bad value for 'fd' [ 172.176643][ T8716] libceph: resolve ' [ 172.176643][ T8716] -&fYǝa2i [ 172.176643][ T8716] .?&*&' (ret=-3): failed [ 173.567227][ T8741] netlink: 72 bytes leftover after parsing attributes in process `syz.1.899'. [ 173.684757][ T8747] comedi comedi3: pcmmio: I/O base address not correctly aligned [ 174.309168][ T8761] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (eth1-tx-0) [ 174.783556][ T8776] filter_write: 5 callbacks suppressed [ 174.783577][ T8776] msr: Write to unrecognized MSR 0x1a0 by syz.3.908 (pid: 8776), tainting CPU_OUT_OF_SPEC. [ 174.792361][ T8776] msr: See https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/about for details. [ 174.857749][ T8779] netlink: 128 bytes leftover after parsing attributes in process `syz.2.913'. [ 174.869565][ T8779] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.936236][ T8783] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 174.944826][ T8783] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 175.051038][ T8789] overlayfs: failed to resolve './file0': -2 [ 175.193954][ T8796] RDS: rds_bind could not find a transport for fc00::, load rds_tcp or rds_rdma? [ 175.320991][ T8796] ehci-pci 0000:00:1d.7: PCI INT D: failed to register GSI [ 175.400015][ T8807] xt_HMARK: spi-set and port-set can't be combined [ 175.433977][ T8809] FAULT_INJECTION: forcing a failure. [ 175.433977][ T8809] name failslab, interval 1, probability 0, space 0, times 0 [ 175.439266][ T8809] CPU: 2 UID: 0 PID: 8809 Comm: syz.3.925 Tainted: G S L syzkaller #0 PREEMPT(full) [ 175.439286][ T8809] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 175.439290][ T8809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 175.439297][ T8809] Call Trace: [ 175.439301][ T8809] [ 175.439306][ T8809] dump_stack_lvl+0x100/0x190 [ 175.439324][ T8809] should_fail_ex.cold+0x5/0xa [ 175.439336][ T8809] should_failslab+0xc2/0x120 [ 175.439352][ T8809] __kmalloc_noprof+0xfc/0x820 [ 175.439365][ T8809] ? rcu_is_watching+0x12/0xc0 [ 175.439390][ T8809] ? tomoyo_realpath_from_path+0xb6/0x690 [ 175.439410][ T8809] tomoyo_realpath_from_path+0xb6/0x690 [ 175.439428][ T8809] tomoyo_path_number_perm+0x23c/0x580 [ 175.439442][ T8809] ? tomoyo_path_number_perm+0x22e/0x580 [ 175.439456][ T8809] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 175.439470][ T8809] ? get_pid_task+0x106/0x250 [ 175.439496][ T8809] ? find_held_lock+0x2b/0x80 [ 175.439509][ T8809] ? __fget_files+0x215/0x3d0 [ 175.439518][ T8809] ? hook_file_ioctl_common+0x140/0x440 [ 175.439532][ T8809] ? __fget_files+0x215/0x3d0 [ 175.439544][ T8809] ? __fget_files+0x21f/0x3d0 [ 175.439556][ T8809] security_file_ioctl_compat+0xd3/0x230 [ 175.439571][ T8809] __ia32_compat_sys_ioctl+0xc2/0x360 [ 175.439589][ T8809] __do_fast_syscall_32+0xe7/0x970 [ 175.439603][ T8809] ? lockdep_hardirqs_on+0x78/0x100 [ 175.439617][ T8809] do_fast_syscall_32+0x32/0x70 [ 175.439631][ T8809] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 175.439645][ T8809] RIP: 0023:0xf70cefec [ 175.439658][ T8809] Code: Unable to access opcode bytes at 0xf70cefc2. [ 175.439662][ T8809] RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 175.439674][ T8809] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040946400 [ 175.439680][ T8809] RDX: 00000000800003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 175.439687][ T8809] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 175.439693][ T8809] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 175.439699][ T8809] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 175.439712][ T8809] [ 175.439716][ T8809] ERROR: Out of memory at tomoyo_realpath_from_path. [ 175.555574][ T8816] netlink: 20 bytes leftover after parsing attributes in process `syz.1.926'. [ 176.292924][ T8824] netlink: 36 bytes leftover after parsing attributes in process `syz.3.929'. [ 176.567009][ T8843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.935'. [ 176.570527][ T8843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.935'. [ 176.641592][ T8843] netlink: 'syz.2.935': attribute type 1 has an invalid length. [ 176.789961][ T8855] 8021q: VLANs not supported on ipvlan0 [ 177.052169][ T8860] syz0: rxe_newlink: already configured on wg2 [ 177.768175][ T8875] netlink: 128 bytes leftover after parsing attributes in process `syz.1.944'. [ 177.773450][ T8875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.044679][ T8890] overlay: Unknown parameter 'smackfstransmute' [ 178.057317][ T8890] netlink: 72 bytes leftover after parsing attributes in process `syz.0.951'. [ 178.062818][ T8892] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 178.070023][ T8892] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 178.124583][ T8895] 9p: Bad value for 'rfdno' [ 178.130115][ T8897] 9p: Bad value for 'rfdno' [ 178.166847][ T8900] block2mtd: device name too long [ 178.318592][ T8907] netlink: 16 bytes leftover after parsing attributes in process `syz.1.956'. [ 178.541150][ T8913] wg2 speed is unknown, defaulting to 1000 [ 178.777475][ T8913] lo speed is unknown, defaulting to 1000 [ 180.159356][ T42] kauditd_printk_skb: 633 callbacks suppressed [ 180.159370][ T42] audit: type=1804 audit(1785441852.790:820): pid=8953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.974" name="file0" dev="tmpfs" ino=1566 res=1 errno=0 [ 180.161317][ T8953] ref_ctr going negative. vaddr: 0x80ffd002, curr val: -32012, delta: 1 [ 180.175231][ T8953] ref_ctr increment failed for inode: 0x61e offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880293fbfc0 [ 180.182694][ T8953] ref_ctr going negative. vaddr: 0x80ffd002, curr val: -32012, delta: -1 [ 180.188026][ T8953] ref_ctr decrement failed for inode: 0x61e offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880293fbfc0 [ 180.192926][ T8953] uprobe: syz.2.974:8953 failed to unregister, leaking uprobe [ 180.674174][ T8969] SET target dimension over the limit! [ 180.697569][ T8967] netlink: 'syz.2.978': attribute type 1 has an invalid length. [ 180.735786][ T8967] bond5: entered promiscuous mode [ 180.745311][ T8967] 8021q: adding VLAN 0 to HW filter on device bond5 [ 180.773275][ T5748] Bluetooth: hci0: command 0x0c1a tx timeout [ 180.840554][ T8977] netlink: 16 bytes leftover after parsing attributes in process `syz.1.983'. [ 180.842098][ T8979] netlink: 'syz.0.984': attribute type 1 has an invalid length. [ 180.852574][ T8977] netlink: 24 bytes leftover after parsing attributes in process `syz.1.983'. [ 180.896573][ T8979] 8021q: adding VLAN 0 to HW filter on device bond3 [ 180.924541][ T8981] bond3: (slave gretap1): making interface the new active one [ 180.933780][ T8981] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 180.943375][ T8977] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 180.955178][ T8977] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 181.348400][ T8998] netlink: 'syz.3.987': attribute type 1 has an invalid length. [ 181.350999][ T8998] netlink: 224 bytes leftover after parsing attributes in process `syz.3.987'. [ 181.355907][ T8998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.987'. [ 181.805550][ T9010] netlink: 128 bytes leftover after parsing attributes in process `syz.1.989'. [ 181.827331][ T9010] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.295361][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.993'. [ 182.301691][ T9021] nftables ruleset with unbound set [ 182.303809][ T9019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.993'. [ 182.311590][ T9019] netlink: 'syz.0.993': attribute type 7 has an invalid length. [ 182.319860][ T9019] netlink: 'syz.0.993': attribute type 13 has an invalid length. [ 182.426844][ T9024] can: request_module (can-proto-3) failed. [ 182.645915][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 182.810661][ T9] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 182.821150][ T9] usb 8-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 182.834475][ T9] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 182.840565][ T9] usb 8-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 182.862221][ T9] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 182.870333][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.877208][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1002'. [ 182.880109][ T9] usb 8-1: Product: syz [ 182.881469][ T9] usb 8-1: Manufacturer: syz [ 182.888469][ T9] usb 8-1: SerialNumber: syz [ 182.902231][ T9] ti_usb_3410_5052 8-1:2.0: required endpoints missing [ 183.035841][ T9046] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.236858][ T9046] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.303751][ T9052] netlink: 'syz.1.1004': attribute type 2 has an invalid length. [ 183.306549][ T9052] netlink: 'syz.1.1004': attribute type 2 has an invalid length. [ 183.366783][ T9046] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.574562][ T9046] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.664595][ T42] audit: type=1326 audit(1785441856.300:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.1.1008" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f13fec code=0x0 [ 183.690731][ T5893] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.702158][ T5893] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.721131][ T9066] binder: 9060:9066 ioctl 4024587b 80004c00 returned -22 [ 183.725087][ T5893] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.744693][ T5893] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.941088][ T9080] IPv6: addrconf: prefix option has invalid lifetime [ 185.731153][ T9123] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1025'. [ 185.828713][ T9126] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 186.199827][ T9134] overlay: Unknown parameter '/' [ 186.338934][ T24] usb 8-1: USB disconnect, device number 6 [ 186.541155][ T42] audit: type=1326 audit(1785441859.170:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9137 comm="syz.2.1030" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 186.563230][ T42] audit: type=1326 audit(1785441859.190:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9137 comm="syz.2.1030" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 186.589881][ T42] audit: type=1326 audit(1785441859.190:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9137 comm="syz.2.1030" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 186.608405][ T42] audit: type=1326 audit(1785441859.190:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9137 comm="syz.2.1030" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 186.617913][ T42] audit: type=1326 audit(1785441859.240:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9137 comm="syz.2.1030" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 186.625688][ T42] audit: type=1326 audit(1785441859.240:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9137 comm="syz.2.1030" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 186.633536][ T42] audit: type=1326 audit(1785441859.220:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9137 comm="syz.2.1030" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 186.640677][ T42] audit: type=1326 audit(1785441859.260:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9137 comm="syz.2.1030" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 186.648711][ T42] audit: type=1326 audit(1785441859.280:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9137 comm="syz.2.1030" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 186.657408][ T42] audit: type=1326 audit(1785441859.290:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9137 comm="syz.2.1030" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 186.682217][ T9151] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 186.684800][ T9151] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 186.704614][ T9151] vhci_hcd vhci_hcd.0: Device attached [ 186.842109][ T9160] fuse: fd is not a fuse device [ 186.973168][ T9] usb 40-1: SetAddress Request (10) to port 0 [ 186.975207][ T9] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 186.995104][ C2] vcan0: j1939_tp_rxtimer: 0xffff888055176800: rx timeout, send abort [ 187.309165][ T9152] vhci_hcd: connection reset by peer [ 187.312002][ T13] vhci_hcd vhci_hcd.1: stop threads [ 187.314709][ T13] vhci_hcd vhci_hcd.1: release socket [ 187.317164][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 187.495180][ C2] vcan0: j1939_tp_rxtimer: 0xffff888055175000: rx timeout, send abort [ 187.500632][ C2] vcan0: j1939_tp_rxtimer: 0xffff888055176800: abort rx timeout. Force session deactivation [ 187.998140][ C2] vcan0: j1939_tp_rxtimer: 0xffff888055175000: abort rx timeout. Force session deactivation [ 188.999371][ T9193] pim6reg: entered allmulticast mode [ 189.485339][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1046'. [ 190.258452][ T9215] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1052'. [ 190.357132][ T9219] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1055'. [ 190.383704][ T9221] e1000e 0000:00:02.0 eth1: removed PHC [ 190.615323][ T9221] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 190.902911][ T9244] netlink: 'syz.0.1059': attribute type 1 has an invalid length. [ 190.945510][ T9244] 8021q: adding VLAN 0 to HW filter on device bond4 [ 191.023456][ T9223] dwc3 dwc3.2.auto: this is not a DesignWare USB3 DRD Core [ 191.066512][ T9249] bond4: (slave veth7): Enslaving as an active interface with a down link [ 191.105401][ T9244] bond4: (slave dummy0): making interface the new active one [ 191.113697][ T9244] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 191.188036][ T9244] netlink: 'syz.0.1059': attribute type 10 has an invalid length. [ 191.197629][ T9244] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1059'. [ 191.214290][ T9244] dummy0: entered promiscuous mode [ 191.218730][ T9244] bond4: (slave dummy0): Releasing active interface [ 191.261134][ T9258] fuse: fd is not a fuse device [ 192.055049][ T9] usb 40-1: device descriptor read/8, error -110 [ 192.438650][ T9289] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1068'. [ 192.445105][ T9] usb usb40-port1: attempt power cycle [ 192.450413][ T9289] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.689937][ T9302] fuse: fd is not a fuse device [ 192.756506][ T9302] cgroup: Unknown subsys name 'defcontext' [ 192.807526][ T9308] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 192.984246][ T9313] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 193.044530][ T9] usb usb40-port1: unable to enumerate USB device [ 193.056581][ T9308] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 193.113825][ T9313] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 193.117066][ T9313] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 193.120301][ T9313] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 193.129194][ T9313] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 193.152325][ T9313] pci 0000:00:01.0: Adding to iommu group 1 [ 193.163165][ T9313] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 193.165333][ T9313] pci 0000:00:01.0: vgaarb: bridge control possible [ 193.167963][ T9313] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 193.203806][ T9313] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 193.209979][ T9313] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 193.219586][ T9313] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 193.252566][ T9313] [drm] Found bochs VGA, ID 0xb0c5. [ 193.264937][ T9313] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 193.279662][ T9313] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 193.487561][ T9313] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 193.661809][ T9345] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1081'. [ 193.667991][ T9345] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.013266][ T9369] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1088'. [ 194.061335][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.064976][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.356884][ T9378] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1090'. [ 194.372497][ T9378] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.512689][ T42] kauditd_printk_skb: 150 callbacks suppressed [ 194.512802][ T42] audit: type=1326 audit(2000000000.839:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9385 comm="syz.1.1089" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 194.550876][ T42] audit: type=1326 audit(2000000000.859:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9385 comm="syz.1.1089" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 194.597352][ T42] audit: type=1326 audit(2000000000.859:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9385 comm="syz.1.1089" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 194.621746][ T9386] syz_tun: entered allmulticast mode [ 194.640115][ T42] audit: type=1326 audit(2000000000.869:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9385 comm="syz.1.1089" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 194.686014][ T42] audit: type=1326 audit(2000000000.869:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9385 comm="syz.1.1089" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 194.729469][ T42] audit: type=1326 audit(2000000000.869:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9385 comm="syz.1.1089" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 194.743697][ T9385] syz_tun: left allmulticast mode [ 194.796102][ T42] audit: type=1326 audit(2000000000.899:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9385 comm="syz.1.1089" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 194.825878][ T42] audit: type=1326 audit(2000000000.899:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9385 comm="syz.1.1089" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 194.834777][ T42] audit: type=1326 audit(2000000000.899:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9385 comm="syz.1.1089" exe="/syz-executor" sig=0 arch=40000003 syscall=371 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 194.844777][ T42] audit: type=1326 audit(2000000000.899:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9385 comm="syz.1.1089" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 194.921429][ T9396] syz_tun: entered allmulticast mode [ 195.034493][ T9401] netlink: 'syz.2.1097': attribute type 10 has an invalid length. [ 195.037023][ T9401] dummy0: left promiscuous mode [ 195.041162][ T9401] team0: Port device dummy0 added [ 195.104161][ T9403] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1097'. [ 195.309244][ T9411] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1101'. [ 195.319155][ T9411] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.057578][ T9425] netlink: 'syz.2.1104': attribute type 9 has an invalid length. [ 196.132114][ T9425] fuse: fd is not a fuse device [ 196.141524][ T9425] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1104'. [ 196.269441][ T9438] netlink: 'syz.1.1112': attribute type 12 has an invalid length. [ 196.272117][ T9438] netlink: 'syz.1.1112': attribute type 29 has an invalid length. [ 196.277476][ T9438] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1112'. [ 196.637033][ T9446] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1114'. [ 196.947338][ T9457] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1118'. [ 196.954684][ T9457] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1118'. [ 196.961776][ T9457] overlay: ./bus is not a directory [ 197.054744][ T9459] wg2 speed is unknown, defaulting to 1000 [ 197.449510][ T9459] lo speed is unknown, defaulting to 1000 [ 197.524818][ T9472] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1123'. [ 197.541990][ T9472] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 197.684984][ T9477] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 197.806581][ T9480] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 197.851129][ T9480] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 197.854695][ T9480] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 197.858019][ T9480] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 197.862585][ T9480] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 197.887468][ T9480] pci 0000:00:01.0: Adding to iommu group 1 [ 197.901596][ T9480] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 197.904526][ T9480] pci 0000:00:01.0: vgaarb: bridge control possible [ 197.907287][ T9480] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 197.928980][ T9480] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 197.932800][ T9480] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 197.938029][ T9480] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 197.975376][ T9480] [drm] Found bochs VGA, ID 0xb0c5. [ 197.978142][ T9480] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 197.986503][ T9483] netlink: 'syz.2.1127': attribute type 9 has an invalid length. [ 198.000352][ T9480] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 198.055193][ T9474] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 198.057852][ T9485] fuse: fd is not a fuse device [ 198.082291][ T9480] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 198.374327][ T9493] fuse: fd is not a fuse device [ 198.546759][ T5554] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 198.552295][ T5554] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 198.555653][ T5554] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 198.559363][ T5554] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 198.720368][ T5836] kernel read not supported for file /video9 (pid: 5836 comm: kworker/3:3) [ 198.866991][ T9527] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1139'. [ 198.881358][ T9527] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 198.894941][ T9] kernel read not supported for file /video9 (pid: 9 comm: kworker/0:0) [ 198.966471][ T9534] fuse: fd is not a fuse device [ 199.094776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 199.337469][ T9551] fuse: fd is not a fuse device [ 199.377863][ T9553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1147'. [ 199.441730][ T9554] wg2 speed is unknown, defaulting to 1000 [ 200.000003][ T9554] lo speed is unknown, defaulting to 1000 [ 200.499926][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1155'. [ 201.981609][ T9614] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 201.983735][ T9614] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 201.986818][ T9614] vhci_hcd vhci_hcd.0: Device attached [ 202.273171][ T55] usb 40-1: SetAddress Request (14) to port 0 [ 202.275224][ T55] usb 40-1: new SuperSpeed USB device number 14 using vhci_hcd [ 202.322232][ T9615] vhci_hcd: connection reset by peer [ 202.324555][ T5821] vhci_hcd vhci_hcd.1: stop threads [ 202.326272][ T5821] vhci_hcd vhci_hcd.1: release socket [ 202.355271][ T5821] vhci_hcd vhci_hcd.1: disconnect device [ 202.405121][ T9624] usb usb8: usbfs: process 9624 (syz.3.1169) did not claim interface 1 before use [ 202.815494][ T42] kauditd_printk_skb: 49 callbacks suppressed [ 202.815507][ T42] audit: type=1800 audit(2000000009.149:1041): pid=9621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1167" name="bus" dev="ramfs" ino=23375 res=0 errno=0 [ 203.284079][ T9643] 9pnet_virtio: no channels available for device syz [ 203.363759][ T9643] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1176'. [ 204.193387][ T5828] kernel write not supported for file bpf-map (pid: 5828 comm: kworker/2:3) [ 204.197704][ T9] kernel read not supported for file /swradio3 (pid: 9 comm: kworker/0:0) [ 204.331070][ T9666] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1183'. [ 204.334096][ T9666] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1183'. [ 204.481933][ T9685] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1191'. [ 204.585700][ T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.592181][ T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.686319][ T9691] fuse: fd is not a fuse device [ 204.782504][ T9699] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 204.787434][ T9699] IPv6: NLM_F_CREATE should be set when creating new route [ 204.966720][ T9699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.995594][ T9699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.261922][ T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.271394][ T5844] wg2 speed is unknown, defaulting to 1000 [ 205.276923][ T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.287083][ T5844] syz0: Port: 1 Link DOWN [ 205.296175][ T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.305332][ T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.321131][ T5844] wg2 speed is unknown, defaulting to 1000 [ 206.074750][ T9713] fuse: fd is not a fuse device [ 206.401586][ T9723] gtp4: entered promiscuous mode [ 206.403411][ T9723] gtp4: entered allmulticast mode [ 206.406574][ T9723] team0: Device gtp4 is of different type [ 206.457675][ T9727] kvm: pic: non byte write [ 206.459549][ T9730] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 206.461946][ T9730] IPv6: NLM_F_CREATE should be set when creating new route [ 206.464352][ T9730] IPv6: NLM_F_CREATE should be set when creating new route [ 206.479600][ T9730] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 206.525544][ T9735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.728293][ T9754] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1214'. [ 206.731253][ T9754] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.778504][ T9756] tc_dump_action: action bad kind [ 206.837220][ T9762] team0: Port device dummy0 removed [ 206.844754][ T9762] bridge_slave_0: left allmulticast mode [ 206.850833][ T9762] bridge_slave_0: left promiscuous mode [ 206.852761][ T9762] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.864714][ T9762] bridge_slave_1: left allmulticast mode [ 206.871277][ T9762] bridge_slave_1: left promiscuous mode [ 206.873360][ T9762] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.882943][ T9762] bond0: (slave bond_slave_0): Releasing backup interface [ 206.888579][ T9764] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1218'. [ 206.898907][ T9762] bond0: (slave bond_slave_1): Releasing backup interface [ 206.907995][ T9762] team0: Port device team_slave_1 removed [ 206.911619][ T9762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.918998][ T9762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.924624][ T9762] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 206.952625][ T9762] tipc: Started in network mode [ 206.956357][ T9762] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 206.961999][ T9762] tipc: Enabled bearer , priority 0 [ 206.974083][ T9762] overlayfs: failed to clone upperpath [ 206.990445][ T9769] 9p: Bad value for 'rfdno' [ 207.148506][ T9779] netlink: 'syz.1.1223': attribute type 62 has an invalid length. [ 207.188335][ T9782] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1224'. [ 207.193226][ T9784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.193891][ T9782] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.219926][ T9784] nbd: must specify at least one socket [ 207.333147][ T55] usb 40-1: device descriptor read/8, error -110 [ 207.724657][ T55] usb usb40-port1: attempt power cycle [ 207.963168][ T5852] tipc: Node number set to 11578026 [ 208.284887][ T55] usb usb40-port1: unable to enumerate USB device [ 208.288978][ T9818] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1234'. [ 208.299960][ T9818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.810747][ T9841] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1242'. [ 209.079435][ T9849] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1244'. [ 209.094067][ T9849] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.393589][ T9870] bridge1: entered promiscuous mode [ 209.399510][ T9870] bridge1: entered allmulticast mode [ 209.668960][ T9886] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 209.697458][ T9888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1253'. [ 209.704443][ T9886] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 209.766392][ T9889] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 209.793464][ T9886] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 209.802338][ T9886] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 209.808221][ T9886] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 209.814247][ T9886] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 209.863714][ T9886] pci 0000:00:01.0: Adding to iommu group 1 [ 209.877667][ T9886] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 209.880577][ T9886] pci 0000:00:01.0: vgaarb: bridge control possible [ 209.883328][ T9886] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 209.908036][ T9886] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 209.913492][ T9886] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 209.917045][ T9886] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 209.945028][ T9886] [drm] Found bochs VGA, ID 0xb0c5. [ 209.948866][ T9886] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 209.984067][ T9886] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 210.025363][ T9893] geneve2: entered allmulticast mode [ 210.131173][ T9886] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 210.259411][ T9902] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1256'. [ 210.266515][ T9902] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.493739][ T9916] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 210.517918][ T9916] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 210.686412][ T9924] overlayfs: failed to clone lowerpath [ 210.735724][ T9928] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1269'. [ 210.748741][ T9928] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1269'. [ 210.871061][ T9918] set match dimension is over the limit! [ 211.086207][ T9951] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 211.168962][ T9954] ubi0: attaching mtd0 [ 211.177712][ T9954] ubi0: scanning is finished [ 211.179423][ T9954] ubi0: empty MTD device detected [ 211.297052][ T9962] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 211.299306][ T9962] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 211.304730][ T9962] vhci_hcd vhci_hcd.0: Device attached [ 211.357071][ T9954] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 211.360686][ T9954] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 211.364117][ T9954] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 211.367867][ T9954] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 211.370202][ T9954] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 211.373386][ T9954] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 211.376623][ T9954] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1633045438 [ 211.379932][ T9954] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 211.387716][ T9965] ubi0: background thread "ubi_bgt0d" started, PID 9965 [ 211.583397][ T5828] usb 44-1: SetAddress Request (18) to port 0 [ 211.586364][ T5828] usb 44-1: new SuperSpeed USB device number 18 using vhci_hcd [ 211.900550][ T9963] vhci_hcd: connection reset by peer [ 211.906427][ T9279] vhci_hcd vhci_hcd.3: stop threads [ 211.913539][ T9279] vhci_hcd vhci_hcd.3: release socket [ 211.920431][ T9279] vhci_hcd vhci_hcd.3: disconnect device [ 212.175714][ T9974] trusted_key: encrypted_key: insufficient parameters specified [ 212.179354][ T9974] trusted_key: encrypted_key: keylen parameter is missing [ 212.427606][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1285'. [ 213.305642][T10019] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 213.445436][T10036] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 213.538512][ T5755] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 214.860450][T10082] loop5: detected capacity change from 0 to 4095 [ 214.883130][T10076] : renamed from bond_slave_0 [ 214.894804][ T5752] Buffer I/O error on dev loop5, logical block 511, async page read [ 214.898765][T10076] 9p: Unknown Cache mode or invalid value fscache cac:6tag={+֚#&Eܢ:Bg|o[I!nDW4c!]_5_k= [ 214.917524][T10076] bridge0: port 1(syz_tun) entered blocking state [ 214.920610][T10076] bridge0: port 1(syz_tun) entered disabled state [ 214.923801][T10076] syz_tun: entered allmulticast mode [ 214.928707][T10076] syz_tun: entered promiscuous mode [ 214.959839][T10082] Buffer I/O error on dev loop5, logical block 511, async page read [ 215.562487][ T5755] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 217.288728][ T5828] usb 44-1: device descriptor read/8, error -110 [ 217.975047][ T5828] usb usb44-port1: attempt power cycle [ 218.097344][T10160] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 218.111159][T10158] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1321'. [ 218.133503][T10158] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.187053][T10162] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 218.295390][T10160] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 218.354103][T10160] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 218.360890][T10160] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 218.368060][T10160] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 218.375567][T10160] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 218.385680][T10160] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 10010 usecs [ 218.415035][T10160] pci 0000:00:01.0: Adding to iommu group 1 [ 218.446916][T10160] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 218.449629][T10160] pci 0000:00:01.0: vgaarb: bridge control possible [ 218.452234][T10160] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 218.496434][T10160] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 218.506485][T10160] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 218.518319][T10160] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 218.546553][T10160] [drm] Found bochs VGA, ID 0xb0c5. [ 218.551303][T10160] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 218.569998][T10160] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 218.582810][ T5828] usb usb44-port1: unable to enumerate USB device [ 218.622943][T10160] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 219.188939][T10191] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1332'. [ 219.207949][T10191] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.475755][T10198] filter_write: 2 callbacks suppressed [ 219.475767][T10198] msr: Write to unrecognized MSR 0x1a0 by syz.3.1333 (pid: 10198), tainting CPU_OUT_OF_SPEC. [ 219.508732][T10200] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1335'. [ 219.513160][T10198] msr: See https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/about for details. [ 219.532572][T10200] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.792779][T10204] fuse: fd is not a fuse device [ 220.521912][T10229] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1342'. [ 220.798953][T10232] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1344'. [ 220.892774][T10232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.305645][T10243] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1347'. [ 221.319227][ T42] audit: type=1326 audit(2000000027.649:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10241 comm="syz.2.1347" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 221.335083][ T42] audit: type=1326 audit(2000000027.649:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10241 comm="syz.2.1347" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 221.344791][ T42] audit: type=1326 audit(2000000027.649:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10241 comm="syz.2.1347" exe="/syz-executor" sig=0 arch=40000003 syscall=186 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 221.351781][ T42] audit: type=1326 audit(2000000027.649:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10241 comm="syz.2.1347" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 221.359107][ T42] audit: type=1326 audit(2000000027.649:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10241 comm="syz.2.1347" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 221.367480][ T42] audit: type=1326 audit(2000000027.649:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10241 comm="syz.2.1347" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 221.374649][ T42] audit: type=1326 audit(2000000027.649:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10241 comm="syz.2.1347" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 221.381356][ T42] audit: type=1326 audit(2000000027.649:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10241 comm="syz.2.1347" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 221.389432][ T42] audit: type=1326 audit(2000000027.649:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10241 comm="syz.2.1347" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 221.396676][ T42] audit: type=1326 audit(2000000027.649:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10241 comm="syz.2.1347" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x7ffc0000 [ 222.204769][T10254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1349'. [ 222.207652][T10254] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1349'. [ 222.334124][T10263] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 222.341467][T10263] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 222.516531][T10251] input: syz0 as /devices/virtual/input/input11 [ 222.794304][ T55] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 223.143137][ T55] usb 6-1: device descriptor read/64, error -71 [ 223.383307][ T55] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 223.513141][ T55] usb 6-1: device descriptor read/64, error -71 [ 223.625325][ T55] usb usb6-port1: attempt power cycle [ 223.963249][ T55] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 223.984052][ T55] usb 6-1: device descriptor read/8, error -71 [ 224.187141][T10300] input: syz0 as /devices/virtual/input/input12 [ 224.198749][T10300] FAULT_INJECTION: forcing a failure. [ 224.198749][T10300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.204938][T10300] CPU: 3 UID: 0 PID: 10300 Comm: syz.3.1362 Tainted: G S L syzkaller #0 PREEMPT(full) [ 224.204969][T10300] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 224.204976][T10300] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 224.204986][T10300] Call Trace: [ 224.205028][T10300] [ 224.205035][T10300] dump_stack_lvl+0x100/0x190 [ 224.205069][T10300] should_fail_ex.cold+0x5/0xa [ 224.205097][T10300] _copy_from_user+0x2e/0xd0 [ 224.205150][T10300] input_event_from_user+0x137/0x290 [ 224.205176][T10300] ? __pfx_input_event_from_user+0x10/0x10 [ 224.205194][T10300] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 224.205213][T10300] ? input_event+0x93/0xb0 [ 224.205230][T10300] uinput_write+0xb9f/0xf60 [ 224.205245][T10300] ? __pfx_uinput_write+0x10/0x10 [ 224.205257][T10300] ? bpf_lsm_file_permission+0x9/0x10 [ 224.205273][T10300] ? security_file_permission+0x76/0x210 [ 224.205289][T10300] ? rw_verify_area+0xce/0x6d0 [ 224.205311][T10300] vfs_write+0x2aa/0x1050 [ 224.205322][T10300] ? __pfx_uinput_write+0x10/0x10 [ 224.205334][T10300] ? __pfx_vfs_write+0x10/0x10 [ 224.205343][T10300] ? find_held_lock+0x2b/0x80 [ 224.205361][T10300] ? __fget_files+0x215/0x3d0 [ 224.205371][T10300] ? __fget_files+0x215/0x3d0 [ 224.205383][T10300] ? __fget_files+0x21f/0x3d0 [ 224.205397][T10300] ksys_write+0x1f8/0x250 [ 224.205406][T10300] ? __pfx_ksys_write+0x10/0x10 [ 224.205416][T10300] ? ksys_write+0x1ac/0x250 [ 224.205425][T10300] ? __pfx_ksys_write+0x10/0x10 [ 224.205437][T10300] __do_fast_syscall_32+0xe7/0x970 [ 224.205451][T10300] ? lockdep_hardirqs_on+0x78/0x100 [ 224.205466][T10300] do_fast_syscall_32+0x32/0x70 [ 224.205480][T10300] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 224.205499][T10300] RIP: 0023:0xf70cefec [ 224.205514][T10300] Code: Unable to access opcode bytes at 0xf70cefc2. [ 224.205524][T10300] RSP: 002b:00000000f549c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 224.205535][T10300] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000000 [ 224.205542][T10300] RDX: 000000000000fe4f RSI: 0000000000000000 RDI: 0000000000000000 [ 224.205548][T10300] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 224.205555][T10300] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 224.205565][T10300] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 224.205578][T10300] [ 224.364083][ T55] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 224.425010][ T55] usb 6-1: device descriptor read/8, error -71 [ 224.556258][ T55] usb usb6-port1: unable to enumerate USB device [ 225.061170][T10309] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1368'. [ 225.128274][T10309] wg2 speed is unknown, defaulting to 1000 [ 225.318867][T10320] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 225.328173][T10320] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 225.412967][T10322] overlayfs: failed to clone upperpath [ 225.537047][T10309] lo speed is unknown, defaulting to 1000 [ 226.291304][T10334] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 226.406791][T10340] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1380'. [ 226.409885][T10340] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.977034][T10360] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1389'. [ 226.982066][T10360] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.804748][T10392] netlink: 'syz.3.1396': attribute type 4 has an invalid length. [ 228.148115][T10412] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 228.188733][T10412] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 228.206402][T10415] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1398'. [ 228.438111][T10415] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 228.444618][T10394] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 228.447120][T10394] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 228.473444][T10418] overlayfs: failed to resolve './cgroup': -2 [ 228.915393][T10428] fuse: fd is not a fuse device [ 229.412138][T10445] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 229.427871][T10445] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 229.477329][T10447] sctp: [Deprecated]: syz.1.1412 (pid 10447) Use of int in max_burst socket option. [ 229.477329][T10447] Use struct sctp_assoc_value instead [ 229.548894][T10456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1414'. [ 229.554458][T10456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1414'. [ 229.647553][T10463] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 229.650364][T10463] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 229.862614][T10472] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 229.867559][T10472] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 229.907522][T10474] fuse: fd is not a fuse device [ 230.704056][T10494] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 230.766538][T10494] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 230.989046][T10501] fuse: fd is not a fuse device [ 231.094833][T10503] file system registered [ 231.117135][T10503] read descriptors [ 231.794986][T10509] input: syz0 as /devices/virtual/input/input13 [ 232.090794][ T5744] ffs_data_put(): freeing [ 232.227610][T10551] openvswitch: netlink: Flow actions attr not present in new flow. [ 232.232037][T10551] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1441'. [ 232.252225][T10551] bond2 (unregistering): Released all slaves [ 232.262659][T10555] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 232.294285][T10552] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1441'. [ 232.351358][T10555] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 232.377431][T10560] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1443'. [ 232.382566][T10560] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.436283][T10562] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 232.442422][T10562] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 232.612934][T10568] overlayfs: failed to clone lowerpath [ 232.788085][T10580] IPVS: ip_vs_add_dest(): server weight less than zero [ 232.793555][T10580] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1449'. [ 232.793919][ T5844] IPVS: starting estimator thread 0... [ 232.802320][T10580] ubi: mtd0 is already attached to ubi0 [ 232.913416][T10582] IPVS: using max 43 ests per chain, 103200 per kthread [ 233.189113][T10595] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 233.198866][T10595] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 233.254143][T10599] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1457'. [ 233.258986][T10599] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.269799][T10600] fuse: fd is not a fuse device [ 233.395668][T10605] fuse: fd is not a fuse device [ 233.728779][T10618] binder: BINDER_SET_CONTEXT_MGR already set [ 233.733433][T10618] binder: 10616:10618 ioctl 4018620d 80004a80 returned -16 [ 233.852504][T10623] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 233.860765][T10623] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 234.638496][T10628] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1466'. [ 234.649400][T10628] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.838993][T10641] fuse: fd is not a fuse device [ 235.273465][T10649] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 235.284477][T10649] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 235.387178][T10656] overlayfs: failed to resolve './trace/instances/inst1/events/enable': -2 [ 235.501998][T10662] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1478'. [ 235.509903][T10662] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.715692][T10677] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 235.800261][T10680] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 235.813911][T10670] fuse: fd is not a fuse device [ 236.092730][T10694] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1489'. [ 236.096465][T10694] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.239148][T10706] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 236.339097][T10710] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 236.349955][T10708] fuse: fd is not a fuse device [ 236.417326][T10714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1498'. [ 236.432398][T10714] macvlan2: left promiscuous mode [ 236.432751][T10716] binder: 10715:10716 ioctl c00c6211 0 returned -14 [ 236.434308][T10714] macvlan2: left allmulticast mode [ 236.438476][T10714] bond5: left promiscuous mode [ 236.448148][T10714] bridge1: left promiscuous mode [ 236.450307][T10714] bridge1: left allmulticast mode [ 236.459296][T10714] geneve2: left allmulticast mode [ 237.506122][T10724] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1499'. [ 237.516718][T10724] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.519972][T10726] overlayfs: failed to clone upperpath [ 237.719976][T10734] fuse: fd is not a fuse device [ 237.892251][T10744] vlan2: entered allmulticast mode [ 237.895515][T10744] bond0: entered allmulticast mode [ 237.899502][T10744] bond_slave_0: entered allmulticast mode [ 237.901408][T10744] bond_slave_1: entered allmulticast mode [ 237.903528][T10744] syz_tun: entered allmulticast mode [ 237.958110][T10747] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1509'. [ 237.965004][T10747] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.004896][T10748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1502'. [ 238.028087][T10748] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1502'. [ 238.295700][T10754] binder: 10753:10754 ioctl c00c6211 0 returned -14 [ 240.192889][T10782] fuse: fd is not a fuse device [ 240.326050][T10785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1520'. [ 240.333358][T10785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1520'. [ 240.797989][T10792] binder: 10790:10792 ioctl c00c6211 0 returned -14 [ 241.684220][T10796] binder: BINDER_SET_CONTEXT_MGR already set [ 241.686712][T10796] binder: 10795:10796 ioctl 4018620d 80004a80 returned -16 [ 242.470141][T10817] binder: BINDER_SET_CONTEXT_MGR already set [ 242.472292][T10817] binder: 10816:10817 ioctl 4018620d 80004a80 returned -16 [ 242.911336][T10823] netlink: 'syz.0.1535': attribute type 12 has an invalid length. [ 242.988128][T10825] FAULT_INJECTION: forcing a failure. [ 242.988128][T10825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.992346][T10825] CPU: 3 UID: 0 PID: 10825 Comm: syz.1.1537 Tainted: G S L syzkaller #0 PREEMPT(full) [ 242.992365][T10825] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 242.992369][T10825] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 242.992376][T10825] Call Trace: [ 242.992381][T10825] [ 242.992386][T10825] dump_stack_lvl+0x100/0x190 [ 242.992416][T10825] should_fail_ex.cold+0x5/0xa [ 242.992429][T10825] _copy_from_user+0x2e/0xd0 [ 242.992446][T10825] sctp_setsockopt+0x8cc/0xb370 [ 242.992470][T10825] ? __pfx_aa_sk_perm+0x10/0x10 [ 242.992486][T10825] ? __pfx_sctp_setsockopt+0x10/0x10 [ 242.992498][T10825] ? aa_sock_opt_perm+0xfe/0x1b0 [ 242.992508][T10825] ? sock_common_setsockopt+0x2e/0xf0 [ 242.992532][T10825] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 242.992550][T10825] do_sock_setsockopt+0xf3/0x1d0 [ 242.992568][T10825] __sys_setsockopt+0x119/0x190 [ 242.992585][T10825] __ia32_sys_setsockopt+0xbc/0x160 [ 242.992598][T10825] ? __do_fast_syscall_32+0x98/0x970 [ 242.992612][T10825] ? lockdep_hardirqs_on+0x78/0x100 [ 242.992625][T10825] __do_fast_syscall_32+0xe7/0x970 [ 242.992638][T10825] ? lockdep_hardirqs_on+0x78/0x100 [ 242.992652][T10825] do_fast_syscall_32+0x32/0x70 [ 242.992665][T10825] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 242.992680][T10825] RIP: 0023:0xf7f13fec [ 242.992694][T10825] Code: Unable to access opcode bytes at 0xf7f13fc2. [ 242.992699][T10825] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 242.992710][T10825] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 242.992717][T10825] RDX: 0000000000000018 RSI: 0000000080000180 RDI: 0000000000000008 [ 242.992723][T10825] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 242.992729][T10825] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 242.992734][T10825] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 242.992748][T10825] [ 243.289501][T10830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1539'. [ 243.612536][T10829] bridge0: port 1(syz_tun) entered blocking state [ 243.614777][T10829] bridge0: port 1(syz_tun) entered listening state [ 243.754576][T10840] fuse: fd is not a fuse device [ 243.769027][T10829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.776532][T10829] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.808751][T10829] tipc: Resetting bearer [ 243.815035][T10829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.864011][T10829] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 243.867337][T10829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.883619][T10829] veth1_vlan: left promiscuous mode [ 243.889621][T10829] veth0_vlan: left promiscuous mode [ 243.894362][T10829] veth0_vlan: entered promiscuous mode [ 243.899531][T10829] veth1_vlan: entered promiscuous mode [ 243.913374][T10829] veth1_macvtap: left promiscuous mode [ 243.918494][T10829] veth0_macvtap: left promiscuous mode [ 243.922259][T10829] veth0_macvtap: entered promiscuous mode [ 243.929842][T10829] veth1_macvtap: entered promiscuous mode [ 243.949419][T10829] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 243.959955][T10829] 8021q: adding VLAN 0 to HW filter on device bond1 [ 243.972236][T10829] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 244.150724][T10830] bridge0: port 1(syz_tun) entered disabled state [ 244.216503][T10830] syz_tun (unregistering): left allmulticast mode [ 244.220529][T10830] syz_tun (unregistering): left promiscuous mode [ 244.225965][T10830] bridge0: port 1(syz_tun) entered disabled state [ 244.366164][ T5828] wg2 speed is unknown, defaulting to 1000 [ 244.368367][ T5821] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.371323][ T5828] syz0: Port: 1 Link ACTIVE [ 244.373243][ T5821] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.387539][ T5821] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.390308][ T5828] wg2 speed is unknown, defaulting to 1000 [ 244.398814][ T5821] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.309500][T10849] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 245.465814][T10849] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 246.309544][T10858] FAULT_INJECTION: forcing a failure. [ 246.309544][T10858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.315117][T10858] CPU: 2 UID: 0 PID: 10858 Comm: syz.1.1549 Tainted: G S L syzkaller #0 PREEMPT(full) [ 246.315145][T10858] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 246.315153][T10858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 246.315162][T10858] Call Trace: [ 246.315168][T10858] [ 246.315175][T10858] dump_stack_lvl+0x100/0x190 [ 246.315199][T10858] should_fail_ex.cold+0x5/0xa [ 246.315219][T10858] _copy_from_iter+0x43a/0x1690 [ 246.315249][T10858] ? __pfx__copy_from_iter+0x10/0x10 [ 246.315271][T10858] ? trace_kmalloc+0xeb/0x110 [ 246.315306][T10858] ? __kasan_kmalloc+0xaa/0xb0 [ 246.315335][T10858] ? __kmalloc_noprof+0x343/0x820 [ 246.315371][T10858] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 246.315396][T10858] kernfs_fop_write_iter+0x186/0x5f0 [ 246.315418][T10858] do_iter_readv_writev+0x6f7/0x930 [ 246.315445][T10858] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 246.315480][T10858] vfs_writev+0x360/0xdd0 [ 246.315504][T10858] ? rcu_is_watching+0x12/0xc0 [ 246.315524][T10858] ? trace_contention_end+0x126/0x160 [ 246.315543][T10858] ? __pfx_vfs_writev+0x10/0x10 [ 246.315584][T10858] ? __fget_files+0x21f/0x3d0 [ 246.315606][T10858] ? do_writev+0x13e/0x340 [ 246.315628][T10858] do_writev+0x13e/0x340 [ 246.315652][T10858] ? __pfx_do_writev+0x10/0x10 [ 246.315674][T10858] ? ksys_write+0x1ac/0x250 [ 246.315689][T10858] ? __pfx_ksys_write+0x10/0x10 [ 246.315709][T10858] __do_fast_syscall_32+0xe7/0x970 [ 246.315729][T10858] ? lockdep_hardirqs_on+0x78/0x100 [ 246.315751][T10858] do_fast_syscall_32+0x32/0x70 [ 246.315772][T10858] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 246.315792][T10858] RIP: 0023:0xf7f13fec [ 246.315812][T10858] Code: Unable to access opcode bytes at 0xf7f13fc2. [ 246.315819][T10858] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000092 [ 246.315836][T10858] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000900 [ 246.315846][T10858] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 246.315855][T10858] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 246.315864][T10858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.315873][T10858] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 246.315896][T10858] [ 246.751471][T10862] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 246.754140][T10862] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 246.758570][T10862] vhci_hcd vhci_hcd.0: Device attached [ 247.070453][ T5828] usb 40-1: SetAddress Request (18) to port 0 [ 247.073196][ T5828] usb 40-1: new SuperSpeed USB device number 18 using vhci_hcd [ 247.672878][T10863] vhci_hcd: connection reset by peer [ 247.676137][ T12] vhci_hcd vhci_hcd.1: stop threads [ 247.677873][ T12] vhci_hcd vhci_hcd.1: release socket [ 247.681272][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 248.296510][T10878] fuse: fd is not a fuse device [ 248.303846][T10878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1552'. [ 248.410659][T10877] autofs4:pid:10877:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 248.570795][T10892] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000) [ 248.585544][T10892] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1553'. [ 248.593801][T10892] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1553'. [ 249.161319][T10901] fuse: fd is not a fuse device [ 250.138597][T10911] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 250.152526][ T0] Disabled fast string operations [ 250.154494][ T0] ------------[ cut here ]------------ [ 250.156590][ T0] alternatives_patched [ 250.156597][ T0] WARNING: arch/x86/kernel/cpu/cpuid-deps.c:127 at do_clear_cpu_cap+0x356/0x440, CPU#1: swapper/1/0 [ 250.162143][ T0] Modules linked in: [ 250.163777][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G S L syzkaller #0 PREEMPT(full) [ 250.167757][ T0] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 250.170163][ T0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 250.174113][ T0] RIP: 0010:do_clear_cpu_cap+0x356/0x440 [ 250.176357][ T0] Code: 2a 38 d0 7c 08 84 d2 0f 85 ea 00 00 00 8b 2d 31 50 72 0f 31 ff 89 ee e8 68 69 59 00 85 ed 0f 84 7d fd ff ff e8 eb 6e 59 00 90 <0f> 0b 90 e9 6f fd ff ff 48 89 54 24 18 89 14 24 e8 d5 6e 59 00 8b [ 250.183957][ T0] RSP: 0000:ffffc9000046fc98 EFLAGS: 00010093 [ 250.185255][T10914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1563'. [ 250.186435][ T0] RAX: 0000000000000000 RBX: 0000000000000070 RCX: ffffffff81b03d68 [ 250.186445][ T0] RDX: ffff88801c742540 RSI: ffffffff81b03d75 RDI: ffff88801c742540 [ 250.186452][ T0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 250.186458][ T0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000070 [ 250.186465][ T0] R13: 0000000000000601 R14: ffffc9000046fce0 R15: ffffc9000046fd80 [ 250.186472][ T0] FS: 0000000000000000(0000) GS:ffff888096ce3000(0000) knlGS:0000000000000000 [ 250.186496][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.209222][ T0] CR2: 0000000000000000 CR3: 000000000e994000 CR4: 0000000000350eb0 [ 250.211958][ T0] Call Trace: [ 250.213061][ T0] [ 250.214041][ T0] ? __pfx_do_clear_cpu_cap+0x10/0x10 [ 250.215807][ T0] ? _printk+0xcf/0x110 [ 250.217169][ T0] ? __pfx_cpu_parse_topology+0x10/0x10 [ 250.218987][ T0] ? early_init_intel.cold+0x129/0x1eb [ 250.220803][ T0] early_init_intel.cold+0x13f/0x1eb [ 250.222599][ T0] init_intel+0x1c/0x7b0 [ 250.224047][ T0] identify_cpu+0x8b0/0x1c30 [ 250.225860][ T0] ? __pfx_cpu_init+0x10/0x10 [ 250.227675][ T0] identify_secondary_cpu+0x178/0x270 [ 250.229613][ T0] start_secondary+0xcf/0x2d0 [ 250.231284][ T0] ? __pfx_start_secondary+0x10/0x10 [ 250.233224][ T0] common_startup_64+0x13e/0x158 [ 250.235226][ T0] [ 250.236290][ T0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 250.238825][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G S L syzkaller #0 PREEMPT(full) [ 250.242533][ T0] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 250.244756][ T0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 250.248168][ T0] Call Trace: [ 250.249297][ T0] [ 250.250415][ T0] dump_stack_lvl+0x100/0x190 [ 250.252170][ T0] vpanic+0x552/0x970 [ 250.253672][ T0] ? __pfx_vpanic+0x10/0x10 [ 250.255415][ T0] panic+0xd1/0xe0 [ 250.256772][ T0] ? __pfx_panic+0x10/0x10 [ 250.258402][ T0] ? check_panic_on_warn+0x1f/0x90 [ 250.260181][ T0] check_panic_on_warn.cold+0x19/0x34 [ 250.262062][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 250.263680][ T0] __warn.cold+0x191/0x318 [ 250.265142][ T0] __report_bug+0x30f/0x440 [ 250.266613][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 250.268287][ T0] ? __pfx___report_bug+0x10/0x10 [ 250.269937][ T0] ? prb_read_valid+0x78/0xa0 [ 250.271505][ T0] ? __pfx_prb_read_valid+0x10/0x10 [ 250.273180][ T0] ? tick_nohz_tick_stopped+0x6c/0xa0 [ 250.274978][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 250.276847][ T0] report_bug+0xb2/0x220 [ 250.278438][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 250.280288][ T0] handle_bug+0x16a/0x2a0 [ 250.281830][ T0] exc_invalid_op+0x17/0x50 [ 250.283448][ T0] asm_exc_invalid_op+0x1a/0x20 [ 250.285358][ T0] RIP: 0010:do_clear_cpu_cap+0x356/0x440 [ 250.287416][ T0] Code: 2a 38 d0 7c 08 84 d2 0f 85 ea 00 00 00 8b 2d 31 50 72 0f 31 ff 89 ee e8 68 69 59 00 85 ed 0f 84 7d fd ff ff e8 eb 6e 59 00 90 <0f> 0b 90 e9 6f fd ff ff 48 89 54 24 18 89 14 24 e8 d5 6e 59 00 8b [ 250.294355][ T0] RSP: 0000:ffffc9000046fc98 EFLAGS: 00010093 [ 250.296543][ T0] RAX: 0000000000000000 RBX: 0000000000000070 RCX: ffffffff81b03d68 [ 250.299456][ T0] RDX: ffff88801c742540 RSI: ffffffff81b03d75 RDI: ffff88801c742540 [ 250.302291][ T0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 250.305323][ T0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000070 [ 250.308354][ T0] R13: 0000000000000601 R14: ffffc9000046fce0 R15: ffffc9000046fd80 [ 250.311429][ T0] ? do_clear_cpu_cap+0x348/0x440 [ 250.313410][ T0] ? do_clear_cpu_cap+0x355/0x440 [ 250.315392][ T0] ? do_clear_cpu_cap+0x355/0x440 [ 250.317333][ T0] ? __pfx_do_clear_cpu_cap+0x10/0x10 [ 250.319563][ T0] ? _printk+0xcf/0x110 [ 250.321168][ T0] ? __pfx_cpu_parse_topology+0x10/0x10 [ 250.323338][ T0] ? early_init_intel.cold+0x129/0x1eb [ 250.325311][ T0] early_init_intel.cold+0x13f/0x1eb [ 250.327314][ T0] init_intel+0x1c/0x7b0 [ 250.328896][ T0] identify_cpu+0x8b0/0x1c30 [ 250.330576][ T0] ? __pfx_cpu_init+0x10/0x10 [ 250.332428][ T0] identify_secondary_cpu+0x178/0x270 [ 250.334499][ T0] start_secondary+0xcf/0x2d0 [ 250.336332][ T0] ? __pfx_start_secondary+0x10/0x10 [ 250.338337][ T0] common_startup_64+0x13e/0x158 [ 250.340356][ T0] [ 250.342313][ T0] Kernel Offset: disabled [ 250.344027][ T0] Rebooting in 86400 seconds..