last executing test programs: 2.86074593s ago: executing program 3 (id=2011): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@cgroup=r0, r0, 0x2e}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4004550c, 0x0) 2.638737325s ago: executing program 1 (id=2016): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000540)={0x100, 0x1, 0x1, 0x0, 0x1, "08cfa4d6139dd65044a4efef1b6a8c67920e71", 0x56, 0xcfd}) write$binfmt_misc(r3, &(0x7f0000000240), 0xfffffecc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000004000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r4}, 0x18) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000000)) r5 = openat$fb1(0xffffff9c, &(0x7f0000000300), 0xc2880, 0x0) ioctl$FBIOGET_CON2FBMAP(r5, 0x460f, &(0x7f0000000340)={0x15, 0x1}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r9, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$sndctrl(&(0x7f0000000580), 0x2, 0x141240) recvmmsg(r10, &(0x7f000001ad80)=[{{&(0x7f0000019080)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f000001a380)=[{&(0x7f0000019100)=""/4096, 0x1000}, {&(0x7f000001a100)=""/44, 0x2c}, {&(0x7f000001a140)=""/167, 0xa7}, {&(0x7f000001a200)=""/233, 0xe9}, {&(0x7f000001a300)=""/122, 0x7a}], 0x5, &(0x7f000001a3c0)=""/216, 0xd8}, 0x5}, {{&(0x7f000001a4c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f000001a780)=[{&(0x7f000001a540)=""/131, 0x83}, {&(0x7f000001a600)=""/147, 0x93}, {&(0x7f000001a6c0)=""/135, 0x87}], 0x3, &(0x7f000001a7c0)=""/88, 0x58}, 0xfffff801}, {{&(0x7f000001a840)=@in={0x2, 0x0, @local}, 0x80, &(0x7f000001ac40)=[{&(0x7f000001a8c0)=""/111, 0x6f}, {&(0x7f000001a940)=""/90, 0x5a}, {&(0x7f000001a9c0)=""/145, 0x91}, {&(0x7f000001aa80)=""/33, 0x21}, {&(0x7f000001aac0)=""/83, 0x53}, {&(0x7f000001ab40)=""/219, 0xdb}], 0x6, &(0x7f000001ac80)=""/250, 0xfa}, 0x1}], 0x3, 0x1, &(0x7f000001ae00)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random="000000000100"}) bpf$MAP_CREATE(0x0, 0x0, 0x50) 2.629295176s ago: executing program 3 (id=2017): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="30020000", @ANYRES16=r1, @ANYBLOB="cf042cbd7000fedbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000100000600ab0005000000"], 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 2.55157685s ago: executing program 3 (id=2018): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x358, 0xfffffffffffffffe) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r1, 0x0, 0x3}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x2}, 0x8fd44e3407a78ecd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r3, 0x0, 0x3}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2.416061046s ago: executing program 2 (id=2019): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x182800, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002900)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x48) mkdir(&(0x7f0000000400)='./file0\x00', 0x103) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x8, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r5 = syz_open_dev$vcsu(&(0x7f0000000280), 0x4, 0x1) sendmsg$alg(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000900)="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", 0xff8}, {&(0x7f0000001900)="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", 0x1000}], 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x110, 0x4000000}, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r6, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) 2.415487718s ago: executing program 3 (id=2020): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2, 0x8}, {0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, r1}}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) r5 = dup(r4) r6 = syz_io_uring_setup(0x44bf, &(0x7f0000000640)={0x0, 0xec25, 0x2000, 0x2, 0x15b}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x5, 0x0, &(0x7f0000000600)}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, &(0x7f0000000140)={0x0, 0xf4}, 0x1) write$6lowpan_enable(r5, 0x0, 0x0) io_uring_setup(0x5be0, &(0x7f0000000380)={0x0, 0x9014, 0x400, 0xfffffff9}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) pipe(&(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000100)={0x28, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3}) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0x1, &(0x7f0000000240)={0x5, 0x9}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)=0x400007) r9 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 1.711629143s ago: executing program 1 (id=2022): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000040)=0x7, 0x5f) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x48) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r0, 0x40045109, &(0x7f0000000080)) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = inotify_init1(0x0) fcntl$getownex(r1, 0x10, &(0x7f00000003c0)) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000040), 0x8) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010101000000000000000002000000040001801800028014000180080001007f00000108000a00ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, 0x0) listen(r2, 0x1) io_uring_setup(0x43fc, &(0x7f0000000340)={0x0, 0x1414, 0x1000, 0x0, 0x12e}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x75c7c04b07bf3cec}}, 0x18}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20032008}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000006c52390000bd70000cdcdf2500000000b1567dbd3eb94d526b09034713a2685ab630dc49ed77aa64524fd04687a7e71c76eeabcf3c6ee5946cdd72e830f45780f5200c693c3ee574cd194b9cfa449180860f7b8192050b21d7b00b5c83d0df5ccacc57b3ee5f864f5e38cfe3941d1fe1a40918097b1107a46271", @ANYRES32=0x0, @ANYBLOB="000000000080000008001d0010000000"], 0x28}}, 0x0) accept4(r2, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r7, &(0x7f00000000c0)='V', 0x1) syz_usb_disconnect(0xffffffffffffffff) 1.501531177s ago: executing program 2 (id=2026): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@quota}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000700, 0x0, &(0x7f00000001c0)) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="b900"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001bc0)={0x6, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x5}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='syzkaller\x00', 0x5f40, 0x1000, &(0x7f0000000700)=""/4096, 0x41100, 0x52, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001700)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000001740)={0x5, 0xf, 0x7, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000001b80)=[{0x4, 0x1, 0x7, 0xc}], 0x10, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000000)) r5 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x587f, 0x0, 0x2, 0x36b}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.44060975s ago: executing program 3 (id=2027): connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x18) r4 = socket(0x840000000002, 0x3, 0xff) connect$inet(r4, &(0x7f0000000540)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f00009d6000/0x4000)=nil, &(0x7f0000837000/0x4000)=nil, &(0x7f0000873000/0x4000)=nil, &(0x7f000055e000/0x4000)=nil, &(0x7f0000371000/0x2000)=nil, &(0x7f0000dcd000/0x3000)=nil, &(0x7f0000796000/0x12000)=nil, &(0x7f000027d000/0x4000)=nil, &(0x7f0000318000/0x3000)=nil, &(0x7f0000f2d000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000003c0)="b8617b83772f2245f251838364bc8dc4e18f66f60ae870b997d7c8e449f86ba334bd4d6bcda96beaa2218a8ce4df05f59d91dfb23cae456d5792fa8cd5c152df2c00ee0f008e5371b42123ef5a53c04b00123fc203c4887bbc20b09078aea7ab006d26b4faefd13e726dd3c32c0edd37ac3b5e35f867c3d4c5c41a7e36499036f14f39112609095a3c89e19a290d995a1129c73027a3eb5fc833c5aeddb1204e2569169e1ef47a63473aa243b506644dde33de33880013a50c1b526273977aa111e23bd5a0aa413a58303c4271dae956404afa0c", 0xd4, r1}, 0x64) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x680800, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x194}, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) fcntl$getflags(r3, 0x0) 1.434441102s ago: executing program 0 (id=2028): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x10, 0x9}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newlink={0x50, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x3114}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x3}]}}}]}, 0x50}}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x1000, 0xfffffffffffffffc}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="8750a754ac0000007c0012800b000100697036746e6c00106c0002801400020000000000000000000000000000000001"], 0x9c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 1.221252262s ago: executing program 0 (id=2029): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4048aec9, &(0x7f0000001480)={0x3, 0x0, @ioapic={0x4, 0x2, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}]}}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r1, &(0x7f0000000200)={@val={0xa, 0x8847}, @void, @eth={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, "101b01", 0x8, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x8}}}}}}}, 0x42) 830.448862ms ago: executing program 0 (id=2030): r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) inotify_rm_watch(r0, r1) 829.911384ms ago: executing program 1 (id=2031): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000007480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001380)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="00810100004000fe00", 0x9}], 0x1}, 0x48045) 826.194379ms ago: executing program 0 (id=2032): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1}, 0xc) 749.862244ms ago: executing program 0 (id=2033): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000013000000000000000000000000000000603f40c4d8380e93154f239dab8b326fa5ce6622246d405f7b1addba852a857767ca22bd4cee64148823880fdfac2ba1f57d40384b601d609341e78bad757e37a1fca95621c2f9255e252424e61a844f9296ffbd2b559018584b26bdf35f736b22e60a68886f6a180cc0ac3b3ccb04a674500bbc856324d2555d511569523611a776eafbc255dd34f5565ea1809891724fd3a4adda62561a64670fb755c6c6bf872d1910e59875fd0f9ea68b3f852861ed3707cca100b1ec7710df926ac212cc62", @ANYRES32=r2, @ANYBLOB="186301000000000018001a8009000100766c616e000000000800048004000380"], 0x38}}, 0x8004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r4 = openat$btrfs_control(0xffffff9c, 0x0, 0x400, 0x0) connect$llc(r4, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x10) syz_emit_ethernet(0x46, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0x8000f28, 0x0) splice(r7, 0x0, r6, 0x0, 0x7f, 0xe) write(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$netlink(0x10, 0x3, 0x0) sendmsg(r6, 0x0, 0x4b5963ca1cad123d) clock_gettime(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r10, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 681.768249ms ago: executing program 1 (id=2034): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x58, r4, 0x809, 0x70bd29, 0x3, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x4004000) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)={0xf1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000500)=ANY=[], 0x32600) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="a66fee89f9164c180100226100000000000000100000008500"], &(0x7f0000000340)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x5, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xb8}}, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000070000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r11}, 0x10) r12 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r12, 0x890c, &(0x7f0000000140)={0x1, @bcast, @bpq0, 0xfb20, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x401, 0x5, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r6}, 0x10) r13 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d0009058203"], 0x0) syz_usb_control_io(r13, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000001180)) r14 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r14, 0xc008561c, &(0x7f0000000100)={0xf0f014, 0x6}) 614.22736ms ago: executing program 2 (id=2035): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000440)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x0, 0xe, 0x0, &(0x7f0000000b40)="9010d6e395dd33efdfcc8e30643c", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000001b80)={0x0, 0x9, 0x7, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000001f80)={r4, 0xff, 0x1, [0xa, 0x9, 0x6, 0x5, 0x7], [0x1, 0x6, 0x2, 0x5, 0x7fffffffffffffff, 0x6, 0x7f, 0x1, 0x5, 0x9, 0x10000, 0xe, 0xb36000000000, 0x5, 0x4, 0x4, 0x6, 0x1, 0x0, 0x6, 0x4, 0x4, 0x100000000, 0x4, 0xffffffff, 0x4, 0x8, 0x8001, 0xaa6, 0x5, 0x1, 0x9, 0x6, 0x224f, 0x6, 0x9, 0x4, 0x6, 0x8000, 0x2, 0x400, 0x1, 0x9d81, 0x5, 0x6, 0x4e5d, 0x9, 0xab2, 0xa, 0xad8, 0x7, 0x33, 0x4, 0x1, 0x6, 0x7fffffffffffffff, 0x208, 0x4, 0x6, 0x8, 0x740e0714, 0x4, 0x5, 0x3, 0xfffffffff95f29c9, 0x6, 0x8, 0x3, 0x6, 0x9, 0x9, 0x9, 0x3ff, 0x1, 0xce, 0x6, 0x30b, 0x6, 0x3, 0x8, 0xaa56, 0xb4c, 0xff, 0x6, 0x5, 0x731fdc1d, 0x6, 0xfffffffffffffff7, 0x5, 0x8000, 0x9, 0x80000000, 0x2, 0x6e8389bb, 0xf6, 0x1ea, 0xfffffffffffffffe, 0xa39, 0x3, 0x3, 0x2, 0x88d3, 0x8, 0x4, 0x6, 0x0, 0x7fffffff, 0xffff, 0x3, 0x9, 0x7, 0xf, 0x9, 0x6, 0x1, 0x8, 0x7fff, 0x5, 0x8b7, 0x0, 0x8]}) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r5 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r5, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r5, 0x0, r6, 0x0, 0x7ffff000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)=r3}, 0x1c) r8 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000a00), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)=r3}, 0x1c) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x29, &(0x7f0000004440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@call={0x85, 0x0, 0x0, 0xa1}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @map_fd={0x18, 0xb, 0x1, 0x0, r9}, @jmp={0x5, 0x0, 0xb, 0x6, 0xb, 0xfffffffffffffffc, 0x7a07f61491568b99}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r11}, 0x10) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r14 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(r14, &(0x7f0000002400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r13, &(0x7f0000000200)={0x10, 0xfffffffffffffffd, r15}, 0x4c) splice(r12, 0x0, r14, 0x0, 0x10, 0x0) sendfile64(r3, r0, &(0x7f0000000900)=0x1, 0x7) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) preadv2(r3, &(0x7f0000000740)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000480)=""/249, 0xf9}, {&(0x7f0000000280)=""/179, 0xb3}, {&(0x7f00000000c0)=""/40, 0x28}, {&(0x7f00000001c0)=""/58, 0x3a}, {&(0x7f0000000580)=""/67, 0x43}, {&(0x7f0000000600)=""/231, 0xe7}, {&(0x7f0000000700)=""/33, 0x21}, {&(0x7f0000000800)=""/233, 0xe9}], 0xa, 0x4, 0x9df, 0xa) r16 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r16, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r17}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ca9b2f5c75f57261"}]}]}, 0x2c}}, 0x0) 541.138649ms ago: executing program 2 (id=2036): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xe, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000000000000000000000000000018130000", @ANYRES32=r0, @ANYBLOB="00000000000000008500000012000000180100002020642500000000001e20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000440)=@secondary) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r3 = socket$inet(0x2, 0x6000000000000001, 0x0) open(&(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x181040, 0x2c) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0xe00, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) 540.585538ms ago: executing program 3 (id=2037): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = io_uring_setup(0x2cee, &(0x7f0000000200)={0x0, 0xded6, 0x3, 0x1, 0x28c}) io_uring_register$IORING_REGISTER_CLOCK(r1, 0x1d, &(0x7f0000000000)={0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000440)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000180)=@default_ibss_ssid, 0x6, 0x0) socket(0x1f, 0x5, 0xb37a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe80, 0x30, 0x25, 0x0, 0x0, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x1}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xe2}, {}, {0x10}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}}, 0x0) pipe2$watch_queue(0x0, 0x80) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x4e, 0x8, 0x53, 0x2}, {0x8, 0xff, 0x5, 0x6a}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000000c0)) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x0) keyctl$set_timeout(0xf, r0, 0x4e0) 471.944969ms ago: executing program 2 (id=2038): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup2(r0, r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1e0) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) sendmmsg$inet_sctp(r2, &(0x7f00000060c0)=[{&(0x7f0000000080)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000002c0)="b539", 0x2}], 0x1, &(0x7f0000000780)=[@dstaddrv4={0x10, 0x84, 0x7, @loopback}], 0x10}], 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0xeffffb, 0x0, 0xfffffffd, 0x1}, 0x10) write(r6, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f00001aff00000000000000", 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000004d40)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000004cc0)=ANY=[@ANYBLOB="020915090200000025bd7000fedbdf25"], 0x10}}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmmsg$inet_sctp(r2, &(0x7f0000000700)=[{&(0x7f00000000c0)=@in={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)="d71ab4bd82c9451802dde5ed322b7fedd9ffb1323302ab6992ba14f40900c0c19b891c6aaae9897ade2cb4e3788d6cfd5138cacb4628a0dd6d0aec890852fc4a6f25bd23aed6963d02e5447b8eda9f137c424e016dbd87cde5110ecfbe9650beaf1f8520805df93bcebcc74900e5c0b3738b1e909f253f40e567a129ecdfdc7ae2e0f564f25832a15ca967c170e3a731ed60e20246550ff00b9ed8dc43d4461261aa3885535e918c87443f5be9fb160014d247a437f2", 0xb6}, {&(0x7f0000000400)="34e3766717322958cc59eee57a85364242b5955b8b516878d460c4ef8b2b5edbcdb36866f4ce16fa5cb422d4fefbe8f52e7224c396a3efefb49f6b0a332f8823dd26bd707a6df10be5b11acf3bfb0adbba186d48b08d728bbad667fe65074089e94a6b657a95e76a2dfa598cc30a8fb3bbcc37aa55b6b1a060e1ef02efd3d88f3cbbc093e4799152fa177ecfd28812ac151d7d8e75f1e2b8f8e68b17b9c7149435d1e7987c6fc9aea1fdee1c30a38f9ae0f0150928ed92ae68d13dc6be627d0ff540323852738de1fb186ff8badf75f57c5a3cf97da0a28cbb", 0xd9}, {&(0x7f0000000500)="1c6e170aa116260065e0b11a8f3bd814c9ab79258d32795a8edc4a504f252f239c232b0b134dd6b2953640fadc3aef535936d7fd9ad5e12259dda20860d64244ed336e88c39103c9cfead25c4faa0f8f834a5fbb1d06e4a5450ef42d2ef7cd688893f36aab40438e6e72ff56ed4adb7a344834f2432386efdf4817bdba1056c16fe303304de598b59c16230e0cd4e5142035842033", 0x95}, {&(0x7f0000000200)="eb443555053480ffb448de97ecca831effab4203013901b4c77e28513a4e8a6544f6cf21", 0x24}, {&(0x7f0000000fc0)="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", 0x1000}, {&(0x7f00000005c0)="63e85d3c7b89ef27005749ff2c2a84cc02ef2a78b4d9b9e5e1f1e6a7563490a8ba435d60e34819f0895963ac60b68a3dceed0281de7a939028da75aaa4e1772f70462a42ed5917cb7e2136c4eec08fdea32fe54fb032d58b46cf8fc6390b7176615b439cfcd96ae990d9916606fdef451ced1f76e0883562b989acba", 0x7c}, {&(0x7f00000007c0)="75e6e6dc36d75225945caae157941614c443bd840fc9dfd4f910f7bf004514721e08a980ad7732ecef12ccdb543ea98f15bb5443cc8afa8843cfae95b4d01cda4752366ac8c6012f36279700f412552122cd8810d4984857f9a96571ca538bc9655888b346a772c4c41d3522e909f063ea2c8c21153a934b1a0b09ce2a628bdeb46d01afec07bac5f92ca9a09dd48db7b0fc28b425afeab007a83b762c63783b44d4185b826e7514373e05376eb00d278c149df90de76b831506e6b409026e3b645af037c6c8c5a651f114", 0xcb}], 0x7, &(0x7f0000000640)=[@dstaddrv6={0x1c, 0x84, 0x8, @loopback}, @prinfo={0x14, 0x84, 0x5, {0x0, 0x100}}, @dstaddrv6={0x1c, 0x84, 0x8, @local}, @dstaddrv4={0x10, 0x84, 0x7, @multicast1}], 0x5c, 0x40080}], 0x1, 0x40800) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r15, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x40000071, 0x0, 0x1}]}) sendmsg$NL80211_CMD_NEW_STATION(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="cf0429bd7000f4fffffffd6228ba08000300", @ANYRES32=r11, @ANYBLOB="0a000600080211000001000008001400", @ANYRES32=r9, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x4000040) 331.951866ms ago: executing program 2 (id=2039): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, 0x0, 0x0}, 0x20) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xeb8, 0x30, 0xb, 0x0, 0x0, {}, [{0xea4, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe58, 0x2, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}, [{0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x400}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1000000}, {}, {}, {0x0, 0x800, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x400000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x0, 0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb8}}, 0x4000) readv(0xffffffffffffffff, 0x0, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000140)={0x2a, 0x3, 0x7fff}, 0xc) r5 = fsopen(&(0x7f0000000040)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) close(r5) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r6, 0x10c, 0x4, &(0x7f0000000180)=0x8, 0x4) mount$fuse(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000004c00)=ANY=[@ANYBLOB="040100001a0007000000000000000000fe80000000000000000000000000001be0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000b4000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a0002007000000014000e"], 0x104}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r8, 0x3, {0x2, 0xf0}, 0x2}, 0x18) 329.194879ms ago: executing program 0 (id=2040): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000040)=0x7, 0x5f) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x48) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r0, 0x40045109, &(0x7f0000000080)) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = inotify_init1(0x0) fcntl$getownex(r1, 0x10, &(0x7f00000003c0)) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000040), 0x8) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010101000000000000000002000000040001801800028014000180080001007f00000108000a00ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, 0x0) listen(r2, 0x1) io_uring_setup(0x43fc, &(0x7f0000000340)={0x0, 0x1414, 0x1000, 0x0, 0x12e}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x75c7c04b07bf3cec}}, 0x18}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20032008}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000006c52390000bd70000cdcdf2500000000b1567dbd3eb94d526b09034713a2685ab630dc49ed77aa64524fd04687a7e71c76eeabcf3c6ee5946cdd72e830f45780f5200c693c3ee574cd194b9cfa449180860f7b8192050b21d7b00b5c83d0df5ccacc57b3ee5f864f5e38cfe3941d1fe1a40918097b1107a46271", @ANYRES32=0x0, @ANYBLOB="000000000080000008001d0010000000"], 0x28}}, 0x0) accept4(r2, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r7, &(0x7f00000000c0)='V', 0x1) syz_usb_disconnect(0xffffffffffffffff) 100.783586ms ago: executing program 1 (id=2041): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1}, 0xc) 0s ago: executing program 1 (id=2042): r0 = inotify_init1(0x0) inotify_rm_watch(r0, 0x0) kernel console output (not intermixed with test programs): yz.1.1116" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 185.954537][ T40] audit: type=1326 audit(1759433522.695:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9215 comm="syz.1.1116" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 185.961470][ T40] audit: type=1326 audit(1759433522.695:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9215 comm="syz.1.1116" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 185.968822][ T40] audit: type=1326 audit(1759433522.695:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9215 comm="syz.1.1116" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 185.976420][ T40] audit: type=1326 audit(1759433522.695:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9215 comm="syz.1.1116" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 185.984795][ T40] audit: type=1326 audit(1759433522.695:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9215 comm="syz.1.1116" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 185.997428][ T40] audit: type=1326 audit(1759433522.695:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9215 comm="syz.1.1116" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 186.005361][ T40] audit: type=1326 audit(1759433522.695:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9215 comm="syz.1.1116" exe="/syz-executor" sig=0 arch=40000003 syscall=439 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 186.505640][ T9228] fuse: Bad value for 'fd' [ 186.538262][ T9233] capability: warning: `syz.2.1121' uses 32-bit capabilities (legacy support in use) [ 187.093415][ T5961] Bluetooth: hci2: command 0x0406 tx timeout [ 187.093440][ T5951] Bluetooth: hci1: command 0x0406 tx timeout [ 187.144659][ T5951] Bluetooth: hci2: unexpected event for opcode 0x202d [ 187.172830][ T5951] Bluetooth: hci3: command 0x0406 tx timeout [ 187.985585][ T6042] usb 5-1: USB disconnect, device number 18 [ 188.008355][ T6042] usblp0: removed [ 188.580245][ T9273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1136'. [ 188.880832][ T9275] tipc: Enabled bearer , priority 0 [ 188.887684][ T9275] syzkaller0: entered promiscuous mode [ 188.891161][ T9275] syzkaller0: entered allmulticast mode [ 188.913492][ T9275] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1137'. [ 188.921281][ T9275] tipc: Resetting bearer [ 188.927167][ T9274] tipc: Resetting bearer [ 188.941448][ T9274] tipc: Disabling bearer [ 189.527731][ T9290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1143'. [ 190.118864][ T9299] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 190.120983][ T9299] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 190.123715][ T9299] vhci_hcd vhci_hcd.0: Device attached [ 190.125753][ T9303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1147'. [ 190.155102][ T9305] validate_nla: 2 callbacks suppressed [ 190.155157][ T9305] netlink: 'syz.3.1148': attribute type 1 has an invalid length. [ 190.179408][ T9305] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 190.187263][ T9305] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 190.533100][ T29] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 190.705018][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1152'. [ 190.724017][ T9300] vhci_hcd: connection reset by peer [ 190.727334][ T13] vhci_hcd: stop threads [ 190.729324][ T13] vhci_hcd: release socket [ 190.734042][ T13] vhci_hcd: disconnect device [ 190.904415][ T9329] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1151'. [ 191.067079][ T9331] netlink: 'syz.3.1154': attribute type 10 has an invalid length. [ 191.085225][ T9331] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 191.100861][ T9331] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 191.107033][ T9331] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 192.569024][ T9358] misc userio: Begin command sent, but we're already running [ 193.178385][ T9364] input: syz0 as /devices/virtual/input/input17 [ 193.413739][ T9385] fuse: Bad value for 'group_id' [ 193.415543][ T9385] fuse: Bad value for 'group_id' [ 193.471008][ T40] kauditd_printk_skb: 51 callbacks suppressed [ 193.471027][ T40] audit: type=1326 audit(1759433530.225:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9386 comm="syz.2.1171" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe598 code=0x7ffc0000 [ 193.492883][ T40] audit: type=1326 audit(1759433530.245:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9386 comm="syz.2.1171" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe598 code=0x7ffc0000 [ 193.503879][ T40] audit: type=1326 audit(1759433530.245:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9386 comm="syz.2.1171" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe598 code=0x7ffc0000 [ 193.513109][ T40] audit: type=1326 audit(1759433530.245:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9386 comm="syz.2.1171" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe598 code=0x7ffc0000 [ 193.524051][ T40] audit: type=1326 audit(1759433530.245:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9386 comm="syz.2.1171" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe598 code=0x7ffc0000 [ 193.532911][ T40] audit: type=1326 audit(1759433530.245:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9386 comm="syz.2.1171" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe598 code=0x7ffc0000 [ 193.542217][ T40] audit: type=1326 audit(1759433530.245:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9386 comm="syz.2.1171" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe598 code=0x7ffc0000 [ 193.551134][ T40] audit: type=1326 audit(1759433530.245:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9386 comm="syz.2.1171" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe598 code=0x7ffc0000 [ 193.558771][ T40] audit: type=1326 audit(1759433530.245:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9386 comm="syz.2.1171" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe598 code=0x7ffc0000 [ 193.567120][ T40] audit: type=1326 audit(1759433530.245:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9386 comm="syz.2.1171" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe598 code=0x7ffc0000 [ 194.544646][ T9403] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.1177'. [ 194.734471][ T9414] FAULT_INJECTION: forcing a failure. [ 194.734471][ T9414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.740426][ T9414] CPU: 0 UID: 0 PID: 9414 Comm: syz.0.1180 Not tainted syzkaller #0 PREEMPT(full) [ 194.740451][ T9414] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 194.740462][ T9414] Call Trace: [ 194.740469][ T9414] [ 194.740476][ T9414] dump_stack_lvl+0x16c/0x1f0 [ 194.740500][ T9414] should_fail_ex+0x512/0x640 [ 194.740528][ T9414] _copy_from_user+0x2e/0xd0 [ 194.740545][ T9414] copy_from_sockptr_offset+0x15c/0x1b0 [ 194.740567][ T9414] ? __pfx_copy_from_sockptr_offset+0x10/0x10 [ 194.740592][ T9414] ? __local_bh_enable_ip+0xa4/0x120 [ 194.740616][ T9414] tls_setsockopt+0x8c3/0x19d0 [ 194.740640][ T9414] ? __pfx_tls_setsockopt+0x10/0x10 [ 194.740659][ T9414] ? __pfx_aa_sk_perm+0x10/0x10 [ 194.740685][ T9414] ? aa_sock_opt_perm+0xfd/0x1c0 [ 194.740708][ T9414] ? sock_common_setsockopt+0x2e/0xf0 [ 194.740728][ T9414] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 194.740749][ T9414] do_sock_setsockopt+0xf3/0x1d0 [ 194.740771][ T9414] __sys_setsockopt+0x120/0x1a0 [ 194.740808][ T9414] __ia32_sys_setsockopt+0xbc/0x160 [ 194.740832][ T9414] ? syscall_trace_enter+0xee/0x240 [ 194.740851][ T9414] __do_fast_syscall_32+0x7c/0x300 [ 194.740871][ T9414] do_fast_syscall_32+0x32/0x80 [ 194.740887][ T9414] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 194.740908][ T9414] RIP: 0023:0xf7f73579 [ 194.740922][ T9414] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 194.740938][ T9414] RSP: 002b:00000000f544555c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 194.740954][ T9414] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000011a [ 194.740965][ T9414] RDX: 0000000000000002 RSI: 0000000080000340 RDI: 0000000000000038 [ 194.740975][ T9414] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 194.740984][ T9414] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 194.740993][ T9414] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 194.741016][ T9414] [ 195.336041][ T9431] fuse: Bad value for 'fd' [ 195.397363][ T9434] netlink: 'syz.1.1186': attribute type 1 has an invalid length. [ 195.418831][ T9434] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 195.423364][ T9434] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 195.480972][ T9438] bond1: (slave bridge3): Enslaving as an active interface with a down link [ 195.501861][ T9434] bond1: (slave gretap1): making interface the new active one [ 195.507917][ T9434] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 195.519131][ T9434] macvlan2: entered promiscuous mode [ 195.520999][ T9434] macvlan2: entered allmulticast mode [ 195.523259][ T9434] bond1: entered promiscuous mode [ 195.524842][ T9434] gretap1: entered promiscuous mode [ 195.527237][ T9434] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 195.534592][ T9434] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 195.540937][ T9434] bond1: left promiscuous mode [ 195.542876][ T9434] gretap1: left promiscuous mode [ 195.642893][ T29] vhci_hcd: vhci_device speed not set [ 195.668155][ T9442] binder: 9440:9442 ioctl c0306201 80000240 returned -14 [ 195.957120][ T9458] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1192'. [ 196.103190][ T7405] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 196.264230][ T7405] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 196.267629][ T7405] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.272972][ T7405] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 196.275841][ T7405] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.464179][ T53] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 196.494909][ T7405] usb 5-1: GET_CAPABILITIES returned 0 [ 196.496838][ T7405] usbtmc 5-1:16.0: can't read capabilities [ 196.626519][ T9472] tc_dump_action: action bad kind [ 196.632829][ T53] usb 8-1: Using ep0 maxpacket: 8 [ 196.637777][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 196.641345][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 196.644984][ T53] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 196.648322][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.652381][ T53] usb 8-1: config 0 descriptor?? [ 196.857992][ T53] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 197.060821][ T53] usb 8-1: USB disconnect, device number 14 [ 197.192614][ T9481] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 197.210291][ T9481] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1199'. [ 197.322045][ T9484] wireguard0: entered promiscuous mode [ 197.324657][ T9484] wireguard0: entered allmulticast mode [ 197.464451][ T9] usb 5-1: USB disconnect, device number 19 [ 198.212935][ T9502] block device autoloading is deprecated and will be removed. [ 198.454622][ C3] bridge0: port 1(bridge_slave_0) entered learning state [ 198.459105][ C3] bridge0: port 2(bridge_slave_1) entered learning state [ 198.582927][ T9] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 198.744312][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.748845][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.753596][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 198.760216][ T9] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 198.764526][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.769435][ T9] usb 8-1: config 0 descriptor?? [ 199.097148][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.099980][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.126550][ T9529] netlink: 'syz.2.1218': attribute type 15 has an invalid length. [ 199.133257][ T9529] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1218'. [ 199.251214][ T9] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 199.816177][ T9536] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1220'. [ 199.904798][ T29] usb 8-1: USB disconnect, device number 15 [ 200.142866][ T53] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 200.292783][ T53] usb 5-1: Using ep0 maxpacket: 8 [ 200.296422][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.300927][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 200.305794][ T53] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 200.310576][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.317803][ T53] usb 5-1: config 0 descriptor?? [ 200.366353][ T9547] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1223'. [ 200.370249][ T9547] fuse: Unknown parameter '00000000000000000005' [ 200.525827][ T53] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 200.725090][ T9542] iowarrior 5-1:0.0: Error -90 while submitting URB [ 200.730643][ T29] usb 5-1: USB disconnect, device number 20 [ 201.018139][ T9564] netlink: 'syz.2.1230': attribute type 7 has an invalid length. [ 201.601073][ T9588] overlayfs: failed to resolve './file0/file0': -2 [ 201.612885][ T9588] autofs: Unknown parameter 'ZùqDõâÚCé7DìÛ&C$§”뙾‡4ã_É4DY!˜Ièu•²&¢}Æ‹žm{DL•"fa&Ñ]‘»¢J‡¨A' [ 201.772181][ T9600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1244'. [ 201.780377][ T9600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1244'. [ 201.932998][ T7405] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 202.112839][ T7405] usb 8-1: Using ep0 maxpacket: 8 [ 202.117188][ T7405] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 202.122063][ T7405] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 202.127293][ T7405] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 202.131288][ T7405] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.138784][ T7405] usb 8-1: config 0 descriptor?? [ 202.346469][ T7405] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 202.546908][ T9592] iowarrior 8-1:0.0: Error -90 while submitting URB [ 202.554951][ T7405] usb 8-1: USB disconnect, device number 16 [ 202.930269][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1256'. [ 203.059457][ T9632] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.208842][ T9642] tipc: Enabled bearer , priority 0 [ 203.213719][ T9642] syzkaller0: entered promiscuous mode [ 203.216068][ T9642] syzkaller0: entered allmulticast mode [ 203.235249][ T9642] syzkaller0: mtu greater than device maximum [ 203.238801][ T9641] tipc: Resetting bearer [ 203.254447][ T9641] tipc: Disabling bearer [ 203.344030][ T7405] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 203.512978][ T7405] usb 5-1: Using ep0 maxpacket: 32 [ 203.518395][ T7405] usb 5-1: config 0 has an invalid interface number: 225 but max is 0 [ 203.524596][ T7405] usb 5-1: config 0 has no interface number 0 [ 203.530558][ T7405] usb 5-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 203.534912][ T7405] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.537712][ T7405] usb 5-1: Product: syz [ 203.539362][ T7405] usb 5-1: Manufacturer: syz [ 203.541637][ T7405] usb 5-1: SerialNumber: syz [ 203.553087][ T7405] usb 5-1: config 0 descriptor?? [ 203.768476][ T7405] mos7840 5-1:0.225: required endpoints missing [ 204.024740][ T6042] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 204.147208][ T9694] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 204.172807][ T6042] usb 7-1: Using ep0 maxpacket: 8 [ 204.176041][ T6042] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 204.179426][ T6042] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 204.182798][ T6042] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 204.187117][ T6042] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.192209][ T6042] usb 7-1: config 0 descriptor?? [ 204.229894][ T9695] wireguard0: entered promiscuous mode [ 204.232370][ T9695] wireguard0: entered allmulticast mode [ 204.435730][ T6042] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 204.601382][ T9658] iowarrior 7-1:0.0: Error -90 while submitting URB [ 204.606373][ T9] usb 7-1: USB disconnect, device number 22 [ 204.815343][ T9698] openvswitch: netlink: IP tunnel dst address not specified [ 205.058761][ T5951] Bluetooth: hci3: unexpected event for opcode 0x0c57 [ 205.092783][ T9636] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 205.098844][ T7405] usb 5-1: USB disconnect, device number 21 [ 205.151168][ T9716] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 205.154034][ T9716] IPv6: NLM_F_CREATE should be set when creating new route [ 205.156639][ T9716] IPv6: NLM_F_CREATE should be set when creating new route [ 205.762588][ T9723] ceph: No mds server is up or the cluster is laggy [ 206.151509][ T9743] random: crng reseeded on system resumption [ 207.214590][ T40] kauditd_printk_skb: 918 callbacks suppressed [ 207.214608][ T40] audit: type=1800 audit(1759433772.977:1217): pid=9769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1301" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 207.514800][ T9796] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 208.019323][ T9813] input: syz1 as /devices/virtual/input/input20 [ 208.673246][ T6033] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 208.737083][ T9820] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.832977][ T6033] usb 5-1: Using ep0 maxpacket: 8 [ 208.839176][ T6033] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 208.843944][ T6033] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 208.847538][ T6033] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 208.851008][ T6033] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.882564][ T6033] usb 5-1: config 0 descriptor?? [ 208.928921][ T9820] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.114848][ T6033] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 209.379138][ T9820] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.415986][ T9815] iowarrior 5-1:0.0: Error -90 while submitting URB [ 209.463111][ T29] usb 5-1: USB disconnect, device number 22 [ 209.605078][ T9820] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.718323][ T213] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.722863][ T80] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.739699][ T46] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.751737][ T46] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.865290][ T9877] sp0: Synchronizing with TNC [ 211.913109][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 212.088728][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 212.101052][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 212.104885][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 212.108164][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 212.111659][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.118966][ T9] usb 5-1: config 0 descriptor?? [ 212.271783][ T9896] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 212.274617][ T9896] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 212.335970][ T9] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 212.540615][ T9874] iowarrior 5-1:0.0: Error -90 while submitting URB [ 212.553961][ T6033] usb 5-1: USB disconnect, device number 23 [ 212.666347][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1337'. [ 212.675225][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1337'. [ 213.812784][ C3] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.815924][ C3] bridge0: topology change detected, propagating [ 213.819973][ C3] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.823067][ C3] bridge0: topology change detected, propagating [ 213.872853][ T6035] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 213.957294][ T9944] bond0: entered promiscuous mode [ 213.959812][ T9944] bond_slave_0: entered promiscuous mode [ 213.962576][ T9944] bond_slave_1: entered promiscuous mode [ 213.966147][ T9944] bond0: entered allmulticast mode [ 213.968843][ T9944] bond_slave_0: entered allmulticast mode [ 213.971381][ T9944] bond_slave_1: entered allmulticast mode [ 214.043217][ T6035] usb 5-1: Using ep0 maxpacket: 16 [ 214.046173][ T6035] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 214.049542][ T6035] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 214.054273][ T6035] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 214.057770][ T6035] usb 5-1: config 0 interface 0 has no altsetting 0 [ 214.061466][ T6035] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 214.064349][ T6035] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.066907][ T6035] usb 5-1: Product: syz [ 214.068352][ T6035] usb 5-1: Manufacturer: syz [ 214.070533][ T6035] usb 5-1: SerialNumber: syz [ 214.079792][ T6035] usb 5-1: config 0 descriptor?? [ 214.288277][ T6035] usb 5-1: Can not set alternate setting to 1, error: -71 [ 214.292804][ T6035] synaptics_usb 5-1:0.0: probe with driver synaptics_usb failed with error -71 [ 214.310555][ T6035] usb 5-1: USB disconnect, device number 24 [ 215.667607][ T9968] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 216.032235][ T5951] Bluetooth: hci1: unexpected event for opcode 0x0c5b [ 216.045316][ T6035] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 216.176255][ T9998] syz_tun: entered allmulticast mode [ 216.180606][ T9997] syz_tun: left allmulticast mode [ 216.203115][ T6035] usb 7-1: Using ep0 maxpacket: 8 [ 216.221793][ T6035] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 216.224608][ T6035] usb 7-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 216.227779][ T6035] usb 7-1: config 179 has no interface number 0 [ 216.230020][ T6035] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 216.234924][ T6035] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 216.238439][ T6035] usb 7-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 216.244118][ T6035] usb 7-1: config 179 interface 65 has no altsetting 0 [ 216.247094][ T6035] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 216.250598][ T6035] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.340764][T10004] ptrace attach of "/syz-executor exec"[5953] was attempted by "/syz-executor exec"[10004] [ 217.317692][T10011] ceph: No mds server is up or the cluster is laggy [ 218.689123][ T6035] usb 7-1: USB disconnect, device number 23 [ 219.607367][T10050] syzkaller0: entered promiscuous mode [ 220.028716][ T6033] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 220.184397][ T6033] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.188019][ T6033] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.191469][ T6033] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 220.196488][ T6033] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 220.199922][ T6033] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.209302][ T6033] usb 7-1: config 0 descriptor?? [ 220.633669][ T6033] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 220.636455][ T6033] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 220.638963][ T6033] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 220.643009][ T6033] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 220.645766][ T6033] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 220.648474][ T6033] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 220.650849][ T6033] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 220.653438][ T6033] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 220.655940][ T6033] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 220.660930][ T6033] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 220.687027][ T5359] udevd[5359]: worker [7085] terminated by signal 33 (Unknown signal 33) [ 220.689816][ T5359] udevd[5359]: worker [7085] failed while handling '/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:047F:FFFF.0009/hidraw/hidraw1' [ 221.188773][ T9] usb 7-1: USB disconnect, device number 24 [ 221.206407][T10062] mkiss: ax0: crc mode is auto. [ 221.237409][T10072] batadv0: mtu less than device minimum [ 221.240790][T10072] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (9) [ 221.245576][T10072] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (9) [ 221.250325][T10072] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (9) [ 221.256382][T10072] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (9) [ 221.261208][T10072] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (9) [ 221.266112][T10072] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (9) [ 221.270305][T10072] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (9) [ 221.274352][T10072] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (9) [ 221.278876][T10072] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (9) [ 221.317816][T10082] netlink: 'syz.1.1381': attribute type 10 has an invalid length. [ 221.320645][T10082] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1381'. [ 221.331612][T10082] team0: Port device geneve0 added [ 221.574558][ T6033] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 221.744188][ T6033] usb 8-1: Using ep0 maxpacket: 8 [ 221.755916][ T6033] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 221.770443][ T6033] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 221.787980][ T6033] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 221.792366][ T6033] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.797244][ T6033] usb 8-1: config 0 descriptor?? [ 222.022778][ T6033] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 222.228326][T10080] iowarrior 8-1:0.0: Error -90 while submitting URB [ 222.231811][ T6033] usb 8-1: USB disconnect, device number 17 [ 222.628947][ T5951] Bluetooth: hci1: unexpected event for opcode 0x0c5b [ 222.776052][T10109] netlink: 'syz.3.1388': attribute type 39 has an invalid length. [ 223.122893][T10120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1390'. [ 223.338220][T10129] random: crng reseeded on system resumption [ 223.975663][ T5951] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 224.001118][T10139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1394'. [ 224.272889][ T6042] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 224.426633][ T6042] usb 8-1: Using ep0 maxpacket: 16 [ 224.430359][ T6042] usb 8-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid maxpacket 58989, setting to 1024 [ 224.434476][ T6042] usb 8-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 224.437725][ T6042] usb 8-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 224.442179][ T6042] usb 8-1: config 1 interface 0 has no altsetting 0 [ 224.448199][ T6042] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 224.451467][ T6042] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.454335][ T6042] usb 8-1: Product: syz [ 224.455668][ T6042] usb 8-1: Manufacturer: syz [ 224.457120][ T6042] usb 8-1: SerialNumber: syz [ 224.460755][T10142] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 224.503193][ T1020] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 224.653699][ T1020] usb 5-1: Using ep0 maxpacket: 8 [ 224.659120][ T1020] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 224.663421][ T1020] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 224.668252][ T1020] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 224.671372][ T1020] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.676861][ T1020] usb 5-1: config 0 descriptor?? [ 224.679413][ T6042] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 225.025860][ T1020] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 225.097761][ T6016] usb 5-1: USB disconnect, device number 25 [ 225.244440][T10166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.249958][T10166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.906873][ T5951] Bluetooth: hci1: unexpected event for opcode 0x0c5b [ 226.353987][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804c189800: rx timeout, send abort [ 226.358883][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804c189400: rx timeout, send abort [ 226.362259][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804c189800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 226.369286][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804c189400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 226.600177][T10182] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 226.603007][T10182] UDF-fs: Scanning with blocksize 2048 failed [ 226.609101][T10182] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 226.612469][T10182] UDF-fs: Scanning with blocksize 4096 failed [ 226.938682][T10187] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1411'. [ 227.058226][ T6016] usb 8-1: USB disconnect, device number 18 [ 227.079607][ T6016] usblp0: removed [ 227.280969][T10193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1412'. [ 228.470485][T10203] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1414'. [ 228.590007][T10193] macvlan2: entered allmulticast mode [ 228.592271][T10193] veth1_vlan: entered allmulticast mode [ 228.595895][T10193] veth1_vlan: left allmulticast mode [ 228.615718][T10205] can0: slcan on ptm0. [ 228.620516][T10205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1415'. [ 228.728726][ T40] audit: type=1800 audit(1759433794.487:1218): pid=10215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1417" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 228.738438][T10204] can0 (unregistered): slcan off ptm0. [ 228.783393][ T5951] Bluetooth: hci1: unexpected event for opcode 0x0c5b [ 229.083266][ T6042] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 229.183089][ T9] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 229.234653][ T6042] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 229.240271][ T6042] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 229.244776][ T6042] usb 8-1: config 0 interface 0 has no altsetting 0 [ 229.249162][ T6042] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 229.253834][ T6042] usb 8-1: config 0 interface 0 has no altsetting 0 [ 229.258830][ T6042] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 229.262274][ T6042] usb 8-1: config 0 interface 0 has no altsetting 0 [ 229.266215][ T6042] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 229.271365][ T6042] usb 8-1: config 0 interface 0 has no altsetting 0 [ 229.275058][ T6042] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 229.278272][ T6042] usb 8-1: config 0 interface 0 has no altsetting 0 [ 229.283031][ T6042] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 229.286276][ T6042] usb 8-1: config 0 interface 0 has no altsetting 0 [ 229.290114][ T6042] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 229.293812][ T6042] usb 8-1: config 0 interface 0 has no altsetting 0 [ 229.297721][ T6042] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 229.301263][ T6042] usb 8-1: config 0 interface 0 has no altsetting 0 [ 229.308029][ T6042] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 229.311139][ T6042] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 229.314999][ T6042] usb 8-1: Product: syz [ 229.316776][ T6042] usb 8-1: Manufacturer: syz [ 229.318459][ T6042] usb 8-1: SerialNumber: syz [ 229.321275][ T6042] usb 8-1: config 0 descriptor?? [ 229.328501][ T6042] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 229.352898][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 229.355189][T10261] fuse: Unknown parameter 'group_i00000000000000000000' [ 229.356229][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 229.359442][T10261] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1432'. [ 229.361715][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 229.361746][ T9] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 229.361759][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.363280][ T9] usb 7-1: config 0 descriptor?? [ 229.424089][T10263] team0: No ports can be present during mode change [ 229.524288][T10267] FAULT_INJECTION: forcing a failure. [ 229.524288][T10267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.530035][T10267] CPU: 3 UID: 0 PID: 10267 Comm: syz.0.1435 Not tainted syzkaller #0 PREEMPT(full) [ 229.530061][T10267] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 229.530073][T10267] Call Trace: [ 229.530081][T10267] [ 229.530089][T10267] dump_stack_lvl+0x16c/0x1f0 [ 229.530122][T10267] should_fail_ex+0x512/0x640 [ 229.530152][T10267] _copy_to_user+0x32/0xd0 [ 229.530171][T10267] simple_read_from_buffer+0xcb/0x170 [ 229.530202][T10267] proc_fail_nth_read+0x197/0x240 [ 229.530237][T10267] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 229.530267][T10267] ? rw_verify_area+0xcf/0x6c0 [ 229.530292][T10267] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 229.530320][T10267] vfs_read+0x1e4/0xcf0 [ 229.530343][T10267] ? __pfx_vfs_read+0x10/0x10 [ 229.530357][T10267] ? find_held_lock+0x2b/0x80 [ 229.530385][T10267] ? __fget_files+0x20e/0x3c0 [ 229.530435][T10267] ksys_read+0x12a/0x250 [ 229.530452][T10267] ? __pfx_ksys_read+0x10/0x10 [ 229.530471][T10267] ? rcu_is_watching+0x12/0xc0 [ 229.530494][T10267] __do_fast_syscall_32+0x7c/0x300 [ 229.530517][T10267] do_fast_syscall_32+0x32/0x80 [ 229.530536][T10267] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 229.530558][T10267] RIP: 0023:0xf7f73579 [ 229.530572][T10267] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 229.530589][T10267] RSP: 002b:00000000f5466590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 229.530606][T10267] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f5466620 [ 229.530617][T10267] RDX: 000000000000000f RSI: 00000000f7405ff4 RDI: 0000000000000000 [ 229.530626][T10267] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 229.530636][T10267] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 229.530645][T10267] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 229.530668][T10267] [ 229.593236][ T9] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 229.596479][ C3] vkms_vblank_simulate: vblank timer overrun [ 229.604911][ C2] usb 8-1: yurex_control_callback - control failed: -71 [ 229.606104][ T6035] usb 8-1: USB disconnect, device number 19 [ 229.634204][ T6035] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 229.661404][T10274] net_ratelimit: 10 callbacks suppressed [ 229.661423][T10274] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 229.670628][T10274] binder: 10273:10274 ioctl 7aa 80000240 returned -22 [ 229.673379][T10274] binder_alloc: 10273: binder_alloc_buf size -864 failed, no address space [ 229.677486][T10274] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 229.785089][ T6042] usb 7-1: USB disconnect, device number 25 [ 230.461137][T10276] ceph: No mds server is up or the cluster is laggy [ 231.757250][T10306] netlink: 'syz.0.1445': attribute type 16 has an invalid length. [ 232.022899][ T10] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 232.182791][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 232.188147][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 232.193271][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 232.198829][ T10] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 232.203602][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.209104][ T10] usb 8-1: config 0 descriptor?? [ 232.415721][ T10] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 232.615372][T10308] iowarrior 8-1:0.0: Error -90 while submitting URB [ 232.621491][ T10] usb 8-1: USB disconnect, device number 20 [ 232.724382][T10324] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 232.879690][T10327] tmpfs: Unknown parameter 'rootcontext' [ 233.774685][T10354] [U] `è [ 234.096622][T10369] tipc: Started in network mode [ 234.098693][T10369] tipc: Node identity 080211000001, cluster identity 4711 [ 234.102585][T10369] tipc: Enabled bearer , priority 0 [ 234.107475][T10369] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 234.110694][T10369] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 234.293349][T10388] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 234.308743][T10395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1478'. [ 234.385422][T10399] FAULT_INJECTION: forcing a failure. [ 234.385422][T10399] name failslab, interval 1, probability 0, space 0, times 0 [ 234.389860][T10399] CPU: 0 UID: 3327 PID: 10399 Comm: syz.0.1479 Not tainted syzkaller #0 PREEMPT(full) [ 234.389875][T10399] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 234.389883][T10399] Call Trace: [ 234.389888][T10399] [ 234.389893][T10399] dump_stack_lvl+0x16c/0x1f0 [ 234.389910][T10399] should_fail_ex+0x512/0x640 [ 234.389928][T10399] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 234.389941][T10399] should_failslab+0xc2/0x120 [ 234.389954][T10399] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 234.389966][T10399] ? alloc_empty_file+0x55/0x1e0 [ 234.389982][T10399] alloc_empty_file+0x55/0x1e0 [ 234.389996][T10399] dentry_open+0x46/0xd0 [ 234.390010][T10399] __do_sys_fsmount+0x69a/0x940 [ 234.390023][T10399] ? __pfx___do_sys_fsmount+0x10/0x10 [ 234.390036][T10399] ? rcu_is_watching+0x12/0xc0 [ 234.390052][T10399] __do_fast_syscall_32+0x7c/0x300 [ 234.390065][T10399] do_fast_syscall_32+0x32/0x80 [ 234.390090][T10399] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 234.390104][T10399] RIP: 0023:0xf7f73579 [ 234.390114][T10399] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 234.390125][T10399] RSP: 002b:00000000f546655c EFLAGS: 00000296 ORIG_RAX: 00000000000001b0 [ 234.390136][T10399] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 234.390143][T10399] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 234.390149][T10399] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 234.390155][T10399] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 234.390163][T10399] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 234.390176][T10399] [ 234.509839][T10402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1481'. [ 234.520431][T10402] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1481'. [ 234.723138][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 234.873008][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 234.877837][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 234.884243][ T10] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 234.888066][ T10] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 234.891350][ T10] usb 5-1: Product: syz [ 234.893259][ T10] usb 5-1: Manufacturer: syz [ 234.895096][ T10] usb 5-1: SerialNumber: syz [ 234.899764][ T10] usb 5-1: config 0 descriptor?? [ 234.902270][T10405] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 234.906868][ T10] hub 5-1:0.0: bad descriptor, ignoring hub [ 234.909691][ T10] hub 5-1:0.0: probe with driver hub failed with error -5 [ 235.115586][T10411] overlayfs: failed to clone upperpath [ 235.272553][ T839] tipc: Node number set to 134418688 [ 235.283027][ T10] usb 5-1: USB disconnect, device number 26 [ 235.314929][T10424] overlayfs: failed to clone upperpath [ 235.632917][ T6035] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 235.942915][ T6035] usb 7-1: Using ep0 maxpacket: 8 [ 235.947333][ T6035] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 235.950274][ T6035] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 235.954289][ T6035] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 235.958178][ T6035] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 235.962826][ T6035] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 235.966896][ T6035] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 235.971805][ T6035] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 235.978594][ T6035] usb 7-1: config 168 interface 0 has no altsetting 0 [ 235.983987][ T6035] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 235.986990][ T6035] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 235.991592][ T6035] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 235.998359][ T6035] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 236.003340][ T6035] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 236.007125][ T6035] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 236.011338][ T6035] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 236.016117][ T6035] usb 7-1: config 168 interface 0 has no altsetting 0 [ 236.020922][ T6035] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 236.024688][ T6035] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 236.029149][ T6035] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 236.033057][ T6035] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 236.036849][ T6035] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 236.040651][ T6035] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 236.045087][ T6035] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 236.049824][ T6035] usb 7-1: config 168 interface 0 has no altsetting 0 [ 236.056343][ T6035] usb 7-1: string descriptor 0 read error: -22 [ 236.058617][ T6035] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 236.061922][ T6035] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.075542][ T6035] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 236.282303][ T839] usb 7-1: USB disconnect, device number 26 [ 236.800589][T10476] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1507'. [ 237.192425][T10488] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1509'. [ 237.491399][ T6042] kernel write not supported for file bpf-prog (pid: 6042 comm: kworker/2:4) [ 237.785132][T10514] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1519'. [ 237.788027][T10514] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 237.959648][T10519] input: syz1 as /devices/virtual/input/input21 [ 237.992753][ T29] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 238.179510][ T29] usb 7-1: device descriptor read/64, error -71 [ 238.932796][ T29] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 239.008009][T10526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1524'. [ 239.015400][T10526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1524'. [ 239.020184][T10526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1524'. [ 239.062823][ T29] usb 7-1: device descriptor read/64, error -71 [ 239.173225][ T29] usb usb7-port1: attempt power cycle [ 239.512917][ T29] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 239.593185][ T29] usb 7-1: device descriptor read/8, error -71 [ 239.833895][ T29] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 239.853653][ T29] usb 7-1: device descriptor read/8, error -71 [ 239.963868][ T29] usb usb7-port1: unable to enumerate USB device [ 240.112846][ T1020] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 240.253216][ T1020] usb 7-1: device descriptor read/64, error -71 [ 240.301519][T10556] syz.1.1531: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 240.309152][T10556] CPU: 3 UID: 0 PID: 10556 Comm: syz.1.1531 Not tainted syzkaller #0 PREEMPT(full) [ 240.309169][T10556] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 240.309177][T10556] Call Trace: [ 240.309182][T10556] [ 240.309187][T10556] dump_stack_lvl+0x16c/0x1f0 [ 240.309270][T10556] warn_alloc+0x248/0x3a0 [ 240.309296][T10556] ? __pfx_warn_alloc+0x10/0x10 [ 240.309315][T10556] ? hash_netport4_resize+0x1d8/0x1c50 [ 240.309333][T10556] ? __vmalloc_node_noprof+0xad/0xf0 [ 240.309352][T10556] __vmalloc_node_range_noprof+0x1019/0x14b0 [ 240.309374][T10556] ? hash_netport4_resize+0x1d8/0x1c50 [ 240.309393][T10556] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 240.309412][T10556] ? ___kmalloc_large_node+0xed/0x160 [ 240.309431][T10556] __kvmalloc_node_noprof+0x30a/0x620 [ 240.309450][T10556] ? hash_netport4_resize+0x1d8/0x1c50 [ 240.309465][T10556] ? __kmalloc_noprof+0x242/0x510 [ 240.309475][T10556] ? hash_netport4_resize+0x1d8/0x1c50 [ 240.309492][T10556] ? hash_netport4_resize+0x1d8/0x1c50 [ 240.309507][T10556] hash_netport4_resize+0x1d8/0x1c50 [ 240.309528][T10556] ? __pfx_hash_netport4_add+0x10/0x10 [ 240.309544][T10556] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 240.309559][T10556] ? __pfx___mutex_lock+0x10/0x10 [ 240.309579][T10556] ? __pfx_hash_netport4_resize+0x10/0x10 [ 240.309597][T10556] call_ad.constprop.0+0x36a/0x940 [ 240.309614][T10556] ? __pfx_hash_netport4_resize+0x10/0x10 [ 240.309631][T10556] ? __pfx_call_ad.constprop.0+0x10/0x10 [ 240.309646][T10556] ? __pfx___nla_validate_parse+0x10/0x10 [ 240.309666][T10556] ? __nla_parse+0x40/0x60 [ 240.309680][T10556] ip_set_ad.constprop.0.isra.0+0x3ce/0x870 [ 240.309700][T10556] ? __pfx_ip_set_ad.constprop.0.isra.0+0x10/0x10 [ 240.309718][T10556] ? __pfx_rcu_early_boot_tests+0x10/0x10 [ 240.309747][T10556] ? find_held_lock+0x2b/0x80 [ 240.309764][T10556] nfnetlink_rcv_msg+0x9f9/0x1200 [ 240.309786][T10556] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 240.309804][T10556] ? consume_skb+0xcc/0x100 [ 240.309829][T10556] ? __pfx___dev_queue_xmit+0x10/0x10 [ 240.309849][T10556] netlink_rcv_skb+0x158/0x420 [ 240.309862][T10556] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 240.309879][T10556] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 240.309898][T10556] ? ns_capable+0xd7/0x110 [ 240.309913][T10556] nfnetlink_rcv+0x1b3/0x430 [ 240.309929][T10556] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 240.309943][T10556] ? netlink_deliver_tap+0x1ae/0xd30 [ 240.309957][T10556] netlink_unicast+0x5a7/0x870 [ 240.309971][T10556] ? __pfx_netlink_unicast+0x10/0x10 [ 240.309984][T10556] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 240.310002][T10556] netlink_sendmsg+0x8d1/0xdd0 [ 240.310028][T10556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.310042][T10556] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 240.310067][T10556] ____sys_sendmsg+0xa95/0xc70 [ 240.310084][T10556] ? __pfx_____sys_sendmsg+0x10/0x10 [ 240.310098][T10556] ? get_compat_msghdr+0x11a/0x170 [ 240.310123][T10556] ___sys_sendmsg+0x134/0x1d0 [ 240.310136][T10556] ? __pfx____sys_sendmsg+0x10/0x10 [ 240.310154][T10556] ? find_held_lock+0x2b/0x80 [ 240.310175][T10556] __sys_sendmsg+0x16d/0x220 [ 240.310187][T10556] ? __pfx___sys_sendmsg+0x10/0x10 [ 240.310204][T10556] ? rcu_is_watching+0x12/0xc0 [ 240.310219][T10556] __do_fast_syscall_32+0x7c/0x300 [ 240.310233][T10556] do_fast_syscall_32+0x32/0x80 [ 240.310245][T10556] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 240.310260][T10556] RIP: 0023:0xf7f25579 [ 240.310270][T10556] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 240.310287][T10556] RSP: 002b:00000000f4fb155c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 240.310300][T10556] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000400 [ 240.310307][T10556] RDX: 0000000000000084 RSI: 0000000000000000 RDI: 0000000000000000 [ 240.310314][T10556] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 240.310320][T10556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.310327][T10556] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 240.310340][T10556] [ 240.310346][T10556] Mem-Info: [ 240.450730][T10556] active_anon:4767 inactive_anon:8516 isolated_anon:0 [ 240.450730][T10556] active_file:8651 inactive_file:14687 isolated_file:0 [ 240.450730][T10556] unevictable:1768 dirty:878 writeback:0 [ 240.450730][T10556] slab_reclaimable:6127 slab_unreclaimable:53804 [ 240.450730][T10556] mapped:25268 shmem:9140 pagetables:1390 [ 240.450730][T10556] sec_pagetables:321 bounce:0 [ 240.450730][T10556] kernel_misc_reclaimable:0 [ 240.450730][T10556] free:67634 free_pcp:13965 free_cma:0 [ 240.472713][T10556] Node 0 active_anon:212kB inactive_anon:120kB active_file:48kB inactive_file:172kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:4kB writeback:0kB shmem:4320kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8364kB pagetables:1920kB sec_pagetables:1152kB all_unreclaimable? yes Balloon:0kB [ 240.488055][T10556] Node 1 active_anon:18888kB inactive_anon:33944kB active_file:34556kB inactive_file:58576kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:101056kB dirty:3508kB writeback:0kB shmem:32236kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5004kB pagetables:3704kB sec_pagetables:132kB all_unreclaimable? no Balloon:0kB [ 240.500502][T10556] Node 0 DMA free:2108kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:512kB local_pcp:140kB free_cma:0kB [ 240.502819][ T1020] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 240.513404][T10556] lowmem_reserve[]: 0 295 295 295 295 [ 240.517926][T10556] Node 0 DMA32 free:21340kB boost:4096kB min:17660kB low:21048kB high:24436kB reserved_highatomic:4096KB free_highatomic:312KB active_anon:212kB inactive_anon:112kB active_file:48kB inactive_file:172kB unevictable:3536kB writepending:4kB present:1032196kB managed:302248kB mlocked:0kB bounce:0kB free_pcp:14708kB local_pcp:3940kB free_cma:0kB [ 240.529946][T10556] lowmem_reserve[]: 0 0 0 0 0 [ 240.532087][T10556] Node 1 DMA32 free:247036kB boost:22528kB min:69668kB low:81452kB high:93236kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18888kB inactive_anon:33944kB active_file:34556kB inactive_file:58576kB unevictable:3536kB writepending:3508kB present:1048432kB managed:948220kB mlocked:0kB bounce:0kB free_pcp:40776kB local_pcp:11720kB free_cma:0kB [ 240.545151][T10556] lowmem_reserve[]: 0 0 0 0 0 [ 240.547268][T10556] Node 0 DMA: 13*4kB (UM) 7*8kB (UM) 3*16kB (U) 5*32kB (UM) 4*64kB (UM) 0*128kB 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2108kB [ 240.554350][T10556] Node 0 DMA32: 209*4kB (UMEH) 93*8kB (UMEH) 87*16kB (UMEH) 98*32kB (UMH) 94*64kB (UME) 34*128kB (UME) 11*256kB (UME) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 21340kB [ 240.561421][T10556] Node 1 DMA32: 1468*4kB (UME) 1056*8kB (UM) 349*16kB (UME) 430*32kB (UME) 86*64kB (UME) 138*128kB (UME) 112*256kB (UME) 65*512kB (UM) 57*1024kB (UM) 26*2048kB (UM) 4*4096kB (UM) = 246784kB [ 240.568215][T10556] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 240.572167][T10556] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 240.576467][T10556] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 240.580883][T10556] Node 1 hugepages_total=3 hugepages_free=2 hugepages_surp=1 hugepages_size=2048kB [ 240.584285][T10556] 33027 total pagecache pages [ 240.586159][T10556] 574 pages in swap cache [ 240.588220][T10556] Free swap = 117456kB [ 240.589904][T10556] Total swap = 124996kB [ 240.591473][T10556] 524155 pages RAM [ 240.593046][T10556] 0 pages HighMem/MovableOnly [ 240.594965][T10556] 207698 pages reserved [ 240.598121][T10556] 0 pages cma reserved [ 240.652786][ T1020] usb 7-1: device descriptor read/64, error -71 [ 240.773557][ T1020] usb usb7-port1: attempt power cycle [ 240.861494][T10580] netlink: 'syz.1.1541': attribute type 29 has an invalid length. [ 240.864524][T10580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1541'. [ 241.642623][T10597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1547'. [ 241.828110][T10610] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1549'. [ 241.832004][T10610] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1549'. [ 241.835575][T10610] binder: 10600:10610 ioctl c0306201 80000040 returned -22 [ 241.908457][T10615] netlink: 'syz.0.1549': attribute type 10 has an invalid length. [ 242.694753][T10624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1554'. [ 242.699060][T10610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.705573][T10610] bond0: (slave rose0): Enslaving as an active interface with an up link [ 242.715056][T10615] team0: Device hsr_slave_0 failed to register rx_handler [ 242.793359][T10629] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1555'. [ 242.964596][T10590] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 243.436589][T10658] CUSE: info not properly terminated [ 243.912817][ T55] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 244.052959][ T55] usb 8-1: device descriptor read/64, error -71 [ 244.061245][T10678] fuse: Bad value for 'fd' [ 244.294405][ T55] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 244.422910][ T55] usb 8-1: device descriptor read/64, error -71 [ 244.533695][ T55] usb usb8-port1: attempt power cycle [ 244.845711][T10682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1567'. [ 244.883380][ T55] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 244.903193][ T55] usb 8-1: device descriptor read/8, error -71 [ 245.153868][ T55] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 245.175442][ T55] usb 8-1: device descriptor read/8, error -71 [ 245.286339][ T55] usb usb8-port1: unable to enumerate USB device [ 245.340299][T10701] openvswitch: netlink: IP tunnel dst address not specified [ 245.730756][T10705] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 245.733603][T10705] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 245.740357][T10705] vhci_hcd vhci_hcd.0: Device attached [ 246.013136][ T6042] usb 42-1: SetAddress Request (6) to port 0 [ 246.016563][ T6042] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 246.437461][T10707] vhci_hcd: connection reset by peer [ 246.440056][ T1187] vhci_hcd: stop threads [ 246.441627][ T1187] vhci_hcd: release socket [ 246.443542][ T1187] vhci_hcd: disconnect device [ 246.591108][T10719] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1577'. [ 246.824173][T10733] IPVS: set_ctl: invalid protocol: 46 172.30.1.1:20004 [ 247.092936][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 247.190927][T10754] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1590'. [ 247.195255][T10756] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1591'. [ 247.248100][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.253565][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 247.257970][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.266776][ T10] usb 5-1: config 0 descriptor?? [ 247.276731][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 247.931363][T10774] No control pipe specified [ 248.575771][ T40] audit: type=1326 audit(1759434043.334:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10795 comm="syz.1.1602" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 248.588566][ T40] audit: type=1326 audit(1759434043.344:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10795 comm="syz.1.1602" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 248.603165][ T40] audit: type=1326 audit(1759434043.344:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10795 comm="syz.1.1602" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 248.615777][ T40] audit: type=1326 audit(1759434043.354:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10795 comm="syz.1.1602" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 248.626447][ T40] audit: type=1326 audit(1759434043.354:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10795 comm="syz.1.1602" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 248.633971][ T40] audit: type=1326 audit(1759434043.354:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10795 comm="syz.1.1602" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 248.641216][ T40] audit: type=1326 audit(1759434043.354:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10795 comm="syz.1.1602" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 248.648108][ T40] audit: type=1326 audit(1759434043.354:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10795 comm="syz.1.1602" exe="/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 248.657728][ T40] audit: type=1326 audit(1759434043.354:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10795 comm="syz.1.1602" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 248.677674][ T40] audit: type=1326 audit(1759434043.354:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10795 comm="syz.1.1602" exe="/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 248.942967][ T839] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 249.093520][ T839] usb 8-1: Using ep0 maxpacket: 8 [ 249.096899][ T839] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 249.101124][ T839] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 249.105345][ T839] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 249.108957][ T839] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.114031][ T839] usb 8-1: config 0 descriptor?? [ 249.321691][ T839] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 249.524236][T10805] iowarrior 8-1:0.0: Error -90 while submitting URB [ 249.527952][ T6016] usb 8-1: USB disconnect, device number 25 [ 249.888182][ T10] pwc: recv_control_msg error -71 req 02 val 2b00 [ 249.891718][ T10] pwc: recv_control_msg error -71 req 02 val 2700 [ 249.894859][ T10] pwc: recv_control_msg error -71 req 02 val 2c00 [ 249.897313][ T10] pwc: recv_control_msg error -71 req 04 val 1000 [ 249.899900][ T10] pwc: recv_control_msg error -71 req 04 val 1300 [ 249.903049][ T10] pwc: recv_control_msg error -71 req 04 val 1400 [ 249.905858][ T10] pwc: recv_control_msg error -71 req 02 val 2000 [ 249.908339][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 249.910973][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 249.913749][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 249.916234][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 249.918681][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 249.921210][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 249.923978][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 249.926708][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 249.929391][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 249.940447][ T10] pwc: Registered as video103. [ 249.945801][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb5/5-1/input/input22 [ 249.964685][ T10] usb 5-1: USB disconnect, device number 27 [ 250.821214][T10864] sp0: Synchronizing with TNC [ 250.826473][T10864] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1616'. [ 251.093200][ T6042] usb 42-1: device descriptor read/8, error -110 [ 251.212798][ T6033] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 251.362775][ T6033] usb 7-1: Using ep0 maxpacket: 8 [ 251.375822][ T6033] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 251.380167][ T6033] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 251.384087][ T6033] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 251.386941][ T6033] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.391256][ T6033] usb 7-1: config 0 descriptor?? [ 251.486847][ T6042] usb usb42-port1: attempt power cycle [ 251.601119][ T6033] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 251.801121][T10866] iowarrior 7-1:0.0: Error -90 while submitting URB [ 251.806381][ T10] usb 7-1: USB disconnect, device number 34 [ 252.046068][ T6042] usb usb42-port1: unable to enumerate USB device [ 253.019814][T10899] FAULT_INJECTION: forcing a failure. [ 253.019814][T10899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.025640][T10899] CPU: 0 UID: 0 PID: 10899 Comm: syz.0.1625 Not tainted syzkaller #0 PREEMPT(full) [ 253.025658][T10899] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 253.025666][T10899] Call Trace: [ 253.025670][T10899] [ 253.025675][T10899] dump_stack_lvl+0x16c/0x1f0 [ 253.025694][T10899] should_fail_ex+0x512/0x640 [ 253.025715][T10899] _copy_from_user+0x2e/0xd0 [ 253.025727][T10899] v4l2_compat_get_user+0x844/0x1200 [ 253.025746][T10899] ? __pfx_v4l2_compat_get_user+0x10/0x10 [ 253.025770][T10899] ? rcu_is_watching+0x12/0xc0 [ 253.025785][T10899] ? trace_kmalloc+0x2b/0xd0 [ 253.025798][T10899] ? __kmalloc_noprof+0x242/0x510 [ 253.025813][T10899] video_usercopy+0x362/0x1440 [ 253.025831][T10899] ? __pfx___video_do_ioctl+0x10/0x10 [ 253.025848][T10899] ? __pfx_video_usercopy+0x10/0x10 [ 253.025884][T10899] ? hook_file_ioctl_common+0x145/0x410 [ 253.025904][T10899] v4l2_ioctl+0x1bd/0x250 [ 253.025920][T10899] ? __might_fault+0x81/0x190 [ 253.025933][T10899] v4l2_compat_ioctl32+0x217/0x2c0 [ 253.025948][T10899] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 253.025963][T10899] __ia32_compat_sys_ioctl+0x242/0x370 [ 253.025981][T10899] __do_fast_syscall_32+0x7c/0x300 [ 253.025995][T10899] do_fast_syscall_32+0x32/0x80 [ 253.026007][T10899] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 253.026022][T10899] RIP: 0023:0xf7f73579 [ 253.026032][T10899] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 253.026044][T10899] RSP: 002b:00000000f546655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 253.026057][T10899] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0f8565c [ 253.026064][T10899] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 253.026071][T10899] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 253.026077][T10899] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 253.026090][T10899] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 253.026104][T10899] [ 253.354557][ T6016] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 253.384767][T10923] pvfs2: Unknown parameter 'fowner' [ 253.443887][T10929] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 253.448696][T10929] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 253.452605][T10929] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 253.456427][T10929] UDF-fs: Scanning with blocksize 512 failed [ 253.486251][T10929] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 253.490776][T10929] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 253.504094][ T6016] usb 8-1: Using ep0 maxpacket: 8 [ 253.504762][T10929] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 253.509433][ T6016] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 253.514578][ T6016] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 253.516012][T10929] UDF-fs: Scanning with blocksize 1024 failed [ 253.520963][ T6016] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 253.523133][T10929] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 253.527604][ T6016] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.530769][T10929] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 253.537622][T10929] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 253.541364][T10929] UDF-fs: Scanning with blocksize 2048 failed [ 253.553559][T10929] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 253.557858][T10929] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 253.564064][ T6016] usb 8-1: config 0 descriptor?? [ 253.568768][T10929] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 253.582959][T10929] UDF-fs: Scanning with blocksize 4096 failed [ 253.585930][T10929] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 253.602002][ T12] tipc: Subscription rejected, illegal request [ 253.772478][ T6016] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 253.970874][T10903] iowarrior 8-1:0.0: Error -90 while submitting URB [ 253.976492][ T55] usb 8-1: USB disconnect, device number 26 [ 254.082865][ T6016] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 254.213127][ T6016] usb 7-1: device descriptor read/64, error -71 [ 254.462830][ T6016] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 254.593005][ T6016] usb 7-1: device descriptor read/64, error -71 [ 254.705853][ T6016] usb usb7-port1: attempt power cycle [ 255.015120][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 255.015133][ T40] audit: type=1326 audit(1759434049.774:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10965 comm="syz.1.1642" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f25579 code=0x0 [ 255.042840][ T6016] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 255.063612][ T6016] usb 7-1: device descriptor read/8, error -71 [ 255.302797][ T6016] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 255.325460][ T6016] usb 7-1: device descriptor read/8, error -71 [ 255.435933][ T6016] usb usb7-port1: unable to enumerate USB device [ 255.453154][T10969] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1643'. [ 255.582846][ T6033] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 255.712922][ T6033] usb 7-1: device descriptor read/64, error -71 [ 255.853018][T10977] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1646'. [ 255.952949][ T6033] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 256.005908][T10986] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1650'. [ 256.013197][T10986] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1650'. [ 256.083596][ T6033] usb 7-1: device descriptor read/64, error -71 [ 256.143158][ T6042] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 256.193214][ T6033] usb usb7-port1: attempt power cycle [ 256.208479][T10995] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1654'. [ 256.293408][ T6042] usb 5-1: Using ep0 maxpacket: 8 [ 256.297057][ T6042] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 256.300529][ T6042] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 256.304070][ T6042] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 256.307191][ T6042] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.311831][ T6042] usb 5-1: config 0 descriptor?? [ 256.520310][ T6042] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 256.532852][ T6033] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 256.556121][ T6033] usb 7-1: device descriptor read/8, error -71 [ 256.717620][T10981] iowarrior 5-1:0.0: Error -90 while submitting URB [ 256.733047][ T10] usb 5-1: USB disconnect, device number 28 [ 256.793231][ T6033] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 256.838977][ T6033] usb 7-1: device descriptor read/8, error -71 [ 256.953110][ T6033] usb usb7-port1: unable to enumerate USB device [ 257.451666][T11044] ubi31: attaching mtd0 [ 257.455122][T11044] FAULT_INJECTION: forcing a failure. [ 257.455122][T11044] name failslab, interval 1, probability 0, space 0, times 0 [ 257.459544][T11044] CPU: 3 UID: 0 PID: 11044 Comm: syz.0.1671 Not tainted syzkaller #0 PREEMPT(full) [ 257.459562][T11044] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 257.459569][T11044] Call Trace: [ 257.459575][T11044] [ 257.459581][T11044] dump_stack_lvl+0x16c/0x1f0 [ 257.459600][T11044] should_fail_ex+0x512/0x640 [ 257.459619][T11044] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 257.459634][T11044] should_failslab+0xc2/0x120 [ 257.459648][T11044] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 257.459659][T11044] ? __pfx___might_resched+0x10/0x10 [ 257.459673][T11044] ? alloc_vmap_area+0x648/0x29c0 [ 257.459690][T11044] alloc_vmap_area+0x648/0x29c0 [ 257.459709][T11044] ? __pfx_alloc_vmap_area+0x10/0x10 [ 257.459727][T11044] __get_vm_area_node+0x1ca/0x330 [ 257.459745][T11044] __vmalloc_node_range_noprof+0x271/0x14b0 [ 257.459761][T11044] ? ubi_attach_mtd_dev+0x155b/0x35d0 [ 257.459776][T11044] ? _printk+0xc7/0x100 [ 257.459793][T11044] ? __pfx__printk+0x10/0x10 [ 257.459812][T11044] ? ubi_attach_mtd_dev+0x155b/0x35d0 [ 257.459828][T11044] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 257.459844][T11044] ? __pfx_ubi_msg+0x10/0x10 [ 257.459860][T11044] ? ubi_attach_mtd_dev+0x155b/0x35d0 [ 257.459873][T11044] __vmalloc_node_noprof+0xad/0xf0 [ 257.459888][T11044] ? ubi_attach_mtd_dev+0x155b/0x35d0 [ 257.459903][T11044] ubi_attach_mtd_dev+0x155b/0x35d0 [ 257.459923][T11044] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 257.459935][T11044] ? __pfx_get_mtd_device+0x10/0x10 [ 257.459956][T11044] ctrl_cdev_ioctl+0x337/0x3d0 [ 257.459970][T11044] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 257.459985][T11044] ? __fget_files+0x20e/0x3c0 [ 257.460003][T11044] ? __might_fault+0x80/0x190 [ 257.460019][T11044] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 257.460032][T11044] compat_ptr_ioctl+0x6e/0xa0 [ 257.460047][T11044] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 257.460061][T11044] __ia32_compat_sys_ioctl+0x242/0x370 [ 257.460078][T11044] __do_fast_syscall_32+0x7c/0x300 [ 257.460092][T11044] do_fast_syscall_32+0x32/0x80 [ 257.460103][T11044] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 257.460119][T11044] RIP: 0023:0xf7f73579 [ 257.460129][T11044] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 257.460140][T11044] RSP: 002b:00000000f546655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 257.460152][T11044] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040186f40 [ 257.460159][T11044] RDX: 0000000080000440 RSI: 0000000000000000 RDI: 0000000000000000 [ 257.460165][T11044] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 257.460171][T11044] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 257.460177][T11044] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 257.460191][T11044] [ 257.462580][T11044] warn_alloc: 1 callbacks suppressed [ 257.462594][T11044] syz.0.1671: vmalloc error: size 4096, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 257.569698][T11044] CPU: 2 UID: 0 PID: 11044 Comm: syz.0.1671 Not tainted syzkaller #0 PREEMPT(full) [ 257.569724][T11044] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 257.569735][T11044] Call Trace: [ 257.569742][T11044] [ 257.569749][T11044] dump_stack_lvl+0x16c/0x1f0 [ 257.569774][T11044] warn_alloc+0x248/0x3a0 [ 257.569793][T11044] ? __pfx_warn_alloc+0x10/0x10 [ 257.569812][T11044] ? kfree+0x2b4/0x4d0 [ 257.569842][T11044] ? __get_vm_area_node+0x208/0x330 [ 257.569890][T11044] __vmalloc_node_range_noprof+0xb2c/0x14b0 [ 257.569915][T11044] ? _printk+0xc7/0x100 [ 257.569947][T11044] ? __pfx__printk+0x10/0x10 [ 257.569975][T11044] ? ubi_attach_mtd_dev+0x155b/0x35d0 [ 257.570004][T11044] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 257.570027][T11044] ? __pfx_ubi_msg+0x10/0x10 [ 257.570054][T11044] ? ubi_attach_mtd_dev+0x155b/0x35d0 [ 257.570072][T11044] __vmalloc_node_noprof+0xad/0xf0 [ 257.570096][T11044] ? ubi_attach_mtd_dev+0x155b/0x35d0 [ 257.570116][T11044] ubi_attach_mtd_dev+0x155b/0x35d0 [ 257.570146][T11044] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 257.570163][T11044] ? __pfx_get_mtd_device+0x10/0x10 [ 257.570193][T11044] ctrl_cdev_ioctl+0x337/0x3d0 [ 257.570213][T11044] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 257.570237][T11044] ? __fget_files+0x20e/0x3c0 [ 257.570261][T11044] ? __might_fault+0x80/0x190 [ 257.570281][T11044] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 257.570301][T11044] compat_ptr_ioctl+0x6e/0xa0 [ 257.570323][T11044] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 257.570345][T11044] __ia32_compat_sys_ioctl+0x242/0x370 [ 257.570372][T11044] __do_fast_syscall_32+0x7c/0x300 [ 257.570457][T11044] do_fast_syscall_32+0x32/0x80 [ 257.570552][T11044] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 257.570576][T11044] RIP: 0023:0xf7f73579 [ 257.570591][T11044] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 257.570608][T11044] RSP: 002b:00000000f546655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 257.570627][T11044] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040186f40 [ 257.570638][T11044] RDX: 0000000080000440 RSI: 0000000000000000 RDI: 0000000000000000 [ 257.570647][T11044] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 257.570656][T11044] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 257.570667][T11044] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 257.570687][T11044] [ 257.570695][T11044] Mem-Info: [ 257.683805][T11044] active_anon:7136 inactive_anon:8510 isolated_anon:0 [ 257.683805][T11044] active_file:6309 inactive_file:13173 isolated_file:0 [ 257.683805][T11044] unevictable:1768 dirty:131 writeback:0 [ 257.683805][T11044] slab_reclaimable:6141 slab_unreclaimable:55229 [ 257.683805][T11044] mapped:26351 shmem:11801 pagetables:1464 [ 257.683805][T11044] sec_pagetables:323 bounce:0 [ 257.683805][T11044] kernel_misc_reclaimable:0 [ 257.683805][T11044] free:63154 free_pcp:16745 free_cma:0 [ 257.700345][T11044] Node 0 active_anon:260kB inactive_anon:116kB active_file:48kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:4kB writeback:0kB shmem:4324kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8416kB pagetables:2020kB sec_pagetables:1152kB all_unreclaimable? yes Balloon:0kB [ 257.711981][T11044] Node 1 active_anon:27784kB inactive_anon:33924kB active_file:25188kB inactive_file:52488kB unevictable:11676kB isolated(anon):0kB isolated(file):0kB mapped:109484kB dirty:520kB writeback:0kB shmem:42880kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:6144kB kernel_stack:5044kB pagetables:3736kB sec_pagetables:140kB all_unreclaimable? no Balloon:0kB [ 257.724534][T11044] Node 0 DMA free:2108kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:528kB local_pcp:140kB free_cma:0kB [ 257.736671][T11044] lowmem_reserve[]: 0 295 295 295 295 [ 257.738717][T11044] Node 0 DMA32 free:21240kB boost:4096kB min:17660kB low:21048kB high:24436kB reserved_highatomic:4096KB free_highatomic:312KB active_anon:260kB inactive_anon:108kB active_file:48kB inactive_file:204kB unevictable:3536kB writepending:4kB present:1032196kB managed:302248kB mlocked:0kB bounce:0kB free_pcp:15360kB local_pcp:4192kB free_cma:0kB [ 257.751770][T11044] lowmem_reserve[]: 0 0 0 0 0 [ 257.754397][T11044] Node 1 DMA32 free:221144kB boost:22528kB min:69668kB low:81452kB high:93236kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27784kB inactive_anon:33924kB active_file:25188kB inactive_file:52488kB unevictable:11676kB writepending:520kB present:1048432kB managed:948220kB mlocked:8188kB bounce:0kB free_pcp:52308kB local_pcp:14672kB free_cma:0kB [ 257.768604][T11044] lowmem_reserve[]: 0 0 0 0 0 [ 257.771068][T11044] Node 0 DMA: 13*4kB (UM) 7*8kB (UM) 3*16kB (U) 5*32kB (UM) 4*64kB (UM) 0*128kB 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2108kB [ 257.777840][T11044] Node 0 DMA32: 316*4kB (UMEH) 105*8kB (UMEH) 140*16kB (UMEH) 104*32kB (UMH) 78*64kB (UME) 29*128kB (UME) 11*256kB (UME) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 21240kB [ 257.784479][T11044] Node 1 DMA32: 906*4kB (UME) 520*8kB (UME) 295*16kB (UME) 24*32kB (UME) 221*64kB (UME) 141*128kB (UME) 98*256kB (UME) 64*512kB (UM) 55*1024kB (UM) 22*2048kB (UM) 4*4096kB (UM) = 221080kB [ 257.793229][T11044] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 257.797121][T11044] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 257.800603][T11044] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 257.804646][T11044] Node 1 hugepages_total=3 hugepages_free=2 hugepages_surp=1 hugepages_size=2048kB [ 257.808536][T11044] 31889 total pagecache pages [ 257.810270][T11044] 610 pages in swap cache [ 257.811735][T11044] Free swap = 117484kB [ 257.813259][T11044] Total swap = 124996kB [ 257.814835][T11044] 524155 pages RAM [ 257.816176][T11044] 0 pages HighMem/MovableOnly [ 257.817688][T11044] 207698 pages reserved [ 257.819051][T11044] 0 pages cma reserved [ 257.898720][T11052] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 257.900843][T11056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1675'. [ 258.202880][ T7405] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 258.336893][T11081] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.1683'. [ 258.339892][T11081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1683'. [ 258.373696][ T7405] usb 5-1: Using ep0 maxpacket: 8 [ 258.379936][ T7405] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 258.384820][ T7405] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 258.389501][ T7405] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 258.393165][ T7405] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.398694][ T7405] usb 5-1: config 0 descriptor?? [ 258.611951][ T7405] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 258.689186][T11094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1688'. [ 258.812831][T11061] iowarrior 5-1:0.0: Error -90 while submitting URB [ 258.823225][ T7405] usb 5-1: USB disconnect, device number 29 [ 259.663571][T11096] orangefs_mount: mount request failed with -4 [ 259.820735][T11117] netlink: 'syz.0.1691': attribute type 10 has an invalid length. [ 259.835826][T11117] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 259.840508][T11117] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 259.846908][T11117] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 260.064067][T11125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1697'. [ 260.070963][T11125] 9pnet_fd: Insufficient options for proto=fd [ 260.396917][T11131] team0: Device geneve2 is up. Set it down before adding it as a team port [ 260.536682][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.538934][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.598306][T11137] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1702'. [ 260.723041][T11152] fuse: Unknown parameter 'rootmod ' [ 260.876381][T11165] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1713'. [ 261.128585][ T40] audit: type=1800 audit(1759434055.884:1240): pid=11161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1712" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 261.392840][ T55] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 261.555602][ T55] usb 8-1: Using ep0 maxpacket: 8 [ 261.559800][ T55] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 261.569867][ T55] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 261.573069][ T55] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 261.576422][ T55] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.583714][ T55] usb 8-1: config 0 descriptor?? [ 261.798973][ T55] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 261.854933][T11179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1718'. [ 261.858213][T11179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.861556][T11179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.866519][T11179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.869194][T11179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.994381][T11170] iowarrior 8-1:0.0: Error -90 while submitting URB [ 262.026830][ T6033] usb 8-1: USB disconnect, device number 27 [ 262.158016][T11166] kexec: Could not allocate control_code_buffer [ 262.219855][T11183] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1720'. [ 262.244655][T11185] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1720'. [ 262.574997][ T40] audit: type=1326 audit(1759434057.334:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11190 comm="syz.3.1722" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff1579 code=0x0 [ 262.881436][T11197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1724'. [ 262.892471][T11197] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 263.184753][T11201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1726'. [ 263.961376][T11210] netlink: 'syz.1.1729': attribute type 12 has an invalid length. [ 264.122883][ T10] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 264.275013][ T10] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 264.278911][ T10] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 264.284120][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 264.288197][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 264.294782][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 264.303749][ T10] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 264.308185][ T10] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 264.311660][ T10] usb 8-1: Product: syz [ 264.314088][ T10] usb 8-1: Manufacturer: syz [ 264.322637][ T10] cdc_wdm 8-1:1.0: skipping garbage [ 264.325181][ T10] cdc_wdm 8-1:1.0: skipping garbage [ 264.331097][ T10] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 264.333874][ T10] cdc_wdm 8-1:1.0: Unknown control protocol [ 264.587251][T11208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.591067][T11208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.036878][ C3] cdc_wdm 8-1:1.0: Unexpected error -71 [ 265.039755][ T6033] usb 8-1: USB disconnect, device number 28 [ 265.039820][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 265.045101][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 265.047658][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 265.830889][T11256] openvswitch: netlink: Flow key attribute not present in set flow. [ 266.044479][T11263] syzkaller1: tun_chr_ioctl cmd 1074025672 [ 266.047005][T11263] syzkaller1: ignored: set checksum disabled [ 266.210523][T11268] dlm: plock device version mismatch: kernel (1.2.0), user (458753.0.0) [ 266.490926][T11276] loop0: detected capacity change from 0 to 2560 [ 266.495511][T11275] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 266.501550][T11275] block device autoloading is deprecated and will be removed. [ 266.520352][ T7352] buffer_io_error: 27 callbacks suppressed [ 266.520369][ T7352] Buffer I/O error on dev loop0, logical block 0, async page read [ 266.527801][ T7352] Buffer I/O error on dev loop0, logical block 0, async page read [ 266.531731][ T7352] Buffer I/O error on dev loop0, logical block 0, async page read [ 266.537246][ T7352] Buffer I/O error on dev loop0, logical block 0, async page read [ 266.541685][ T7352] Buffer I/O error on dev loop0, logical block 0, async page read [ 266.640735][T11280] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1753'. [ 266.805255][ T5967] Buffer I/O error on dev loop0, logical block 0, async page read [ 266.809844][ T5967] Buffer I/O error on dev loop0, logical block 0, async page read [ 266.814902][ T5967] Buffer I/O error on dev loop0, logical block 0, async page read [ 266.817912][ T5967] Buffer I/O error on dev loop0, logical block 0, async page read [ 266.821307][ T5967] Buffer I/O error on dev loop0, logical block 0, async page read [ 267.005185][T11288] FAULT_INJECTION: forcing a failure. [ 267.005185][T11288] name failslab, interval 1, probability 0, space 0, times 0 [ 267.012868][T11288] CPU: 1 UID: 0 PID: 11288 Comm: syz.2.1757 Not tainted syzkaller #0 PREEMPT(full) [ 267.012899][T11288] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 267.012917][T11288] Call Trace: [ 267.012945][T11288] [ 267.012954][T11288] dump_stack_lvl+0x16c/0x1f0 [ 267.012982][T11288] should_fail_ex+0x512/0x640 [ 267.013012][T11288] ? fs_reclaim_acquire+0xae/0x150 [ 267.013037][T11288] ? tomoyo_encode2+0x100/0x3e0 [ 267.013061][T11288] should_failslab+0xc2/0x120 [ 267.013083][T11288] __kmalloc_noprof+0xd2/0x510 [ 267.013099][T11288] ? d_absolute_path+0x136/0x1a0 [ 267.013125][T11288] tomoyo_encode2+0x100/0x3e0 [ 267.013148][T11288] tomoyo_encode+0x29/0x50 [ 267.013167][T11288] tomoyo_realpath_from_path+0x18f/0x6e0 [ 267.013194][T11288] tomoyo_path_number_perm+0x245/0x580 [ 267.013212][T11288] ? tomoyo_path_number_perm+0x237/0x580 [ 267.013231][T11288] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 267.013276][T11288] ? find_held_lock+0x2b/0x80 [ 267.013296][T11288] ? hook_file_ioctl_common+0x145/0x410 [ 267.013322][T11288] ? __fget_files+0x20e/0x3c0 [ 267.013347][T11288] ? __might_fault+0x80/0x190 [ 267.013369][T11288] security_file_ioctl_compat+0x9b/0x240 [ 267.013392][T11288] __ia32_compat_sys_ioctl+0xc3/0x370 [ 267.013419][T11288] __do_fast_syscall_32+0x7c/0x300 [ 267.013442][T11288] do_fast_syscall_32+0x32/0x80 [ 267.013461][T11288] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 267.013485][T11288] RIP: 0023:0xf70fe579 [ 267.013500][T11288] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 267.013518][T11288] RSP: 002b:00000000f54ee55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 267.013537][T11288] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0405602 [ 267.013548][T11288] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 267.013559][T11288] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 267.013568][T11288] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 267.013578][T11288] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 267.013601][T11288] [ 267.013626][T11288] ERROR: Out of memory at tomoyo_realpath_from_path. [ 267.221409][T11293] openvswitch: netlink: IP tunnel dst address not specified [ 267.562821][ T6042] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 267.722740][ T6042] usb 5-1: Using ep0 maxpacket: 8 [ 267.725838][ T6042] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 267.729396][ T6042] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 267.732578][ T6042] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 267.735811][ T6042] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.740840][ T6042] usb 5-1: config 0 descriptor?? [ 267.946010][ T6042] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 268.040526][T11312] loop7: detected capacity change from 0 to 16384 [ 268.147146][T11297] iowarrior 5-1:0.0: Error -90 while submitting URB [ 268.151802][ T6042] usb 5-1: USB disconnect, device number 30 [ 268.784289][T11346] netlink: 'syz.2.1778': attribute type 12 has an invalid length. [ 268.787600][T11346] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1778'. [ 268.796652][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1778'. [ 268.813061][T11346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1778'. [ 269.414752][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.418583][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.555883][T11368] team_slave_0: entered promiscuous mode [ 269.558262][T11368] team_slave_1: entered promiscuous mode [ 269.560663][T11368] dummy0: entered promiscuous mode [ 269.563288][T11368] macsec1: entered promiscuous mode [ 269.565334][T11368] team0: entered promiscuous mode [ 269.568002][T11368] macsec1: entered allmulticast mode [ 269.570625][T11368] team0: entered allmulticast mode [ 269.572819][T11368] team_slave_0: entered allmulticast mode [ 269.574977][T11368] team_slave_1: entered allmulticast mode [ 269.577058][T11368] dummy0: entered allmulticast mode [ 269.581593][T11368] team0: Device macsec1 is already an upper device of the team interface [ 269.588840][T11368] team0: left allmulticast mode [ 269.590714][T11368] team_slave_0: left allmulticast mode [ 269.592840][T11368] team_slave_1: left allmulticast mode [ 269.595046][T11368] dummy0: left allmulticast mode [ 269.596656][T11368] team0: left promiscuous mode [ 269.598902][T11368] team_slave_0: left promiscuous mode [ 269.600692][T11368] team_slave_1: left promiscuous mode [ 269.602782][T11368] dummy0: left promiscuous mode [ 269.857081][T11378] input: syz1 as /devices/virtual/input/input23 [ 269.991943][T11391] FAULT_INJECTION: forcing a failure. [ 269.991943][T11391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.998249][T11391] CPU: 1 UID: 0 PID: 11391 Comm: syz.0.1793 Not tainted syzkaller #0 PREEMPT(full) [ 269.998277][T11391] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 269.998287][T11391] Call Trace: [ 269.998292][T11391] [ 269.998297][T11391] dump_stack_lvl+0x16c/0x1f0 [ 269.998316][T11391] should_fail_ex+0x512/0x640 [ 269.998339][T11391] _copy_from_iter+0x29f/0x1720 [ 269.998364][T11391] ? __pfx__copy_from_iter+0x10/0x10 [ 269.998421][T11391] ? _copy_from_iter+0x15d/0x1720 [ 269.998461][T11391] skb_copy_datagram_from_iter+0x124/0x740 [ 269.998497][T11391] ? iov_iter_advance+0x7d/0x6c0 [ 269.998531][T11391] tun_get_user+0x1859/0x3cd0 [ 269.998567][T11391] ? __pfx_tun_get_user+0x10/0x10 [ 269.998589][T11391] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 269.998607][T11391] ? find_held_lock+0x2b/0x80 [ 269.998622][T11391] ? tun_get+0x191/0x370 [ 269.998639][T11391] tun_chr_write_iter+0xdc/0x210 [ 269.998656][T11391] vfs_write+0x7d0/0x11d0 [ 269.998669][T11391] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 269.998686][T11391] ? __pfx_vfs_write+0x10/0x10 [ 269.998696][T11391] ? find_held_lock+0x2b/0x80 [ 269.998719][T11391] ksys_write+0x12a/0x250 [ 269.998730][T11391] ? __pfx_ksys_write+0x10/0x10 [ 269.998744][T11391] ? rcu_is_watching+0x12/0xc0 [ 269.998762][T11391] __do_fast_syscall_32+0x7c/0x300 [ 269.998777][T11391] do_fast_syscall_32+0x32/0x80 [ 269.998790][T11391] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 269.998816][T11391] RIP: 0023:0xf7f73579 [ 269.998827][T11391] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 269.998840][T11391] RSP: 002b:00000000f546655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 269.998853][T11391] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800003c0 [ 269.998861][T11391] RDX: 0000000000000fce RSI: 0000000000000000 RDI: 0000000000000000 [ 269.998868][T11391] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 269.998875][T11391] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 269.998882][T11391] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 269.998897][T11391] [ 270.122631][T11394] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1794'. [ 270.158267][T11398] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1795'. [ 270.290321][T11409] overlayfs: missing 'lowerdir' [ 270.835946][T11420] FAULT_INJECTION: forcing a failure. [ 270.835946][T11420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.841650][T11420] CPU: 0 UID: 0 PID: 11420 Comm: syz.3.1803 Not tainted syzkaller #0 PREEMPT(full) [ 270.841673][T11420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 270.841685][T11420] Call Trace: [ 270.841692][T11420] [ 270.841700][T11420] dump_stack_lvl+0x16c/0x1f0 [ 270.841723][T11420] should_fail_ex+0x512/0x640 [ 270.841755][T11420] _copy_from_user+0x2e/0xd0 [ 270.841773][T11420] ucma_write+0x128/0x330 [ 270.841791][T11420] ? __pfx_ucma_write+0x10/0x10 [ 270.841807][T11420] ? bpf_lsm_file_permission+0x9/0x10 [ 270.841834][T11420] ? security_file_permission+0x71/0x210 [ 270.841856][T11420] ? rw_verify_area+0xcf/0x6c0 [ 270.841883][T11420] ? __pfx_ucma_write+0x10/0x10 [ 270.841899][T11420] vfs_write+0x29d/0x11d0 [ 270.841922][T11420] ? __pfx_vfs_write+0x10/0x10 [ 270.841936][T11420] ? find_held_lock+0x2b/0x80 [ 270.841956][T11420] ? __fget_files+0x204/0x3c0 [ 270.841986][T11420] ? __fget_files+0x20e/0x3c0 [ 270.842019][T11420] ksys_write+0x1f8/0x250 [ 270.842035][T11420] ? __pfx_ksys_write+0x10/0x10 [ 270.842055][T11420] ? rcu_is_watching+0x12/0xc0 [ 270.842077][T11420] __do_fast_syscall_32+0x7c/0x300 [ 270.842099][T11420] do_fast_syscall_32+0x32/0x80 [ 270.842116][T11420] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 270.842138][T11420] RIP: 0023:0xf7ff1579 [ 270.842153][T11420] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 270.842170][T11420] RSP: 002b:00000000f54e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 270.842187][T11420] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000900 [ 270.842198][T11420] RDX: 00000000000000a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 270.842208][T11420] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 270.842217][T11420] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 270.842227][T11420] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 270.842250][T11420] [ 271.290572][T11441] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 271.761466][T11448] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1811'. [ 271.766914][T11448] openvswitch: netlink: EtherType 0 is less than min 600 [ 272.258879][T11459] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.327998][T11459] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.557687][T11459] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.739705][T11459] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.051931][ T46] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.069838][ T1187] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.087780][ T1187] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.092221][ T1187] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.224877][T11485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1820'. [ 273.231415][T11485] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1820'. [ 273.281377][T11495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1823'. [ 273.285966][T11495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1823'. [ 273.634631][T11507] IPVS: set_ctl: invalid protocol: 29 10.1.1.0:20004 [ 274.007418][T11510] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1825'. [ 274.667409][ T5951] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 275.528274][T11575] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 275.644955][T11577] wireguard0: entered promiscuous mode [ 275.647856][T11577] wireguard0: entered allmulticast mode [ 275.673703][T11576] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1849'. [ 275.679289][ T9] IPVS: starting estimator thread 0... [ 275.765365][T11582] IPVS: using max 31 ests per chain, 74400 per kthread [ 276.040713][T11596] overlayfs: failed to clone upperpath [ 276.341905][T11604] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1859'. [ 276.350682][T11604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 276.721960][T11616] FAULT_INJECTION: forcing a failure. [ 276.721960][T11616] name failslab, interval 1, probability 0, space 0, times 0 [ 276.728216][T11616] CPU: 2 UID: 0 PID: 11616 Comm: syz.3.1864 Not tainted syzkaller #0 PREEMPT(full) [ 276.728241][T11616] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 276.728252][T11616] Call Trace: [ 276.728260][T11616] [ 276.728267][T11616] dump_stack_lvl+0x16c/0x1f0 [ 276.728294][T11616] should_fail_ex+0x512/0x640 [ 276.728325][T11616] ? hash_ip4_add+0x11cf/0x2990 [ 276.728346][T11616] should_failslab+0xc2/0x120 [ 276.728368][T11616] __kmalloc_noprof+0xd2/0x510 [ 276.728393][T11616] hash_ip4_add+0x11cf/0x2990 [ 276.728429][T11616] ? __pfx_hash_ip4_add+0x10/0x10 [ 276.728459][T11616] hash_ip4_uadt+0x5d9/0x8d0 [ 276.728481][T11616] ? __pfx_hash_ip4_add+0x10/0x10 [ 276.728503][T11616] ? __pfx_hash_ip4_uadt+0x10/0x10 [ 276.728523][T11616] ? lock_acquire+0x179/0x350 [ 276.728553][T11616] ? is_bpf_text_address+0x8a/0x1a0 [ 276.728578][T11616] ? bpf_ksym_find+0x124/0x1c0 [ 276.728599][T11616] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 276.728627][T11616] call_ad.constprop.0+0x16b/0x940 [ 276.728656][T11616] ? __pfx_call_ad.constprop.0+0x10/0x10 [ 276.728679][T11616] ? __pfx___nla_validate_parse+0x10/0x10 [ 276.728709][T11616] ? __nla_parse+0x40/0x60 [ 276.728733][T11616] ip_set_ad.constprop.0.isra.0+0x3ce/0x870 [ 276.728762][T11616] ? __pfx_ip_set_ad.constprop.0.isra.0+0x10/0x10 [ 276.728789][T11616] ? rcu_early_boot_tests+0x1/0x160 [ 276.728835][T11616] ? find_held_lock+0x2b/0x80 [ 276.728862][T11616] nfnetlink_rcv_msg+0x9f9/0x1200 [ 276.728895][T11616] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 276.728923][T11616] ? consume_skb+0xcc/0x100 [ 276.728965][T11616] ? __pfx___dev_queue_xmit+0x10/0x10 [ 276.728995][T11616] netlink_rcv_skb+0x158/0x420 [ 276.729012][T11616] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 276.729039][T11616] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 276.729070][T11616] ? ns_capable+0xd7/0x110 [ 276.729095][T11616] nfnetlink_rcv+0x1b3/0x430 [ 276.729117][T11616] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 276.729138][T11616] ? netlink_deliver_tap+0x1ae/0xd30 [ 276.729158][T11616] netlink_unicast+0x5a7/0x870 [ 276.729181][T11616] ? __pfx_netlink_unicast+0x10/0x10 [ 276.729201][T11616] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 276.729226][T11616] netlink_sendmsg+0x8d1/0xdd0 [ 276.729249][T11616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.729271][T11616] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 276.729304][T11616] ____sys_sendmsg+0xa95/0xc70 [ 276.729327][T11616] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.729346][T11616] ? get_compat_msghdr+0x11a/0x170 [ 276.729386][T11616] ___sys_sendmsg+0x134/0x1d0 [ 276.729404][T11616] ? __pfx____sys_sendmsg+0x10/0x10 [ 276.729432][T11616] ? find_held_lock+0x2b/0x80 [ 276.729468][T11616] __sys_sendmsg+0x16d/0x220 [ 276.729487][T11616] ? __pfx___sys_sendmsg+0x10/0x10 [ 276.729512][T11616] ? rcu_is_watching+0x12/0xc0 [ 276.729534][T11616] __do_fast_syscall_32+0x7c/0x300 [ 276.729557][T11616] do_fast_syscall_32+0x32/0x80 [ 276.729573][T11616] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 276.729595][T11616] RIP: 0023:0xf7ff1579 [ 276.729608][T11616] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 276.729624][T11616] RSP: 002b:00000000f54e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 276.729641][T11616] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000 [ 276.729652][T11616] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 276.729664][T11616] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 276.729689][T11616] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 276.729699][T11616] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 276.729723][T11616] [ 276.880744][ C2] vkms_vblank_simulate: vblank timer overrun [ 276.935350][T11620] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1866'. [ 276.973721][T11620] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1866'. [ 277.010280][T11622] netlink: 'syz.1.1867': attribute type 9 has an invalid length. [ 277.013427][T11622] netlink: 'syz.1.1867': attribute type 7 has an invalid length. [ 277.016572][T11622] netlink: 'syz.1.1867': attribute type 8 has an invalid length. [ 277.060291][T11628] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1869'. [ 277.064230][T11628] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 277.235744][T11635] can: request_module (can-proto-0) failed. [ 277.249211][T11635] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1871'. [ 277.296446][T11641] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 277.338752][T11643] FAULT_INJECTION: forcing a failure. [ 277.338752][T11643] name failslab, interval 1, probability 0, space 0, times 0 [ 277.344613][T11643] CPU: 0 UID: 0 PID: 11643 Comm: syz.3.1874 Not tainted syzkaller #0 PREEMPT(full) [ 277.344633][T11643] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 277.344642][T11643] Call Trace: [ 277.344647][T11643] [ 277.344653][T11643] dump_stack_lvl+0x16c/0x1f0 [ 277.344672][T11643] should_fail_ex+0x512/0x640 [ 277.344694][T11643] ? fs_reclaim_acquire+0xae/0x150 [ 277.344714][T11643] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 277.344741][T11643] should_failslab+0xc2/0x120 [ 277.344757][T11643] __kmalloc_noprof+0xd2/0x510 [ 277.344774][T11643] tomoyo_realpath_from_path+0xc2/0x6e0 [ 277.344793][T11643] ? tomoyo_profile+0x47/0x60 [ 277.344815][T11643] tomoyo_path_number_perm+0x245/0x580 [ 277.344829][T11643] ? tomoyo_path_number_perm+0x237/0x580 [ 277.344845][T11643] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 277.344876][T11643] ? find_held_lock+0x2b/0x80 [ 277.344892][T11643] ? hook_file_ioctl_common+0x145/0x410 [ 277.344912][T11643] ? __fget_files+0x20e/0x3c0 [ 277.344932][T11643] ? __might_fault+0x80/0x190 [ 277.344948][T11643] security_file_ioctl_compat+0x9b/0x240 [ 277.344966][T11643] __ia32_compat_sys_ioctl+0xc3/0x370 [ 277.344990][T11643] __do_fast_syscall_32+0x7c/0x300 [ 277.345006][T11643] do_fast_syscall_32+0x32/0x80 [ 277.345021][T11643] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 277.345038][T11643] RIP: 0023:0xf7ff1579 [ 277.345049][T11643] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 277.345063][T11643] RSP: 002b:00000000f54e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 277.345077][T11643] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000050009405 [ 277.345085][T11643] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 277.345093][T11643] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 277.345101][T11643] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 277.345109][T11643] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 277.345126][T11643] [ 277.345131][T11643] ERROR: Out of memory at tomoyo_realpath_from_path. [ 277.649501][T11656] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1878'. [ 277.654083][T11656] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 278.012830][ T55] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 278.129035][T11672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1884'. [ 278.182876][ T55] usb 8-1: Using ep0 maxpacket: 8 [ 278.188281][ T55] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 278.192131][ T55] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 278.198071][ T55] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 278.202331][ T55] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.209809][ T55] usb 8-1: config 0 descriptor?? [ 278.423658][ T55] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 278.623652][T11664] iowarrior 8-1:0.0: Error -90 while submitting URB [ 278.637363][ T7405] usb 8-1: USB disconnect, device number 29 [ 278.654351][ T10] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 278.739527][T11688] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1888'. [ 278.742542][T11688] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 278.797305][T11692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1889'. [ 278.802611][T11692] openvswitch: netlink: Unknown nsh attribute 0 [ 278.806160][T11692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.836295][ T10] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 278.839846][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.844328][T11694] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 278.861319][ T10] usb 7-1: Product: syz [ 278.870117][ T10] usb 7-1: Manufacturer: syz [ 278.871791][ T10] usb 7-1: SerialNumber: syz [ 279.340148][ T10] rtl8150 7-1:1.0: couldn't reset the device [ 279.344235][ T10] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 279.362960][ T10] usb 7-1: USB disconnect, device number 43 [ 279.892995][ T6042] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 280.056831][ T6042] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 280.060602][ T6042] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.064721][ T6042] usb 5-1: Product: syz [ 280.066603][ T6042] usb 5-1: Manufacturer: syz [ 280.068896][ T6042] usb 5-1: SerialNumber: syz [ 280.086850][ T6042] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 280.143762][ T6033] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 280.611625][ T1020] usb 5-1: USB disconnect, device number 31 [ 280.720151][T11742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1901'. [ 280.778546][T11747] loop5: detected capacity change from 0 to 7 [ 280.793129][T11747] Dev loop5: unable to read RDB block 7 [ 280.801328][T11747] loop5: unable to read partition table [ 280.805891][T11747] loop5: partition table beyond EOD, truncated [ 280.812896][T11747] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 281.155751][T11755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1906'. [ 281.253626][ T6033] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 281.256377][ T6033] ath9k_htc: Failed to initialize the device [ 281.259533][ T1020] usb 5-1: ath9k_htc: USB layer deinitialized [ 281.900931][T11770] vxcan1: entered allmulticast mode [ 282.144092][T11783] __nla_validate_parse: 1 callbacks suppressed [ 282.144108][T11783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1914'. [ 282.150332][T11783] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.137647][T11811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1924'. [ 283.141466][T11811] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.226830][T11815] syz_tun: entered allmulticast mode [ 283.231147][T11814] syz_tun: left allmulticast mode [ 283.285348][T11819] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.612355][T11822] overlayfs: failed to clone upperpath [ 283.623471][T11826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1937'. [ 283.629249][T11826] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.631768][T11826] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.848888][ T40] audit: type=1326 audit(1759434078.604:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11841 comm="syz.1.1936" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f25579 code=0x0 [ 284.030184][T11849] siw: device registration error -23 [ 284.555600][T11855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1939'. [ 284.684252][T11860] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1940'. [ 285.708351][ T55] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 285.711327][ T55] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 285.717443][ T55] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 285.719858][ T55] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 285.722163][ T55] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 285.726037][ T55] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 285.729169][ T55] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 285.732071][ T55] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 285.735893][ T55] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 285.742384][ T55] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 285.748718][ T55] hid-generic 00A0:0006:0003.000A: hidraw1: HID v0.05 Device [syz1] on syz0 [ 285.788105][T11881] fido_id[11881]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 285.947077][ T40] audit: type=1326 audit(1759434080.704:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11889 comm="syz.1.1952" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 285.993849][ T40] audit: type=1326 audit(1759434080.724:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11889 comm="syz.1.1952" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 286.004634][ T40] audit: type=1326 audit(1759434080.724:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11889 comm="syz.1.1952" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 286.017418][ T40] audit: type=1326 audit(1759434080.724:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11889 comm="syz.1.1952" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 286.028339][ T40] audit: type=1326 audit(1759434080.724:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11889 comm="syz.1.1952" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 286.035481][T11891] tipc: Enabled bearer , priority 10 [ 286.040914][ T40] audit: type=1326 audit(1759434080.724:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11889 comm="syz.1.1952" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 286.068915][ T40] audit: type=1326 audit(1759434080.724:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11889 comm="syz.1.1952" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 286.089237][ T40] audit: type=1326 audit(1759434080.724:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11889 comm="syz.1.1952" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 286.109962][ T40] audit: type=1326 audit(1759434080.724:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11889 comm="syz.1.1952" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 286.382977][T11906] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 286.438462][T11909] input: syz1 as /devices/virtual/input/input24 [ 287.392996][ T6042] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 287.530162][T11925] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 287.532411][T11925] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 287.536500][T11925] vhci_hcd vhci_hcd.0: Device attached [ 287.543613][ T6042] usb 5-1: Invalid ep0 maxpacket: 64 [ 287.657877][T11928] vhci_hcd: connection closed [ 287.665234][ T213] vhci_hcd: stop threads [ 287.669690][ T213] vhci_hcd: release socket [ 287.671870][ T213] vhci_hcd: disconnect device [ 287.685702][ T6042] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 287.763003][T11915] tipc: Resetting bearer [ 287.785734][ T46] netdevsim netdevsim0 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.788846][ T46] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.794097][ T46] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.799590][ T46] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.843249][ T6042] usb 5-1: Invalid ep0 maxpacket: 64 [ 287.848194][ T6042] usb usb5-port1: attempt power cycle [ 288.282090][T11942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1966'. [ 288.323010][ T6042] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 288.346741][ T6042] usb 5-1: Invalid ep0 maxpacket: 64 [ 288.472821][ T6042] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 288.495651][ T6042] usb 5-1: Invalid ep0 maxpacket: 64 [ 288.499218][ T6042] usb usb5-port1: unable to enumerate USB device [ 289.556597][T11969] wg1: entered promiscuous mode [ 289.558917][T11969] wg1: entered allmulticast mode [ 290.021169][T11976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1976'. [ 290.141212][T11983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1979'. [ 290.611602][T11994] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1982'. [ 290.617714][T11994] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1982'. [ 290.681100][T11996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1981'. [ 290.799115][ T80] Bluetooth: (null): Invalid header checksum [ 290.807237][ T80] Bluetooth: (null): Invalid header checksum [ 290.880927][T12005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1985'. [ 290.904413][ T80] Bluetooth: (null): Invalid header checksum [ 291.015374][ T46] Bluetooth: (null): Invalid header checksum [ 291.060034][T12011] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 291.067030][T12011] syz.0.1987(12011): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 291.135194][ T46] Bluetooth: (null): Invalid header checksum [ 291.395722][T12013] netlink: 'syz.3.1988': attribute type 153 has an invalid length. [ 291.399196][T12013] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1988'. [ 291.528889][T12017] syz_tun: entered allmulticast mode [ 291.538217][T12016] syz_tun: left allmulticast mode [ 291.860784][T12029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1994'. [ 291.970380][T12039] tipc: Enabling of bearer rejected, already enabled [ 291.989892][T12039] input: syz1 as /devices/virtual/input/input25 [ 292.981318][T12082] tipc: Enabling of bearer rejected, failed to enable media [ 293.105834][T12088] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.109061][T12088] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.786917][T12097] tipc: Enabling of bearer rejected, already enabled [ 293.823008][T12097] tipc: Resetting bearer [ 294.223445][T12113] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2028'. [ 294.508988][T12117] syzkaller1: entered promiscuous mode [ 294.511687][T12117] syzkaller1: entered allmulticast mode [ 295.420249][T12157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2039'. [ 295.526890][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.529611][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.623887][ C2] ------------[ cut here ]------------ [ 295.625744][ C2] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 295.629131][ C2] WARNING: CPU: 2 PID: 0 at net/mac80211/rate.c:398 __rate_control_send_low+0x661/0x780 [ 295.632589][ C2] Modules linked in: [ 295.634940][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted syzkaller #0 PREEMPT(full) [ 295.639911][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 295.644220][ C2] RIP: 0010:__rate_control_send_low+0x661/0x780 [ 295.646695][ C2] Code: a4 a0 d4 00 00 00 e8 ee 5b f7 f6 44 8b 44 24 24 45 89 e9 89 d9 48 8b 74 24 08 44 89 e2 48 c7 c7 80 d8 c2 8c e8 b0 36 b6 f6 90 <0f> 0b 90 90 e9 26 fd ff ff 48 8b 3c 24 e8 fd de 5d f7 e9 fb fc ff [ 295.654413][ C2] RSP: 0018:ffffc90000538930 EFLAGS: 00010282 [ 295.656930][ C2] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81796528 [ 295.659604][ C2] RDX: ffff88801d6fc900 RSI: ffffffff81796535 RDI: 0000000000000001 [ 295.662437][ C2] RBP: ffff88802b9f07a8 R08: 0000000000000001 R09: 0000000000000000 [ 295.665185][ C2] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff [ 295.668299][ C2] R13: 0000000000000000 R14: 000000000000000c R15: ffff88802b9f07b0 [ 295.671216][ C2] FS: 0000000000000000(0000) GS:ffff888097e66000(0000) knlGS:0000000000000000 [ 295.676124][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 295.678708][ C2] CR2: 000000008011f018 CR3: 000000004df8c000 CR4: 0000000000352ef0 [ 295.681828][ C2] Call Trace: [ 295.682973][ C2] [ 295.683932][ C2] rate_control_send_low+0x29a/0x820 [ 295.685990][ C2] ? trace_kmem_cache_alloc+0x28/0xc0 [ 295.688387][ C2] ? kmem_cache_alloc_node_noprof+0x225/0x3b0 [ 295.690874][ C2] rate_control_get_rate+0x1be/0x5e0 [ 295.692605][ C2] ieee80211_beacon_get_finish+0x467/0x670 [ 295.695252][ C2] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 295.697995][ C2] __ieee80211_beacon_get+0xc56/0x1e40 [ 295.700506][ C2] ? __lock_acquire+0xb97/0x1ce0 [ 295.702719][ C2] ieee80211_beacon_get_tim+0xa6/0x280 [ 295.704677][ C2] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 295.707180][ C2] mac80211_hwsim_beacon_tx+0x4d9/0xa40 [ 295.709293][ C2] __iterate_interfaces+0x2e2/0x650 [ 295.711505][ C2] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 295.714370][ C2] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 295.717133][ C2] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 295.720050][ C2] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 295.722827][ C2] mac80211_hwsim_beacon+0x105/0x1b0 [ 295.725240][ C2] __hrtimer_run_queues+0x202/0xad0 [ 295.727439][ C2] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 295.729390][ C2] ? read_tsc+0x9/0x20 [ 295.731334][ C2] hrtimer_run_softirq+0x17d/0x350 [ 295.733727][ C2] handle_softirqs+0x219/0x8e0 [ 295.735716][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 295.738081][ C2] __irq_exit_rcu+0x109/0x170 [ 295.740228][ C2] irq_exit_rcu+0x9/0x30 [ 295.741676][ C2] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 295.743932][ C2] [ 295.745274][ C2] [ 295.746682][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 295.749167][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 295.751479][ C2] Code: 38 5f 02 e9 c3 09 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d a3 86 1c 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 295.760490][ C2] RSP: 0018:ffffc9000047fdf8 EFLAGS: 00000286 [ 295.762703][ C2] RAX: 0000000000425287 RBX: 0000000000000002 RCX: ffffffff8b4d7fb9 [ 295.765648][ C2] RDX: 0000000000000000 RSI: ffffffff8d9c2638 RDI: ffffffff8bd00dc0 [ 295.769481][ C2] RBP: ffffed1003adf920 R08: 0000000000000001 R09: ffffed10056c6655 [ 295.773923][ C2] R10: ffff88802b6332ab R11: 0000000000000000 R12: 0000000000000002 [ 295.776858][ C2] R13: ffff88801d6fc900 R14: ffffffff9060a290 R15: 0000000000000000 [ 295.779622][ C2] ? ct_kernel_exit+0x139/0x190 [ 295.781868][ C2] default_idle+0x13/0x20 [ 295.783765][ C2] default_idle_call+0x6c/0xb0 [ 295.785786][ C2] do_idle+0x38d/0x500 [ 295.787454][ C2] ? __pfx_do_idle+0x10/0x10 [ 295.788987][ C2] ? trace_sched_exit_tp+0x2f/0x120 [ 295.790879][ C2] cpu_startup_entry+0x4f/0x60 [ 295.793295][ C2] start_secondary+0x21d/0x2b0 [ 295.795680][ C2] ? __pfx_start_secondary+0x10/0x10 [ 295.798470][ C2] common_startup_64+0x13e/0x148 [ 295.800715][ C2] [ 295.801787][ C2] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 295.804243][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted syzkaller #0 PREEMPT(full) [ 295.807600][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 295.811526][ C2] Call Trace: [ 295.813235][ C2] [ 295.814737][ C2] dump_stack_lvl+0x3d/0x1f0 [ 295.816785][ C2] vpanic+0x6e8/0x7a0 [ 295.818626][ C2] ? __pfx_vpanic+0x10/0x10 [ 295.820616][ C2] ? __rate_control_send_low+0x661/0x780 [ 295.822630][ C2] panic+0xca/0xd0 [ 295.823785][ C2] ? __pfx_panic+0x10/0x10 [ 295.825404][ C2] ? check_panic_on_warn+0x1f/0xb0 [ 295.827501][ C2] check_panic_on_warn+0xab/0xb0 [ 295.829775][ C2] __warn+0xf6/0x3c0 [ 295.831522][ C2] ? __pfx_vprintk_emit+0x10/0x10 [ 295.833458][ C2] ? __rate_control_send_low+0x661/0x780 [ 295.835666][ C2] report_bug+0x3c3/0x580 [ 295.837430][ C2] ? __rate_control_send_low+0x661/0x780 [ 295.839581][ C2] handle_bug+0x184/0x210 [ 295.841216][ C2] exc_invalid_op+0x17/0x50 [ 295.843246][ C2] asm_exc_invalid_op+0x1a/0x20 [ 295.845286][ C2] RIP: 0010:__rate_control_send_low+0x661/0x780 [ 295.847585][ C2] Code: a4 a0 d4 00 00 00 e8 ee 5b f7 f6 44 8b 44 24 24 45 89 e9 89 d9 48 8b 74 24 08 44 89 e2 48 c7 c7 80 d8 c2 8c e8 b0 36 b6 f6 90 <0f> 0b 90 90 e9 26 fd ff ff 48 8b 3c 24 e8 fd de 5d f7 e9 fb fc ff [ 295.855169][ C2] RSP: 0018:ffffc90000538930 EFLAGS: 00010282 [ 295.857637][ C2] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81796528 [ 295.860562][ C2] RDX: ffff88801d6fc900 RSI: ffffffff81796535 RDI: 0000000000000001 [ 295.863367][ C2] RBP: ffff88802b9f07a8 R08: 0000000000000001 R09: 0000000000000000 [ 295.866856][ C2] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff [ 295.870115][ C2] R13: 0000000000000000 R14: 000000000000000c R15: ffff88802b9f07b0 [ 295.873329][ C2] ? __warn_printk+0x198/0x350 [ 295.875447][ C2] ? __warn_printk+0x1a5/0x350 [ 295.877178][ C2] rate_control_send_low+0x29a/0x820 [ 295.879062][ C2] ? trace_kmem_cache_alloc+0x28/0xc0 [ 295.881152][ C2] ? kmem_cache_alloc_node_noprof+0x225/0x3b0 [ 295.882991][ C2] rate_control_get_rate+0x1be/0x5e0 [ 295.885010][ C2] ieee80211_beacon_get_finish+0x467/0x670 [ 295.887620][ C2] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 295.890647][ C2] __ieee80211_beacon_get+0xc56/0x1e40 [ 295.892802][ C2] ? __lock_acquire+0xb97/0x1ce0 [ 295.894809][ C2] ieee80211_beacon_get_tim+0xa6/0x280 [ 295.896811][ C2] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 295.898655][ C2] mac80211_hwsim_beacon_tx+0x4d9/0xa40 [ 295.900829][ C2] __iterate_interfaces+0x2e2/0x650 [ 295.902766][ C2] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 295.904664][ C2] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 295.907198][ C2] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 295.909875][ C2] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 295.913911][ C2] mac80211_hwsim_beacon+0x105/0x1b0 [ 295.916005][ C2] __hrtimer_run_queues+0x202/0xad0 [ 295.918657][ C2] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 295.921717][ C2] ? read_tsc+0x9/0x20 [ 295.923143][ C2] hrtimer_run_softirq+0x17d/0x350 [ 295.924879][ C2] handle_softirqs+0x219/0x8e0 [ 295.926914][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 295.929287][ C2] __irq_exit_rcu+0x109/0x170 [ 295.930861][ C2] irq_exit_rcu+0x9/0x30 [ 295.932276][ C2] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 295.934546][ C2] [ 295.935777][ C2] [ 295.936967][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 295.939346][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 295.941632][ C2] Code: 38 5f 02 e9 c3 09 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d a3 86 1c 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 295.951303][ C2] RSP: 0018:ffffc9000047fdf8 EFLAGS: 00000286 [ 295.953439][ C2] RAX: 0000000000425287 RBX: 0000000000000002 RCX: ffffffff8b4d7fb9 [ 295.956501][ C2] RDX: 0000000000000000 RSI: ffffffff8d9c2638 RDI: ffffffff8bd00dc0 [ 295.959842][ C2] RBP: ffffed1003adf920 R08: 0000000000000001 R09: ffffed10056c6655 [ 295.963006][ C2] R10: ffff88802b6332ab R11: 0000000000000000 R12: 0000000000000002 [ 295.965539][ C2] R13: ffff88801d6fc900 R14: ffffffff9060a290 R15: 0000000000000000 [ 295.968563][ C2] ? ct_kernel_exit+0x139/0x190 [ 295.970329][ C2] default_idle+0x13/0x20 [ 295.972007][ C2] default_idle_call+0x6c/0xb0 [ 295.974558][ C2] do_idle+0x38d/0x500 [ 295.976890][ C2] ? __pfx_do_idle+0x10/0x10 [ 295.978742][ C2] ? trace_sched_exit_tp+0x2f/0x120 [ 295.980598][ C2] cpu_startup_entry+0x4f/0x60 [ 295.982550][ C2] start_secondary+0x21d/0x2b0 [ 295.984257][ C2] ? __pfx_start_secondary+0x10/0x10 [ 295.985974][ C2] common_startup_64+0x13e/0x148 [ 295.987990][ C2] [ 295.990239][ C2] Kernel Offset: disabled [ 295.991594][ C2] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:33:52 Registers: info registers vcpu 0 CPU#0 RAX=00000000005f1731 RBX=0000000000000000 RCX=ffffffff8b4d7fb9 RDX=0000000000000000 RSI=ffffffff8d9c2638 RDI=ffffffff8bd00dc0 RBP=fffffbfff1bd2f00 RSP=ffffffff8de07e08 R8 =0000000000000001 R9 =ffffed1005686655 R10=ffff88802b4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de97800 R14=ffffffff9060a290 R15=0000000000000000 RIP=ffffffff8b4d6aff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097c66000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000006c172000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=0000001b055f4523 RCX=1ffff110056a74ab RDX=1ffff110056a74cf RSI=0000000000000011 RDI=ffff88801bbfa578 RBP=ffff88801bbfa500 RSP=ffffc900043977c0 R8 =0000000000000011 R9 =ffff88802b53b05c R10=0000000000000001 R11=0000000000000001 R12=ffff88802b53a500 R13=ffff88802b53a558 R14=ffff88802b53a678 R15=0000000000000000 RIP=ffffffff818c2603 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097d66000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080001862 CR3=000000006c172000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851d3355 RDI=ffffffff9ab52140 RBP=ffffffff9ab52100 RSP=ffffc900005382a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000065 R14=ffffffff9ab52100 R15=ffffffff851d32f0 RIP=ffffffff851d337f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097e66000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008011f018 CR3=000000004df8c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=0000000000000000 RCX=ffffffff82082673 RDX=fffff94000339eef RSI=0000000000000004 RDI=ffffea00019cf770 RBP=0000000000000000 RSP=ffffc90002baf670 R8 =0000000000000001 R9 =fffff94000339eee R10=ffffea00019cf773 R11=0000000000000000 R12=ffffea00019cf748 R13=dffffc0000000000 R14=ffffea00019cf740 R15=ffffea00019cf740 RIP=ffffffff82082678 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097f66000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f155c0 CR3=0000000067c84000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000