last executing test programs: 5.440033676s ago: executing program 3 (id=836): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syz_tun\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/30, 0x1e) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, r2, 0x25, 0x0, @val=@netfilter={0x0, 0x1, 0x3, 0x1}}, 0x20) syz_emit_ethernet(0xd81, &(0x7f0000001940)=ANY=[@ANYBLOB="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"], 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x181) write$cgroup_int(r4, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f00000007c0)={0x1, 0x0, [{0x1, 0x0, 0x4b9, 0x4f1b04e0, 0x422}]}) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f00000003c0)={"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"}) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(r3, 0x1) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f00000003c0)={r8, r9/1000+60000}, 0x8) recvfrom$inet(r3, &(0x7f0000000440)=""/103, 0x67, 0x2000, &(0x7f00000004c0)={0x2, 0x4e22, @loopback}, 0x10) syz_open_dev$vim2m(&(0x7f0000000380), 0x20007, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0xc04c561a, &(0x7f00000000c0)) 4.659137159s ago: executing program 0 (id=842): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x9574) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x11) (async) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x11) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000140)={0x50, 0x0, 0x1000000000, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0x0, 0x4, {0x200dd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.658816767s ago: executing program 1 (id=843): syz_open_dev$hidraw(&(0x7f0000000180), 0x2000004, 0x200643) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc854}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, 0x0, 0x24008850) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x7, 0x0) epoll_create(0x5) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000240)=0xfe) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) io_setup(0x4, &(0x7f0000000600)=0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000000)="ff070000", 0x4}]) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x100, 0x70bd28, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_DEL_KEY(r2, 0x0, 0x24002000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4001) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 3.810145846s ago: executing program 0 (id=845): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@ifindex, 0x2e, 0x1, 0x9, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000340), &(0x7f00000003c0), 0x0}, 0x40) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000480)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00f737f5"], 0x5) setreuid(0xee00, 0x0) write$sequencer(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', &(0x7f00000004c0), 0x1200004, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x13) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r4) mount$9p_fd(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340), 0x1400, &(0x7f00000027c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_none}, {@access_uid}, {@access_user}, {@dfltuid}, {@version_u}, {@debug={'debug', 0x3d, 0x8}}], [{@dont_measure}, {@euid_eq={'euid', 0x3d, r4}}, {@smackfstransmute={'smackfstransmute', 0x3d, '%-'}}]}}) chdir(&(0x7f0000000100)='./file0\x00') r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x35c3, 0x1000, 0x8}, 0x0, 0x0, 0x0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000180)={0x0, 0x1, r0, 0x5, 0x80000}) 3.617092438s ago: executing program 1 (id=846): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3095b90b396cd8ec", "3499a517a1df1c71496cffeebaabfe5eb548502ce0f59ce4a4af09f0438ece31", "4277dea9", "0cf02f56bec1eb9e"}, 0x38) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000006c00)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x8, 0x1d, 0x0, 0x0, @binary="1be5605e"}]}, 0x28}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0x11, 0x8040, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x78) 3.334888065s ago: executing program 3 (id=847): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x3c) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000001c0)=[0x4], 0x0, 0x0, 0x1}}, 0x3c) 3.249942466s ago: executing program 1 (id=848): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@ifindex, 0x2e, 0x1, 0x9, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000340), &(0x7f00000003c0), 0x0}, 0x40) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00f737f5"], 0x5) setreuid(0xee00, 0x0) write$sequencer(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', &(0x7f00000004c0), 0x1200004, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"/300], 0x12c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x13) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r4) mount$9p_fd(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340), 0x1400, &(0x7f00000027c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_none}, {@access_uid}, {@access_user}, {@dfltuid}, {@version_u}, {@debug={'debug', 0x3d, 0x8}}], [{@dont_measure}, {@euid_eq={'euid', 0x3d, r4}}, {@smackfstransmute={'smackfstransmute', 0x3d, '%-'}}]}}) chdir(&(0x7f0000000100)='./file0\x00') r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x35c3, 0x1000, 0x8}, 0x0, 0x0, 0x0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000180)={0x0, 0x1, r0, 0x5, 0x80000}) 3.019981986s ago: executing program 0 (id=849): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r0 = userfaultfd(0x80001) r1 = openat$cdrom(0xffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(r1, 0x5396, &(0x7f0000000140)={0x8000, 0x1}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r2, 0x1) listen(r2, 0xffffe545) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r0, &(0x7f0000000300)=""/172, 0xdc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000e97000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x4000}) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x400c9206, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="76e44ad79d1feb7dd6feaa6cc042a5c79aec484867c8cd0613507a72bfba21e870ae7b19f9c809df41574d990c07e898a502c5ee17d3ccfd6e0833487c3238af8c1a4613f173b054e0c0ee382ec4dbd3cfd3759070e469d2f269e595a4202f04771914b16a716e253d6c97257de55034ddad386eae850f46ccd28ce967e4804edf34e4621105e76a170d0d489b6ccf988f4d528f8147b74873996b7551e7767863661206c172a2a6f895d5c030b2bd3277b145a777ecbae930b15c1d6c6d3fc90c83930bfc068004bf3ba07713522f4347423240ad48d8c8bb0a440680083fcbca3a", @ANYRES32=r0, @ANYRES64=r0, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRESOCT=r3, @ANYRESHEX=r3, @ANYRES16=r0], 0x114}], 0x1, 0x0, 0x0, 0x40088}, 0x840) 3.019536187s ago: executing program 3 (id=850): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x0, 0x4e}, 0x28) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed50004"], 0x11) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f00000003c0)=@riscv64_sbi_sta={0x803000000a000001, &(0x7f0000000100)=0x7}) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000001100000002"], 0x0, 0x56}, 0x20) 2.431792637s ago: executing program 0 (id=851): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000400)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a7, 0x0, 0x0, 0x28}}}, &(0x7f0000000180)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r6, r5, &(0x7f0000000480)={0x0, 0x18e2, 0x10000, 0x0, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x200, 0x5, 0x41}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x2, 0x19b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x1, 0x1, 0x252}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r4, '\x00', {0x3, 0xb66, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="2e37d76626056dee50f7a15fd3fd991800000000000000000000000000000071"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000700)="5349e2398ea0f1a28026ea1597d676e254bf0c3910647ff536dac230459fd29cbfd5bbb9cfc47efe88657e30d2361c635961070067b14ca0db8cbdfba856a3faa143523e99d8e2b6d7d178665d8b1f7321e15179a391687a98cf1db192681e90daa1e76b5e9b69e076eca2a75e9c8951c15c45fde607f982fb7d4987398c4a1090696ff7f26b", 0x86, 0xfffffffffffffffe) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) r11 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000240)={r12, 0xe25, 0x9, 0xdd2}, 0x10) ioctl$FE_SET_PROPERTY(r6, 0x40086f52, &(0x7f0000000240)={0x23, &(0x7f00000001c0)=[{0x46, '\x00', @st={0x4, [{0x2, @uvalue=0x4}, {0x1, @svalue=0xbf18}, {0x3, @svalue=0x80}, {0x1, @uvalue=0xaa1c}]}, 0x8d98}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9ea4318123341cf9d90a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a22a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a19eed87b277be335c75e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436e101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521bc9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d2502000000d9051f22614d1f62734d678039a97d2b74f9e8e97f4e8e7025123e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f23128d743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069f6f24e1e1bc976d965ddabb01085f16bff63a06578d6d184f5de7bfb6aaa75f16996d8d60bd0111a8a237a1536256c02284cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798bbe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e2005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9cde5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde330289d6348d183ed9d3dae3cccf109f7c78e8479a345e805e47dfa82cafc6b64b1f4659834aecbeded44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1b7d5f80c580dc31b0963ff953ce09148e8dfea9d03a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e96c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20c290a1f6c09272dbc3b2c0ab2b5baa1b07b16e81f278e54a479f1a06bc06e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4d57b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce788c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f709294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b132876159972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0598700130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80014ff11d9dbceba41d8dfce410333a054e82b1d050331ce0aeacb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6bb956fac1ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a8263e9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dd18f6148354df7e60a489dc543ccdee1fff9d8f8d78844de27a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d64100cc000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2ceae70922989f66827fe9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168e32d7bd6800000000a21008b8d26dabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2935d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95badaf8ed85cd5b03a7352a0fb83398566d1bc133582ce2d9f601cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353c959fd965702f1cd5bcb3c16d4b8bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef07b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c3355fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538b011cb3928b430630b8ccc800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b314bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c921b090000000000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da22ee9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45b4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d5027e81ceec1a6d7441d0b538d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656d9a28f81f6a9465aec94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be184d4ebb942f99581a6fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bbb4ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855cb18b23517ca935a0fa1b630d70c4ca9acbaf0f08910f327fba506d834029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17ecd996d7dea947ee8ce55fa2dea5a000000000000000000000000006f0143d8d4038ef9f57d9e9336f3559558710d1febe7394cf8b02f59dab24d07db3d3c1ebff58f973ba3fc0c3e2fb2c2a674a188614520ecb1d22b49e3550263bf9d669fba198b65ee3512db0e710d2070b5847face7ada12c83f0aea3a8c9e84e6c7406732c952c5695d43bca33d481ef9d442697875e114f4c759af306b3fc8224fdec89bf199234bff488b81438cbe89e4cabdc007139352b5cb69d7987cdf37ab549b7639eeadafd5315d9c9f0e8c9223102e6deaca4ae9cb943a3ad188bcad95e8f97d7fee7c47ea50d222fe67085b4fb3fecfb67dec23b6ab5ee19a5ca5367bff058149acf90a6c4014dea2b763389f77301ea8574d112625300906f480c36f41f82f84991800c37863de349f7"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) socket$tipc(0x1e, 0x2, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r7, 0x8002f515, &(0x7f0000000280)) dup2(r8, r9) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}, @IFLA_MACSEC_SCB={0x5, 0xb, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 2.089767481s ago: executing program 2 (id=852): setreuid(0xee01, 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4680}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xc3, 0x800}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="500100001000010026bd700000000000ff010000000000000000000000000001000000000000000000000000000000010003ffff4e2410000a00000084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000ffffffff320000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0300000000000000000000000000000000000000000000005100000000000000000000000000001000040000000000ecff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000ef0000004800020063626328646573335f65646529000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001700000000002a"], 0x150}}, 0x0) (async) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100) fcntl$notify(r4, 0x402, 0x8000000b) (async) mkdirat(r4, &(0x7f0000000040)='./file0\x00', 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="4161000000000000180012808300000000000000000000431ca5751eb9ddb46348616a", @ANYRES32=r5, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x20040104) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x8, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) (async) syz_clone(0x120e1100, 0x0, 0x13, 0x0, 0x0, 0x0) 1.95944555s ago: executing program 2 (id=853): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001000ffff26bd7000fedbdf2500000000", @ANYRES32=r1, @ANYBLOB="20ba0100380a04002400128009000100766c616e000000001400028006000100040000000600050088a8000008000500", @ANYRES32=r1, @ANYBLOB="8d76cacfa2f6f752c1fd95129a2007c3"], 0x4c}}, 0x8000002) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001000ffff26bd7000fedbdf2500000000", @ANYRES32=r1, @ANYBLOB="20ba0100380a04002400128009000100766c616e000000001400028006000100040000000600050088a8000008000500", @ANYRES32=r1, @ANYBLOB="8d76cacfa2f6f752c1fd95129a2007c3"], 0x4c}}, 0x8000002) socketpair$unix(0x1, 0x5, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x800007}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="160000000000000004000000020000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000009241c5367c1882887ea266d9e95dafdecd3f28289dc8cf4d995a5139810663adea4ddd6ebcfe7ebe2c41d98aca11ad5b717336fe9ca6faf910d73f29789e2d8e19ea8bbe211af3410f0e7a11ec931bb01527453f9dd1d0be0b4298b2781a5dd37ec1cbe66240308dd81a4802c4ee374ac7ff9a96630a7195e5d93432f89602ede5399ab37d17b42bad5f42bf5ced3ebb7e5a5536febc39f20497925419f4edc0703a8ddbb0dafa8b1dd08074c77aaae2e3b0f6a66bd389dd00"/217, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xd, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x4c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xd, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x4c) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec777000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) (async) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) syz_io_uring_complete(r4, 0x0) (async) syz_io_uring_complete(r4, 0x0) syz_io_uring_complete(r4, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file7/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0, 0x3dd) fsync(r6) 1.931762319s ago: executing program 1 (id=854): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_RFSYNC(r0, &(0x7f0000000180)={0x7, 0x33, 0x2}, 0x7) futex(&(0x7f0000000000), 0x86, 0x2, 0x0, 0x0, 0x2) r1 = socket(0x21, 0x3, 0x3a) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(r2, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_pidfd_open(r4, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000100), 0x40001, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000200)=0x6) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000240)={0xa75, 0x6, 0x400200, 0x80005, 0x8}) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) dup3(0xffffffffffffffff, r3, 0x80000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5042, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000005380)=""/4104, 0x1008}], 0x1, 0x3000, 0x0, 0x9) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$UHID_INPUT(r2, &(0x7f00000028c0)={0x8, {"21c82701ad28e19a825b92387e0d3f63bc159a98f25af134c54f77db43020603470dba2835531b12669432829e7bcc67e964754157d4b1ed81f140d6b28c450a4be871b57d6d21bcc24f4cc1808d3c0e8e6a096d70a48e8bc9ea21612ba73d47e83ec0602dced9a658fdaf273414e0742d3abaa384812f5ca1e526409c14c987e377ca1f023b2a1e3598cab6ea786f4a0cbf5a0686977fcd39ba4154369f8d5636389dc3c212b2798e416832c07d7b99ef5ddddf471b4d750b4331b1ed7e104613cd297bd2c747de6e0b240d862b92d09918952b71c771fbe99958b8e9ceab359633d11e0207c35c5c5ec9d5ea82098ae8476aabfb96a642fd14bae963736c3417debcbe86d4425d1d29c821f741d2e26483d390023b22abdb0c3062e3b99ae2ce0c66b1231b064aeea9acf402aca864a7339c2c5156b94a8a92699068a29b3f36fc935111a15b9defdea1cdbe07f93237bcf75597dc788f098ae84b3c0d28a29845d5615528407ad865f1b699f3faf515a0b6c771c704c011528eb5450ad5e213a689d4581c45d61566daaf0defdf2611cb229ffa255d439538bac6d2e00f1921968078e0ab1dea5a7b58a6dd701b4dcf0766541a3014c3bda3952c0d9af4507aae13406a5b37525afc5aeda63253ede7545b5f3a30e11083358ba98b080439065eb37eb7b4124480f82117f6c18da18aa9b24041068a27962391d16998a5561a1e9ec4a8a82756830f7bf32467392d1cfbc6b78516d36bc0dc5c3898ebc5efc23e57b4b44c7a759bb41eb4199a3e7a0dba73ecd9b8423e0c867275a096ec75d92b23a347c0ee3ee46d9826ba1f7c91a4c816eb29845aa1ea98eb067810821afb5ebda57d7977faea9bc366587b70e5b832ddc8bc475d05c94f4135b9a0f74202d0c8ec1a8cd96b5544d52c301171be4689e7e0a80909c7c8553d8d3c52f92a0e8280a00d1be22092e2f93a540eef9e832a03f11c6f37e6d47cdd834e1bb7038b8f679423f3d66cc06ccbca40ee0e218b345297c299b8d838813cf70170ba3765b2735d9b654e17a84dec7622fb5311f861653a1636814cffc24d57b68318c3d9276d7453f4801969fe55524fe43195b4f7fee6dff61e3299b4c0687235ae4dfb4677987fccf44176e5e9e3642abb5e075769c97c2547640ef46d0882c4d0d4aedfd976f49d149f9dd55b5cf8aa21d5bc43d71f39ee03ec529f57fc9a2653936f60879cbf6be178cab2bae3474bf3e79eceefc0e0a02452061bfea620f25e3ef21ee401e3c2924baf754344e161049f759ffc1a42d3d763fdbfd43ecfcc50a8bbd9daf98104a6f9a66922fc95368531e705d7187c85aaebaa7b2d35487db087e3598c59195ce90f4cc53376774910cda44256d95c27b4e8be4f2210d416d022c81409aab30870cd3f133149e6e096cb0288516d83f8a8e44f6314be57311475a779da45e53420dcc757682ac7d2d1e7cb407b87a567b73dbdfe2a63ed4335ab43c73869421749782ff4a2679bc62396a156a5b1c960dc7877028e75ec6963c2bdbbd6217d8f6ac85c2f0c63c910665a7e60201b7c7fc4aac32ea7c5f59d013bf45b0880c7614586fbce937c64d4546f8e36180cb393d7a25427eb52ce0d3ab525f583a40c5b16c00625cf18415e6d6cf9660bbdb926019ed221ebe4dbced6deca984244da3011bcd196e68f5e4b5df571d2c5037edca59092916f9a0c17508090a5ab5592f48094866de185b1b86268b9c02148a17662b25f8dfbec176e8b129d6c2e716635930a2c947c532145d517abb0f4b1b4bdcf38227ca06e9ce00ba44d83285f8965193bc6489e69cc46cf98a0ab6af6b51d1af558a4dbb6457fd65c7632d49e7b7cd378aa88c96b51fb65c0e0965efb03faef82fa6ceba3d755fd884815b44116177785c66479b170407b5c2422f5ec57fedb6a8aa987c2e6e1d33f82ebd5730ffd992ea81881f6aa2632b533f341e876e593df3bbc3605b112214fb606cf97d9a7d54d873e0a507d8a6c420c8fbe00c954bf24b5742d51dd11331b4bd3dc005bcec69e742e7ee38efca39322a2b77c33de1c645c289281b5b1decd55f86f856f5f5570434d74b7e5ffffef4f7f658bf6b64687af8513017710f755879dc2050b33c21228a3d2dc4d1c0e01b1998671453d9990ca01d24b1f72ee91f186aa76b55ab776a2447835a42212f3aa259ca5e43350c3b6f37ee6e67dcdb2f12c0584539e2c67ba8c1b52ff564d7a9fcd0c30c62f6492c7cc999d81221e2ed5e941120373c72e952bb5d2846d2100119a833739bffbc6e8da23d0e385b523d5fe68db2178dba2c2f3d34f95b7c89e80fe737adbc73b562cd37b6e3adfd2767c6c5c84ffbf5ec3d3dd23d2ccd4a8c3a55cb798f8b61f4c5016b3f7b9e04c29fee3b03b8f341c1b54c1d7f661436cb17c6bee597f207989cd1cf373818f3898ee2a227fdd78641832efa4f65509216d036d0422184601a9972e9f43c520b424e4d32371e70c774dad7f9d5560e47cf0bb935b7c2b0cd294331387adaa24fad99af4de61a157fa6b26b09030977c675f63b68a28535beb490812de854df4a3a298557b2e9965c8d73097782f9e49e686731275a6fbb6518cf5b67832c18b68ebe7cd3e7266593a91264320bbe35639cadeca9bf5cfd3ace9ab359952b390126e833af90c9c53fac10f8744ef16b31d55cf40f51df83c6d34479daa19cf6b143ed1559ceef6ae40e5dff63ecd6aa0a0b30ddb675f7eee41592fbf81fb28ca5df1d8599dceaf703ce5b1c9c72437343d704cf3d0073a6a9ea7c5dc84bdd83583ee9d51dffe56194e22a24e129e9ab3456c8b3012986571579fd469f556097758d773d305dec9ee9488e8a17e1ccd3163c1b4a3d3edc5a6312cc1dad17a669300c7c39793b64af2aa47c2b2f716a94eb71d7b52711140bebb5693b93246e2764abc57d23cf988a9cb2f967dcac4844ce3f222fee171e5e0ec785d4499ef3f959e6e24351780d9bdc8792fc792c64fd08c1a856e3f84af00ea0493f98f3f2dd2e72a508841515086494e2d246a3d74c583bc931fdfde40ed16b0b58d6d2a6de3660e82d4c448bc24a328c062f0aa6f1ce6b30cdd85631d5b4108b27894c0ef88ce769d4eed6ad2451dd784e592066949ca6e8b5c90d78dab3724c0d499aaa9ed58126fb4cef180160d609a992b1975a0d403ec10ccbac6916f7bf51ebc4d7e6c2ac2d9e7b41258c4342a7df83bc12bb23afe332b6bfd95e93ae59f9b9938fd195a61a464df6222e2c286ed98d133bed3457c33b2f113d7c37b7763b62678a6e2e6a5479ed14e89a4d6ed4538af875004e44e2a5cf455408952625d36c08fe43970c8c6466fc87e5c2d99f7fa9afad4bc86590180b2438cac52fc8db7743cea4aa9260f63d0e0dbaa6b10b5232a27bc95314be1dab195ac3bd052600ca9b73217671c120e4d794308c547482dbd0c73546ad921f77abfff0db198de3895b235d807cd814a4fecbd57ed674bd23477172853ac403843bc3d7f2fc80c1d3745967bb84da984682d2a876d46ac04c4b05dc643275264d2c72ded4a54fe45b2fa8589dfa65889fec36906774f7134eb26ed1e1f379d404632009a1d64eafef4648b88a31357d0f91b6ed1cfecae66bfd16d3a8aa655746c1acdc18987627156a96842c2e2ce13b1472c25e51dc67654c02cec4e71d55a3736c0e044ab573a8fb9ffa9dc57212f3bbe43d5123a04dc538dc048fa246b9933356fb088ee74c875008ed5834af19437fc3537f315ae84ce1e8aa16725788074109f9600ffc9e76a0c9d0651891e1dd4393e776b66cf2bd12e04160a891af380325a3080228ce21dfda212c28f0f3978547dc786e05f70fee482c2f38c3bc0cfffeca75c8061db12614aff53a3358289944387cd5dec775bac0a1a384c6d8962a81b403822d4192f3193c4d5c6fb17ac8eecd0150ab7eeef22166b3deb83deed1b1faa0e2ac805f4dbafbb95bc858bab19781e71a1497c045dae55f72e6fe8a787c7a5f690c0481169bec54df95b2466ec30da2124208d8bcc493d45aff39bcd77d99ca0db3b82c3d22c56ae27598a6c8ffaf50bc1a493fcba6b39a710838c2dd0a87ebab1d69d1451a71aaa9f894bfc56183136768746fb34d4d451b7fde2a80ec0b1ae56ccd4fd74007146afc34acffeb476844537796fba1181547ce5137315c291dac89d90bab66875dfd0d08abcfe8e87ca771d26dcf2b9296bc310c17c0400cfc31497d4ade82e2be903f00ba1aaa957b811a48b02cef67b4a347ee61736cf13d92e6a962f8ec472374a5aba02a6b0e08880509126a286fe9df6be76d6ac9b9d68f4434ca024fb1e39be36d3cbaa730c125afdfc7d0c030268d5f4c948e998a7e77ebf80c29bd966a3a1b3d816d20f34eca29585f86f3002eca05e2deb93da7a2f2069d388105529e39e39f15e377e50eb110f27a9b1f14b8e4b68a0bd6d2a1759f6c098f787430f4dffe07da89ca1776a6818966e828b32c1ff14f565c917a1b899e7ddef647696b620cbae2ad533a6ce75cd209429614fe21c09fa818fdef921db80c6336e64edd976ac20d2b6ead5ccdea5f01d7afe639a4a6a03c02baf17763e3f93276bc73d735d5847beb23cf4e5729965f2378a96516183641b4041aa5682f80e97a0d548046852531f55ad3b7aa9593bc433a4cefc513edbed5cd6310315626d8ec9b4488ead2f36ca5473227dc864423123e7efab747f05d3b752cf8c73360f5dc70b57a69e587e5d8b716605d4f51a2ccdb511b2102a158131134757c0bcc4b78c3305c8e8b70bbcd763ef85e60e58f69f7c9314667d260d7de18d7bb3170402596c870814d613ba358c9cb9a272c4f5a5dd3b3ebde788046f4198082bb129ff2d47d92c1d237ae295a439c6d92773a939a1bc46a9bb98260371d3810af890f3c17f0f773ca6768a7b85eabbc56f7c819fa80bfd5d02daf17a35a487a27cba42c595a8022395665ad85ce58dfd853bc7fc3f19f4714001567e63eb4bb14796daf3a8d04514ac5363d0b6c5ef8efc68c9a8222ac5ea7cc568e2e78803173914f22ca8839fccdcfada7ce4a1a8203b3f6047f2200c9e6fac3bcb233737159c112b604ed0f29b8020af7d0f0be130fe38de5442558b25846fb42d9f4a956f6a24a9f040ec5b0dcb2dbc31129bc7a751e3673d8bd1fc865e8eb75774cce3c933af7df2bdb5524a3a49d1808af3e778af9410055cd55cfcdd1efd53dd731a7822355fce0c80dcf195fd5a13a42d3a9db0a999303034798a4b0e0dbc10d3592facaf84ff62845b7f9b19cfa5545ce59131a141e50c0e5bdfdc63e4b593dee07b5d6604c4aef50adedaaa7692f2a00d9f39eb3ccdf757a81719fb30717a157f75da749f3d92f539bf206ad68925316018d2dcbf3b438bed4e0f2de242c9d8a170552fd62d96fca0710b4e7c52b8b367a908578ef09042ce09d09c2689935adfe8b363aa2784667e64e62d5e77bf08aad07b8f49b5f69f3276009c60f127668dd93f96d9b49d47bede78a4c5626819f4efaa2f574dbf3c3e9ae8b989936315b02a15e0ac1c85197e2bbc28e22a7af295480b64d264e1692ad14f0e01245016661d870d5b1b5d0273b57b3baa6eb9e2470f934f0215e0be910607162f6e5afbeef7626836cc36f81d309507e671ac95ba6888a24e019277ebd8a5a897b132cf10fc9633fbae6c142231f3979970514c80533f530ce1ffecb3f167de1ab82afacbbec9381984a72474cb91fc90d5aa40eea6e884ae40f9d89ff458466e475da73c58a9c59d3f4bbbc893", 0x1000}}, 0x1006) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r8, 0x230d}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) 1.729551461s ago: executing program 2 (id=855): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$sndctrl(0x0, 0x1, 0x48001) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ioctl$NILFS_IOCTL_SET_SUINFO(0xffffffffffffffff, 0x40186e8d, &(0x7f00000004c0)={&(0x7f00000003c0), 0x0, 0x20, 0x3, 0xfffffffffffffff9}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5ede4a12) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="0000000000000000000000000000001800"/28], 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1040}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x18, 0x2, [@TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}}}]}]}]}}]}, 0x48}}, 0x0) 1.432277948s ago: executing program 3 (id=856): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0}, 0x50) (async) r1 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x40000000000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3, 0x4}}, 0x10) (async, rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$media(&(0x7f0000002900), 0x1, 0x80000) (async) openat$bsg(0xffffff9c, &(0x7f0000000040)='/dev/bsg/0:0:0:0\x00', 0xd0000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) (async, rerun: 64) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r5 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) r6 = fsmount(r5, 0x1, 0x0) fchdir(r6) syz_clone3(&(0x7f0000003b00)={0x10000, &(0x7f0000000100), &(0x7f00000002c0), &(0x7f0000000300), {0x1}, &(0x7f0000000340)=""/40, 0x28, &(0x7f0000000440)=""/34, &(0x7f0000003ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, {r6}}, 0x58) (async) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b27000000f2e10a8ee00f3271008000c90f30b80e0000000f23d80f215035800000a0c9b9490300000f60b932c00a00b9730200000f32328fe8587db660602fb92dbf0002e6e6006880000000000000000f30", 0x64}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf090000000000005509010000000000950000000000000007000000000000004500f4fffcffffff18000000060000040000000009000000bf91200000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x2}, 0x94) 1.431938783s ago: executing program 0 (id=857): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@ifindex, 0x2e, 0x1, 0x9, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000340), &(0x7f00000003c0), 0x0}, 0x40) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000480)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00f737f5"], 0x5) setreuid(0xee00, 0x0) write$sequencer(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', &(0x7f00000004c0), 0x1200004, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={0x0, 0x12c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x13) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r4) mount$9p_fd(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340), 0x1400, &(0x7f00000027c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_none}, {@access_uid}, {@access_user}, {@dfltuid}, {@version_u}, {@debug={'debug', 0x3d, 0x8}}], [{@dont_measure}, {@euid_eq={'euid', 0x3d, r4}}, {@smackfstransmute={'smackfstransmute', 0x3d, '%-'}}]}}) chdir(&(0x7f0000000100)='./file0\x00') r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x35c3, 0x1000, 0x8}, 0x0, 0x0, 0x0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000180)={0x0, 0x1, r0, 0x5, 0x80000}) 949.449211ms ago: executing program 1 (id=858): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)}, {&(0x7f0000000040)="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"}], 0x2000000000000075, 0x0, 0xb9, 0x40044}}], 0x1, 0x20060844) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000b40)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x4101}, {0xffff, 0xffff}, {0x7, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x560, 0x7, 0x6c, 0x0, 0x0, 0xbfffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x94, 0x8, 0x0, 0x8, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2004c0c4}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0xfff) write(r1, &(0x7f0000000340)="bdf90d20fbd173a671d9d04e4c70bf9c5bc66f9bd077d97111d22c7bf050551fd91ebff8328c1a2949c239f0b20537478d7ff45b48117e08583e8e59dcd2ff7bb6db1951cc95ac3b7d5a1bdff5c53541eddfaa5e4bc75f1d3af9a4cb0a7bd8966818c3b40ab643a30ab5de7829d593d2466739ebf5fab3944246f9129ff9ade211d7f6e9e7f7d7b45e2ccd4709a9c68f27be9f947f8d35bb689b8f0000000000000000", 0xfffffe39) splice(r0, 0x0, r5, 0x0, 0x39000, 0x0) 948.944965ms ago: executing program 3 (id=859): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) capset(&(0x7f0000000000)={0x20080522}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x2, 0x5, 0x9, 0x8, 0x1ff, 0x8, 0x2}, &(0x7f00000007c0)={0x5, 0xffffffff, 0xa, 0x1, 0x0, 0xf7ffffffffffffff, 0x5, 0x81}, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) (async) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0xa, &(0x7f0000000240)=""/104) r2 = socket$key(0xf, 0x3, 0x2) sendto$inet(r2, &(0x7f0000000100)="1858cf4b7de292a2ec8b79b5202ca7a3", 0x10, 0x20000000, 0x0, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat2$dir(0xffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x10000, 0x82}, 0xfffffffffffffeed) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) openat$dlm_monitor(0xffffff9c, 0x0, 0x241, 0x0) (async) syz_emit_ethernet(0x9c, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r3, 0x8949, &(0x7f0000000000)) 770.009229ms ago: executing program 2 (id=860): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x7800, 0x20, 0x7, 0x6e47, {{0x6, 0x4, 0x0, 0x27, 0x18, 0x67, 0x0, 0x6, 0x4, 0x0, @loopback, @rand_addr=0x64010102, {[@noop]}}}}}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x7f, &(0x7f0000000940)=0x0) io_submit(r3, 0xfdef, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000080)="c3", 0x1}]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) (async) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@delqdisc={0x2c, 0x25, 0x400, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x6, 0xc}, {0x13, 0x5}, {0xc, 0x7}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x48821) getpriority(0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2f0000070000f67bd44c5c26000000004b6502e6f67af0380000", @ANYRES32=0x0, @ANYBLOB="01000000000000001c00128009000100626f6e64000000000c0002800800088000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 579.129936ms ago: executing program 2 (id=861): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x1, 0x3}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x38, r1, 0x1, 0x4, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xd2}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x80000001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1d}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x400}, 0x0) r3 = openat$thread_pidfd(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) pidfd_getfd(r3, r0, 0x0) 512.361584ms ago: executing program 0 (id=862): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@ifindex, 0x2e, 0x1, 0x9, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000340), &(0x7f00000003c0), 0x0}, 0x40) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00f737f5"], 0x5) setreuid(0xee00, 0x0) write$sequencer(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', &(0x7f00000004c0), 0x1200004, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c0100000301000100000000000000000d0000092c00018014000180080001000a01010208000200ffffffff0c00028005000100010000000600034000030000840002800600034000010000140001800800010000000000080002000a01010206000340000200000c00028005000100010000001400018008000100e000000108000200ac1e01010c00028005000100880000000c000280050001003a0000001400018008000100ac1414bb080002007f0000010600034004000068000e802c00018014f00200fc02000000000000000000000000000114000400fe8800000000000000000000000001010c00028005000100010000000600034000030000060003400000000006000340000200000c000280050001003a00000006000340000200"/300], 0x12c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x13) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r4) mount$9p_fd(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000340), 0x1400, &(0x7f00000027c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_none}, {@access_uid}, {@access_user}, {@dfltuid}, {@version_u}, {@debug={'debug', 0x3d, 0x8}}], [{@dont_measure}, {@euid_eq={'euid', 0x3d, r4}}, {@smackfstransmute={'smackfstransmute', 0x3d, '%-'}}]}}) chdir(&(0x7f0000000100)='./file0\x00') r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x35c3, 0x1000, 0x8}, 0x0, 0x0, 0x0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000180)={0x0, 0x1, r0, 0x5, 0x80000}) 512.050899ms ago: executing program 3 (id=863): socket(0x28, 0x3, 0x6) syz_open_dev$dri(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1c, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2, 0x4}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8820}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x289}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000004c0)={0x5, 0x10, 0xc7, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) read$msr(0xffffffffffffffff, &(0x7f0000019c40)=""/102400, 0xfffffffffffffe36) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x6, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000500)={0x0, 0x0}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0xffff8000, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0cc5605, &(0x7f0000000740)={0x2, @pix={0x1, 0x8, 0x33424752, 0x7, 0xf3, 0x3, 0x5, 0x40, 0x1, 0x2, 0x2}}) setrlimit(0xd, &(0x7f0000000040)={0x4, 0x6e6c}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)="97"}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/key-users\x00', 0x0, 0x0) pread64(r4, &(0x7f00000000c0)=""/126, 0x7e, 0x80000402) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000000)=0x5) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000000180), 0x2000004, &(0x7f0000000c00)=ANY=[@ANYRES64=r1]) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.state\x00', 0x275a, 0x0) ftruncate(r6, 0x101fff) copy_file_range(r6, 0x0, r5, 0x0, 0xe203e45c, 0x700000000000000) 502.448342ms ago: executing program 2 (id=864): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x0, 0x4e}, 0x28) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed50004"], 0x11) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f00000003c0)=@riscv64_sbi_sta={0x803000000a000001, &(0x7f0000000100)=0x7}) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000001200000002"], 0x0, 0x56}, 0x20) 0s ago: executing program 1 (id=865): r0 = socket$igmp(0x2, 0x3, 0x2) (async) openat$dsp1(0xffffff9c, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033bfb35a6f46facdc16eedf328be27ca3e84107c5a29590405253d00cc5ece3035e461c"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) (async, rerun: 32) epoll_create1(0x0) (rerun: 32) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x3f, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0xa) (async, rerun: 64) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002de8) (async, rerun: 64) write$char_usb(r2, &(0x7f0000000040)='7', 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xff7e, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040)={0x79}) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async, rerun: 32) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter={0x1, 0x5, 0x0, 0x7, 0xe0a}}]}) write$char_usb(r2, &(0x7f0000000bc0)="be", 0x1) (async) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8be000) (rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) (async) syz_usb_disconnect(r1) (async, rerun: 32) signalfd4(r0, &(0x7f0000000000)={[0x0, 0x7]}, 0x8, 0x80000) (async, rerun: 32) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x2, 0x1, 0x0, 0x46a, @vifc_lcl_ifindex, @empty}, 0x10) kernel console output (not intermixed with test programs): 37824][ T6167] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 56.649091][ T6167] block device autoloading is deprecated and will be removed. [ 56.666139][ T6162] md: md2 stopped. [ 56.672351][ T6162] netlink: 'syz.1.75': attribute type 11 has an invalid length. [ 56.729037][ T6167] netlink: 40 bytes leftover after parsing attributes in process `syz.1.75'. [ 56.802411][ T1043] usb 44-1: device descriptor read/8, error -110 [ 56.853646][ T5831] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 56.980828][ T6174] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 56.993584][ T5831] usb 5-1: device descriptor read/64, error -71 [ 56.996812][ T6174] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 57.005603][ T6174] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 57.057308][ T6179] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 57.062285][ T6179] bond1 (unregistering): Released all slaves [ 57.169083][ T6183] openvswitch: netlink: Multiple metadata blocks provided [ 57.227576][ T1043] usb usb44-port1: attempt power cycle [ 57.233708][ T5831] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 57.363666][ T5831] usb 5-1: device descriptor read/64, error -71 [ 57.474601][ T5831] usb usb5-port1: attempt power cycle [ 57.813662][ T5831] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 57.834868][ T5831] usb 5-1: device descriptor read/8, error -71 [ 57.865745][ T6209] dummy0: entered promiscuous mode [ 57.868204][ T6209] macvlan2: entered promiscuous mode [ 57.874239][ T6209] dummy0: left promiscuous mode [ 58.083730][ T5831] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 58.114300][ T5831] usb 5-1: device descriptor read/8, error -71 [ 58.224349][ T5831] usb usb5-port1: unable to enumerate USB device [ 58.313677][ T1043] usb usb44-port1: unable to enumerate USB device [ 58.953621][ T5810] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 59.113817][ T5810] usb 6-1: Using ep0 maxpacket: 8 [ 59.116766][ T5810] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 59.119379][ T5810] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 59.123030][ T5810] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 59.126149][ T5810] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 59.129625][ T5810] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 59.133002][ T5810] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 59.137053][ T5810] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 59.139855][ T5810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.169091][ T6224] fuse: Unknown parameter '0xffffffffffffffff0x000000000000000600000000000000000000005000000000000000000000000000000000000000000400000000000000000000' [ 59.348363][ T5810] usb 6-1: usb_control_msg returned -32 [ 59.350203][ T5810] usbtmc 6-1:16.0: can't read capabilities [ 59.365386][ T6221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.89'. [ 59.369561][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.89'. [ 59.381524][ T1043] usb 6-1: USB disconnect, device number 2 [ 59.538326][ T41] audit: type=1326 audit(1781687732.107:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6231 comm="syz.3.93" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x0 [ 59.813623][ T5831] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 59.963611][ T5831] usb 5-1: Using ep0 maxpacket: 8 [ 59.966960][ T5831] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 59.970354][ T5831] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 59.974035][ T5831] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 59.977959][ T5831] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 59.982035][ T5831] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 59.988878][ T5831] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 59.992659][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.200488][ T5831] usb 5-1: GET_CAPABILITIES returned 0 [ 60.202985][ T5831] usbtmc 5-1:16.0: can't read capabilities [ 60.488182][ T6230] usbtmc 5-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 60.666116][ C2] vcan0: j1939_tp_rxtimer: 0xffff88804b626c00: rx timeout, send abort [ 60.692169][ T5886] usb 5-1: USB disconnect, device number 6 [ 61.169609][ C2] vcan0: j1939_tp_rxtimer: 0xffff88804b626c00: abort rx timeout. Force session deactivation [ 61.341416][ T5742] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 61.415172][ T6262] pim6reg: entered allmulticast mode [ 61.550133][ T6261] pim6reg: left allmulticast mode [ 61.855796][ T6283] [U]  [ 61.856752][ T6283] [U] K{ [ 61.857758][ T6283] [U] T 1ŠFFˊ`GJǘGO/MC [ 61.861231][ T6283] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 61.867103][ T6283] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 61.871493][ T6283] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 61.883864][ T6283] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 61.891410][ T6283] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 61.895251][ T6283] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 61.899417][ T6283] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 61.926779][ T6283] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 61.929936][ T6283] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 61.934708][ T6283] [U] 22Ʃ۩X?0;3U [ 61.936833][ T6283] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 61.945205][ T6283] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 61.948237][ T6283] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 61.950943][ T6283] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 61.953159][ T6283] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 61.957116][ T6283] [U] EC [ 61.958455][ T6283] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 61.973556][ T34] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 62.135045][ T34] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 62.139662][ T34] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 62.143184][ T34] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 62.147025][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.154028][ T6271] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 62.161505][ T34] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 62.656794][ T29] usb 5-1: USB disconnect, device number 7 [ 62.659809][ T6282] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 62.985526][ T6329] 9p: Bad value for 'wfdno' [ 62.987598][ T6328] 9p: Bad value for 'wfdno' [ 63.069196][ T6339] ubi6: attaching mtd0 [ 63.072069][ T6339] ubi6: scanning is finished [ 63.075646][ T6339] ubi6: empty MTD device detected [ 63.077585][ T6339] ubi6 error: ubi_read_volume_table: LEB size too small for a volume record [ 63.120521][ T6343] EXT4-fs (nbd2): unable to read superblock [ 63.225461][ T6339] ubi6 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 63.367814][ T6362] program syz.0.131 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.402974][ T6364] loop5: detected capacity change from 0 to 7 [ 63.405852][ T6364] Dev loop5: unable to read RDB block 7 [ 63.407777][ T6364] loop5: unable to read partition table [ 63.409728][ T6364] loop5: partition table beyond EOD, truncated [ 63.411850][ T6364] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 64.293808][ T6379] warning: `syz.3.136' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 64.394266][ T6381] bond1: entered allmulticast mode [ 64.406989][ T6383] 9pnet_virtio: no channels available for device syz [ 65.460769][ T6393] ALSA: mixer_oss: invalid OSS volume '' [ 65.473887][ T6346] siw: device registration error -23 [ 65.723670][ T5845] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 65.893605][ T5845] usb 8-1: Using ep0 maxpacket: 32 [ 65.897118][ T5845] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.901417][ T5845] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 65.906785][ T5845] usb 8-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 65.910750][ T5845] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.914632][ T5845] usb 8-1: Product: syz [ 65.916425][ T5845] usb 8-1: Manufacturer: syz [ 65.918338][ T5845] usb 8-1: SerialNumber: syz [ 66.141126][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.140'. [ 66.859291][ T6412] netlink: 72 bytes leftover after parsing attributes in process `syz.0.143'. [ 66.912739][ T5845] usb 8-1: USB disconnect, device number 3 [ 67.308074][ T6439] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.151'. [ 67.311723][ T6439] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 67.545605][ T6444] [U]  [ 67.546696][ T6444] [U] K{ [ 67.549343][ T6444] [U] T 1ŠFFˊ`GJǘGO/MC [ 67.553780][ T6444] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 67.572556][ T6444] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 67.586466][ T6444] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 67.620322][ T6444] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 67.662165][ T6444] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 67.694718][ T6444] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 67.713461][ T6444] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 67.784441][ T6444] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 67.817619][ T6444] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 67.828249][ T6444] [U] 22Ʃ۩X?0;3U [ 67.831821][ T6444] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 67.852501][ T6444] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 67.862058][ T6444] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 67.870009][ T6444] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 67.875390][ T6444] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 67.879061][ T6444] [U] EC [ 67.884956][ T6444] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 68.437485][ T6443] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 68.962308][ T6474] fuse: Bad value for 'fd' [ 69.172651][ T5742] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 69.176725][ T5742] CPU: 1 UID: 0 PID: 5742 Comm: kworker/u34:4 Not tainted syzkaller #0 PREEMPT(full) [ 69.176752][ T5742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.176765][ T5742] Workqueue: hci1 hci_rx_work [ 69.176814][ T5742] Call Trace: [ 69.176820][ T5742] [ 69.176827][ T5742] dump_stack_lvl+0x100/0x190 [ 69.176860][ T5742] sysfs_warn_dup.cold+0x1c/0x28 [ 69.176888][ T5742] sysfs_create_dir_ns+0x24b/0x2b0 [ 69.176917][ T5742] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 69.176949][ T5742] ? kobject_add_internal+0x25f/0x930 [ 69.176978][ T5742] ? lock_release+0x24d/0x310 [ 69.176999][ T5742] ? do_raw_spin_unlock+0x145/0x1e0 [ 69.177027][ T5742] kobject_add_internal+0x2c8/0x930 [ 69.177057][ T5742] kobject_add+0x16a/0x1e0 [ 69.177084][ T5742] ? __pfx_kobject_add+0x10/0x10 [ 69.177112][ T5742] ? kobject_put+0xb9/0x640 [ 69.177134][ T5742] ? _raw_spin_unlock+0x28/0x50 [ 69.177155][ T5742] device_add+0x294/0x1970 [ 69.177183][ T5742] ? __pfx_dev_set_name+0x10/0x10 [ 69.177202][ T5742] ? __pfx_device_add+0x10/0x10 [ 69.177229][ T5742] ? mgmt_send_event_skb+0x2fb/0x460 [ 69.177254][ T5742] hci_conn_add_sysfs+0x1a3/0x260 [ 69.177279][ T5742] le_conn_complete_evt+0x11eb/0x1f60 [ 69.177304][ T5742] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 69.177326][ T5742] ? hci_event_packet+0x186/0xcd0 [ 69.177344][ T5742] ? lock_release+0x24d/0x310 [ 69.177366][ T5742] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 69.177389][ T5742] ? skb_pull_data+0x15f/0x1e0 [ 69.177413][ T5742] hci_le_meta_evt+0x34a/0x5f0 [ 69.177435][ T5742] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 69.177458][ T5742] hci_event_packet+0x51c/0xcd0 [ 69.177480][ T5742] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 69.177505][ T5742] ? __pfx_hci_event_packet+0x10/0x10 [ 69.177526][ T5742] ? rcu_is_watching+0x10/0xc0 [ 69.177556][ T5742] ? trace_irq_enable.constprop.0+0x122/0x160 [ 69.177584][ T5742] hci_rx_work+0x451/0xfc0 [ 69.177608][ T5742] process_one_work+0xa23/0x1940 [ 69.177634][ T5742] ? __pfx_process_one_work+0x10/0x10 [ 69.177659][ T5742] ? __pfx_hci_rx_work+0x10/0x10 [ 69.177682][ T5742] worker_thread+0x5ef/0xe50 [ 69.177707][ T5742] ? kthread+0x13a/0x450 [ 69.177724][ T5742] ? __pfx_worker_thread+0x10/0x10 [ 69.177744][ T5742] kthread+0x370/0x450 [ 69.177762][ T5742] ? __pfx_kthread+0x10/0x10 [ 69.177780][ T5742] ret_from_fork+0x72b/0xd50 [ 69.177800][ T5742] ? __pfx_ret_from_fork+0x10/0x10 [ 69.177817][ T5742] ? rcu_is_watching+0x12/0xc0 [ 69.177844][ T5742] ? __switch_to+0x800/0x10f0 [ 69.177868][ T5742] ? __pfx_kthread+0x10/0x10 [ 69.177886][ T5742] ret_from_fork_asm+0x1a/0x30 [ 69.177911][ T5742] [ 69.177931][ T5742] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 69.271596][ T5742] Bluetooth: hci1: failed to register connection device [ 69.323826][ T6477] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 69.329903][ T6477] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 69.337372][ T6477] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 69.345652][ T6477] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 69.350194][ T6477] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 69.354668][ T6477] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 69.359013][ T6477] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 69.364509][ T6477] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 69.367280][ T6477] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 69.370710][ T6477] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 69.376136][ T6477] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 69.378937][ T6477] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 69.382760][ T6477] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 69.425593][ T6482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.159'. [ 69.429531][ T6482] veth0_macvtap: left promiscuous mode [ 69.784138][ T6522] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 69.868072][ T6529] bridge1: entered promiscuous mode [ 69.870498][ T6529] bridge1: entered allmulticast mode [ 71.348999][ T42] Bluetooth: hci4: Frame reassembly failed (-84) [ 71.351141][ T234] Bluetooth: hci4: Frame reassembly failed (-84) [ 71.353596][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 71.373820][ T6573] syzkaller0: entered promiscuous mode [ 71.378556][ T6573] syzkaller0: entered allmulticast mode [ 71.384578][ T6574] tipc: Enabled bearer , priority 0 [ 71.393081][ T6574] tipc: Resetting bearer [ 71.396497][ T6574] tipc: Disabling bearer [ 71.423786][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 71.424551][ T5748] Bluetooth: hci2: command 0x0c1a tx timeout [ 71.426695][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 71.546677][ T6581] netlink: 'syz.0.184': attribute type 1 has an invalid length. [ 71.555148][ T6581] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.571572][ T6581] netlink: 20 bytes leftover after parsing attributes in process `syz.0.184'. [ 71.574529][ T6581] netlink: 24 bytes leftover after parsing attributes in process `syz.0.184'. [ 71.589659][ T6581] bond1: (slave gretap1): making interface the new active one [ 71.592871][ T6581] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 72.156268][ T56] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 72.313656][ T56] usb 6-1: Using ep0 maxpacket: 32 [ 72.318310][ T56] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 72.323780][ T56] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 72.332275][ T56] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 72.343651][ T56] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 72.357069][ T56] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 72.366651][ T56] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 72.391895][ T56] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 72.406436][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.417500][ T56] usb 6-1: config 0 descriptor?? [ 72.582203][ T6631] netlink: 16 bytes leftover after parsing attributes in process `syz.3.192'. [ 72.587531][ T6631] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.192'. [ 72.590776][ T6631] netlink: Conntrack attr has 4 unknown bytes [ 72.598888][ T6631] syz.3.192 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 72.628183][ T6633] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 72.630931][ T6633] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 72.635271][ T6633] vhci_hcd vhci_hcd.0: Device attached [ 72.644690][ T6634] vhci_hcd: connection closed [ 72.644888][ T13] vhci_hcd vhci_hcd.3: stop threads [ 72.663578][ T13] vhci_hcd vhci_hcd.3: release socket [ 72.665357][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 72.909845][ T56] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 73.168918][ C0] usblp0: nonzero read bulk status received: -71 [ 73.171151][ T5823] usb 6-1: USB disconnect, device number 3 [ 73.173887][ T6601] usblp0: error -71 reading from printer [ 73.250128][ T6601] usblp0: removed [ 73.423594][ T5742] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 73.425785][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 73.613146][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.201'. [ 73.643848][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 73.646347][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 73.648737][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 73.713922][ T5823] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 73.864838][ T5823] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 73.882330][ T5823] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 73.896907][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 73.906104][ T5823] usb 6-1: Product: syz [ 73.907972][ T5823] usb 6-1: Manufacturer: syz [ 73.914976][ T5823] usb 6-1: SerialNumber: syz [ 74.130740][ T5823] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 74.848195][ T6650] fuse: Unknown parameter '00000000000000000000' [ 75.089737][ T6685] ubi8: attaching mtd0 [ 75.091833][ T6685] ubi8: scanning is finished [ 75.093327][ T6685] ubi8: empty MTD device detected [ 75.095152][ T6685] ubi8 error: ubi_read_volume_table: LEB size too small for a volume record [ 75.254117][ T6685] ubi8 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 75.343959][ T5886] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 75.513672][ T5742] Bluetooth: hci0: command 0x0c1a tx timeout [ 75.673647][ T5742] Bluetooth: hci1: command 0x0c1a tx timeout [ 75.673739][ T5748] Bluetooth: hci2: command 0x0c1a tx timeout [ 75.673972][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 76.064999][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.067401][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.433600][ T5886] usb 5-1: Using ep0 maxpacket: 16 [ 76.436842][ T5886] usb 5-1: unable to get BOS descriptor or descriptor too short [ 76.440364][ T5886] usb 5-1: config 3 has an invalid interface number: 95 but max is 0 [ 76.442979][ T5886] usb 5-1: config 3 has no interface number 0 [ 76.444973][ T5886] usb 5-1: config 3 interface 95 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 76.448587][ T5886] usb 5-1: config 3 interface 95 altsetting 3 has an endpoint descriptor with address 0xA7, changing to 0x87 [ 76.452623][ T5886] usb 5-1: config 3 interface 95 altsetting 3 endpoint 0x87 has invalid maxpacket 34564, setting to 64 [ 76.456300][ T5886] usb 5-1: config 3 interface 95 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 76.460772][ T5886] usb 5-1: config 3 interface 95 has no altsetting 0 [ 76.465514][ T5886] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0064, bcdDevice=31.7c [ 76.469054][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.472181][ T5886] usb 5-1: Product: syz [ 76.473899][ T5886] usb 5-1: Manufacturer: ⱌꨒЫ㕟݋ំ暪놺螒ᥑ念媹湜ǔ㣙鸼绕倷⺩鴛巫軺딿軇뛻䃷ϼ袰꠬윭⸌↣㮔،亮䫭믅뫍냍윺紛曺蟢楈浡㻎⥖᧼汶오象捝뺋爔賥꨻ァ戙氲凤ྤꞦ䃔ꏇ捒漁ゅᇔ⽃좯侠䡠䗶鏑 [ 76.483049][ T5886] usb 5-1: SerialNumber: syz [ 76.740274][ T5886] dvb-usb: found a 'TerraTec Cinergy S USB' in cold state, will try to load a firmware [ 76.858804][ T5886] usb 5-1: Direct firmware load for dvb-usb-dw2102.fw failed with error -2 [ 76.861746][ T5886] usb 5-1: Falling back to sysfs fallback for: dvb-usb-dw2102.fw [ 76.864204][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 76.864454][ T5745] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 76.967867][ T6710] netlink: 'syz.2.217': attribute type 1 has an invalid length. [ 76.994341][ T6710] 8021q: adding VLAN 0 to HW filter on device bond2 [ 76.998551][ T6710] bond1: (slave bond2): making interface the new active one [ 77.001570][ T6710] bond1: (slave bond2): Enslaving as an active interface with an up link [ 77.015171][ T6710] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 77.022099][ T6710] netlink: 28 bytes leftover after parsing attributes in process `syz.2.217'. [ 77.027842][ T6710] bond1: entered promiscuous mode [ 77.029983][ T6710] bond2: entered promiscuous mode [ 77.032747][ T6710] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.198328][ T6722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.205281][ T6722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.415171][ T6712] syz.3.215 (6712) used greatest stack depth: 19184 bytes left [ 77.738193][ T6733] 8021q: adding VLAN 0 to HW filter on device bond2 [ 77.743653][ T5745] Bluetooth: hci3: command 0x0c1a tx timeout [ 77.746559][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 77.830881][ T6743] 9p: Bad value for 'rfdno' [ 77.832576][ T6743] 9p: Bad value for 'rfdno' [ 77.834435][ T6743] 9p: Bad value for 'rfdno' [ 77.836277][ T6743] 9p: Bad value for 'rfdno' [ 77.837954][ T6743] 9p: Bad value for 'rfdno' [ 77.839625][ T6743] 9p: Bad value for 'rfdno' [ 77.841231][ T6743] 9p: Bad value for 'rfdno' [ 77.842952][ T6743] 9p: Bad value for 'rfdno' [ 77.844804][ T6743] 9p: Bad value for 'rfdno' [ 77.846591][ T6743] 9p: Bad value for 'rfdno' [ 77.848145][ T6743] 9p: Bad value for 'rfdno' [ 77.849746][ T6743] 9p: Bad value for 'rfdno' [ 77.851421][ T6743] 9p: Bad value for 'rfdno' [ 77.853177][ T6743] 9p: Bad value for 'rfdno' [ 77.855279][ T6743] 9p: Bad value for 'rfdno' [ 77.857618][ T6743] 9p: Bad value for 'rfdno' [ 77.859798][ T6743] 9p: Bad value for 'rfdno' [ 77.861887][ T6743] 9p: Bad value for 'rfdno' [ 77.864068][ T6743] 9p: Bad value for 'rfdno' [ 77.866185][ T6743] 9p: Bad value for 'rfdno' [ 77.868243][ T6743] 9p: Bad value for 'rfdno' [ 77.870197][ T6743] 9p: Bad value for 'rfdno' [ 77.872153][ T6743] 9p: Bad value for 'rfdno' [ 77.874188][ T6743] 9p: Bad value for 'rfdno' [ 77.875979][ T6743] 9p: Bad value for 'rfdno' [ 77.877885][ T6743] 9p: Bad value for 'rfdno' [ 77.879664][ T6743] 9p: Bad value for 'rfdno' [ 77.881410][ T6743] 9p: Bad value for 'rfdno' [ 77.883128][ T6743] 9p: Bad value for 'rfdno' [ 77.885265][ T6743] 9p: Bad value for 'rfdno' [ 77.887126][ T6743] 9p: Bad value for 'rfdno' [ 77.888925][ T6743] 9p: Bad value for 'rfdno' [ 77.890714][ T6743] 9p: Bad value for 'rfdno' [ 78.030100][ T6745] syzkaller0: entered promiscuous mode [ 78.032533][ T6745] syzkaller0: entered allmulticast mode [ 78.058120][ T41] audit: type=1326 audit(1781687750.627:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.3.227" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6feefec code=0x0 [ 78.162767][ T6753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.229'. [ 78.427342][ T41] audit: type=1326 audit(1781687750.997:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.0.231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 78.434330][ T41] audit: type=1326 audit(1781687750.997:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.0.231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 78.434355][ T41] audit: type=1326 audit(1781687750.997:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.0.231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 78.434377][ T41] audit: type=1326 audit(1781687750.997:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.0.231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 78.434394][ T41] audit: type=1326 audit(1781687750.997:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.0.231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 78.434410][ T41] audit: type=1326 audit(1781687750.997:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.0.231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 78.434425][ T41] audit: type=1326 audit(1781687750.997:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.0.231" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf700efec code=0x7ffc0000 [ 78.434441][ T41] audit: type=1326 audit(1781687750.997:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.0.231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 78.434457][ T41] audit: type=1326 audit(1781687750.997:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.0.231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 78.646483][ T6768] netlink: 'syz.0.233': attribute type 3 has an invalid length. [ 79.353578][ T56] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 79.544090][ T56] usb 7-1: Using ep0 maxpacket: 8 [ 79.547763][ T56] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 79.551776][ T56] usb 7-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 79.555449][ T56] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 79.559393][ T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.478581][ T6789] sit1: entered allmulticast mode [ 80.644214][ T56] usb 7-1: USB disconnect, device number 3 [ 80.685380][ T6797] netlink: 'syz.0.241': attribute type 1 has an invalid length. [ 80.698369][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.242'. [ 80.703817][ T6797] netlink: 40 bytes leftover after parsing attributes in process `syz.0.241'. [ 80.706585][ T6800] ip6gretap0: entered promiscuous mode [ 80.710057][ T6800] macvtap1: entered promiscuous mode [ 80.712043][ T6800] macvtap1: entered allmulticast mode [ 80.714178][ T6800] ip6gretap0: entered allmulticast mode [ 80.727962][ T6797] ptrace attach of ""[6801] was attempted by "/syz-executor exec"[6797] [ 80.757340][ T6800] ip6gretap0: left allmulticast mode [ 80.759199][ T6800] ip6gretap0: left promiscuous mode [ 80.761365][ T6800] macvtap1: left promiscuous mode [ 80.763325][ T6800] macvtap1: left allmulticast mode [ 80.856566][ T6810] netlink: 348 bytes leftover after parsing attributes in process `syz.0.245'. [ 80.972044][ T6816] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1*$pOcɔr$G [ 81.133662][ T6816] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$G' [ 81.138064][ T6816] CPU: 3 UID: 0 PID: 6816 Comm: syz.0.245 Not tainted syzkaller #0 PREEMPT(full) [ 81.138103][ T6816] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.138114][ T6816] Call Trace: [ 81.138126][ T6816] [ 81.138133][ T6816] dump_stack_lvl+0x100/0x190 [ 81.138167][ T6816] sysfs_warn_dup.cold+0x1c/0x28 [ 81.138193][ T6816] sysfs_do_create_link_sd+0x113/0x140 [ 81.138244][ T6816] sysfs_create_link+0x61/0xc0 [ 81.138272][ T6816] device_add+0x675/0x1970 [ 81.138301][ T6816] ? __pfx_device_add+0x10/0x10 [ 81.138327][ T6816] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 81.138347][ T6816] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 81.138377][ T6816] wiphy_register+0x1edd/0x2d90 [ 81.138397][ T6816] ? __rtnl_unlock+0xb9/0xf0 [ 81.138418][ T6816] ? __pfx_wiphy_register+0x10/0x10 [ 81.138437][ T6816] ? __asan_memset+0x23/0x50 [ 81.138459][ T6816] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 81.138492][ T6816] ieee80211_register_hw+0x3055/0x4570 [ 81.138522][ T6816] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 81.138562][ T6816] ? __pfx___debug_object_init+0x10/0x10 [ 81.138582][ T6816] ? net_generic+0xea/0x2a0 [ 81.138599][ T6816] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 81.138620][ T6816] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 81.138645][ T6816] ? __hrtimer_setup+0x208/0x330 [ 81.138671][ T6816] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 81.138699][ T6816] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 81.138720][ T6816] ? __asan_memcpy+0x3c/0x60 [ 81.138743][ T6816] hwsim_new_radio_nl+0xc5f/0x1370 [ 81.138764][ T6816] ? rcu_is_watching+0x12/0xc0 [ 81.138789][ T6816] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 81.138812][ T6816] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 81.138840][ T6816] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 81.138868][ T6816] genl_family_rcv_msg_doit+0x214/0x300 [ 81.138894][ T6816] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 81.138919][ T6816] ? genl_get_cmd+0x3e7/0x760 [ 81.138944][ T6816] ? bpf_lsm_capable+0x9/0x10 [ 81.138969][ T6816] ? security_capable+0x80/0x260 [ 81.138997][ T6816] ? ns_capable+0xd2/0xf0 [ 81.139020][ T6816] genl_rcv_msg+0x560/0x800 [ 81.139044][ T6816] ? __pfx_genl_rcv_msg+0x10/0x10 [ 81.139068][ T6816] ? __pfx___schedule+0x10/0x10 [ 81.139087][ T6816] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 81.139107][ T6816] ? preempt_schedule_irq+0x7b/0x90 [ 81.139136][ T6816] netlink_rcv_skb+0x159/0x420 [ 81.139160][ T6816] ? __pfx_genl_rcv_msg+0x10/0x10 [ 81.139185][ T6816] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 81.139208][ T6816] ? rcu_is_watching+0x12/0xc0 [ 81.139237][ T6816] ? __rcu_read_unlock+0x26a/0x5e0 [ 81.139258][ T6816] ? rcu_is_watching+0x12/0xc0 [ 81.139286][ T6816] genl_rcv+0x28/0x40 [ 81.139307][ T6816] netlink_unicast+0x585/0x850 [ 81.139329][ T6816] ? __pfx_netlink_unicast+0x10/0x10 [ 81.139353][ T6816] netlink_sendmsg+0x8b0/0xda0 [ 81.139377][ T6816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.139399][ T6816] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 81.139428][ T6816] ____sys_sendmsg+0x9e1/0xb70 [ 81.139449][ T6816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.139469][ T6816] ? __pfx_____sys_sendmsg+0x10/0x10 [ 81.139495][ T6816] ___sys_sendmsg+0x190/0x1e0 [ 81.139518][ T6816] ? __pfx____sys_sendmsg+0x10/0x10 [ 81.139540][ T6816] ? futex_wait+0x11e/0x370 [ 81.139560][ T6816] ? rcu_is_watching+0x12/0xc0 [ 81.139593][ T6816] __sys_sendmsg+0x160/0x210 [ 81.139608][ T6816] ? __pfx___sys_sendmsg+0x10/0x10 [ 81.139627][ T6816] ? rcu_is_watching+0x12/0xc0 [ 81.139655][ T6816] __do_fast_syscall_32+0xe7/0x970 [ 81.139677][ T6816] ? trace_hardirqs_on_prepare+0x1d/0x30 [ 81.139700][ T6816] do_fast_syscall_32+0x32/0x70 [ 81.139724][ T6816] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 81.139745][ T6816] RIP: 0023:0xf700efec [ 81.139764][ T6816] Code: Unable to access opcode bytes at 0xf700efc2. [ 81.139773][ T6816] RSP: 002b:00000000f53bb50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 81.139792][ T6816] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000100 [ 81.139804][ T6816] RDX: 0000000004000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 81.139815][ T6816] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 81.139826][ T6816] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 81.139838][ T6816] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 81.139851][ T6816] [ 81.287947][ T24] cfg80211: failed to load regulatory.db [ 81.351820][ T5831] usb 6-1: USB disconnect, device number 4 [ 81.391659][ T5831] usblp0: removed [ 81.919543][ T6829] syz.1.251 uses obsolete (PF_INET,SOCK_PACKET) [ 82.092837][ T6841] IPv6: addrconf: prefix option has invalid lifetime [ 82.099267][ T6841] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 82.311022][ T6850] XFS (nullb0): Invalid superblock magic number [ 82.444434][ T6861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'. [ 82.447418][ T6861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.259'. [ 82.695956][ T6865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.261'. [ 82.712832][ T6865] tipc: Enabling of bearer rejected, failed to enable media [ 82.786320][ T6872] netlink: 36 bytes leftover after parsing attributes in process `syz.2.262'. [ 82.899824][ T6874] syzkaller1: entered promiscuous mode [ 82.901604][ T6874] syzkaller1: entered allmulticast mode [ 83.387458][ T6881] fuse: Bad value for 'group_id' [ 83.389692][ T6881] fuse: Bad value for 'group_id' [ 84.256281][ T6902] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 84.263399][ T6902] syzkaller0: entered promiscuous mode [ 84.266307][ T6902] syzkaller0: entered allmulticast mode [ 84.448385][ T6907] 9pnet_virtio: no channels available for device syz [ 85.255766][ T6919] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 85.264614][ T6919] kvm: pic: non byte read [ 85.267668][ T6919] kvm: pic: level sensitive irq not supported [ 85.267939][ T6919] kvm: pic: non byte read [ 85.273467][ T6919] kvm: pic: level sensitive irq not supported [ 85.274420][ T6919] kvm: pic: non byte read [ 85.280134][ T6919] kvm: pic: level sensitive irq not supported [ 85.280758][ T6919] kvm: pic: non byte read [ 85.287433][ T6919] kvm: pic: level sensitive irq not supported [ 85.287708][ T6919] kvm: pic: non byte read [ 85.293744][ T6919] kvm: pic: level sensitive irq not supported [ 85.294208][ T6919] kvm: pic: non byte read [ 85.304114][ T6929] fuse: Bad value for 'group_id' [ 85.306258][ T6929] fuse: Bad value for 'group_id' [ 85.503599][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 85.543654][ T56] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 85.653613][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 85.657829][ T10] usb 6-1: config index 0 descriptor too short (expected 539, got 27) [ 85.661195][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 85.666397][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 85.671219][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 85.677401][ T10] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 85.681122][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.684451][ T10] usb 6-1: Product: syz [ 85.686218][ T10] usb 6-1: Manufacturer: syz [ 85.688177][ T10] usb 6-1: SerialNumber: syz [ 85.691608][ T10] usb 6-1: config 0 descriptor?? [ 85.694531][ T6927] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 85.698268][ T10] hub 6-1:0.0: bad descriptor, ignoring hub [ 85.700367][ T10] hub 6-1:0.0: probe with driver hub failed with error -5 [ 85.703576][ T10] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input7 [ 85.703833][ T56] usb 8-1: Using ep0 maxpacket: 32 [ 85.710133][ T56] usb 8-1: unable to get BOS descriptor or descriptor too short [ 85.714282][ T56] usb 8-1: config 1 interface 0 altsetting 128 endpoint 0x82 has invalid wMaxPacketSize 0 [ 85.717752][ T56] usb 8-1: config 1 interface 0 altsetting 128 bulk endpoint 0x82 has invalid maxpacket 0 [ 85.722227][ T56] usb 8-1: config 1 interface 0 altsetting 128 bulk endpoint 0x3 has invalid maxpacket 64 [ 85.726948][ T56] usb 8-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.732438][ T56] usb 8-1: config 1 interface 0 has no altsetting 0 [ 85.736899][ T56] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.740829][ T56] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.744925][ T56] usb 8-1: Product: syz [ 85.746799][ T56] usb 8-1: Manufacturer: syz [ 85.748631][ T56] usb 8-1: SerialNumber: syz [ 85.752833][ T6919] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 85.961094][ T56] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 85.965897][ T56] usb 8-1: USB disconnect, device number 4 [ 86.342627][ T6950] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.287'. [ 86.345353][ T6950] veth0_to_bond: default FDB implementation only supports local addresses [ 86.353838][ T6950] bond3: option primary: mode dependency failed, not supported in mode broadcast(3) [ 86.358961][ T6950] bond3 (unregistering): Released all slaves [ 87.573023][ T6977] 9pnet_virtio: no channels available for device syz [ 88.064784][ T6982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.294'. [ 88.100397][ T6988] [U]  [ 88.101628][ T6988] [U] K{ [ 88.103115][ T6988] [U] T 1ŠFFˊ`GJǘGO/MC [ 88.106535][ T6988] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 88.112716][ T6988] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 88.117278][ T6988] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 88.132010][ T6988] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 88.142898][ T6988] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 88.147856][ T6988] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 88.152115][ T6988] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 88.184361][ T6988] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 88.187910][ T6988] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 88.192643][ T6988] [U] 22Ʃ۩X?0;3U [ 88.194881][ T6988] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 88.204036][ T6988] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 88.207064][ T6988] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 88.210261][ T6988] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 88.212438][ T6988] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 88.217013][ T6988] [U] EC [ 88.218315][ T6988] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 88.400090][ T1043] usb 6-1: USB disconnect, device number 5 [ 88.400132][ C0] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 88.416389][ T6995] 9pnet_fd: Insufficient options for proto=fd [ 88.982935][ T6987] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 90.497431][ T5831] IPVS: starting estimator thread 0... [ 90.500382][ T7042] netlink: 'syz.0.313': attribute type 1 has an invalid length. [ 90.502805][ T7042] netlink: 224 bytes leftover after parsing attributes in process `syz.0.313'. [ 90.613782][ T7044] IPVS: using max 55 ests per chain, 132000 per kthread [ 90.643618][ T7041] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 90.686776][ T7049] netlink: 'syz.0.316': attribute type 1 has an invalid length. [ 90.694809][ T7049] 8021q: adding VLAN 0 to HW filter on device bond3 [ 90.705105][ T7049] bond3: (slave dummy0): making interface the new active one [ 90.708200][ T7049] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 90.834260][ T7050] bridge0: port 2(bridge_slave_1) entered listening state [ 90.838618][ T7050] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.896899][ T7063] gre1: entered promiscuous mode [ 90.908924][ T7064] 9pnet_virtio: no channels available for device syz [ 90.913659][ T7063] trusted_key: encrypted_key: master key parameter '' is invalid [ 90.917401][ T7063] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 91.011522][ T24] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 91.018794][ T24] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 91.021964][ T24] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 91.028264][ T24] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 91.039945][ T24] rtc rtc0: __rtc_set_alarm: err=-22 [ 91.053065][ T5745] Bluetooth: hci0: unexpected event for opcode 0x0004 [ 91.952551][ T7072] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:20000 [ 92.088815][ T7074] tmpfs: User quota block hardlimit too large. [ 92.213677][ T5810] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 92.367019][ T5810] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 92.370816][ T5810] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.374347][ T5810] usb 7-1: Product: syz [ 92.375953][ T5810] usb 7-1: Manufacturer: syz [ 92.377892][ T5810] usb 7-1: SerialNumber: syz [ 92.592466][ T5810] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 92.596781][ T5810] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 92.600356][ T5810] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 92.604495][ T5810] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 92.609586][ T5810] usb 7-1: USB disconnect, device number 4 [ 94.128109][ T64] Bluetooth: hci0: unexpected event for opcode 0x0004 [ 94.144814][ T5745] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 94.201459][ T7143] [U]  [ 94.202656][ T7143] [U] K{ [ 94.205312][ T7143] [U] T 1ŠFFˊ`GJǘGO/MC [ 94.207764][ T7143] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 94.212914][ T7143] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 94.216752][ T7143] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 94.230252][ T7143] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 94.238012][ T7143] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 94.243045][ T7143] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 94.250463][ T7143] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 94.301902][ T7143] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 94.305753][ T7143] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 94.309932][ T7143] [U] 22Ʃ۩X?0;3U [ 94.317415][ T7143] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 94.325207][ T7143] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 94.329017][ T7143] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 94.332089][ T7143] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 94.334956][ T7143] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 94.338452][ T7143] [U] EC [ 94.339651][ T7143] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 95.070452][ T7142] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 95.103698][ T5745] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 95.106489][ T5745] Bluetooth: hci0: Injecting HCI hardware error event [ 95.109162][ T5745] Bluetooth: hci0: hardware error 0x00 [ 95.371566][ T7156] vivid-007: disconnect [ 95.380881][ T7159] vivid-007: reconnect [ 95.399413][ T7161] usb 1-1: USB disconnect, device number 2 [ 95.957953][ T7176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.340'. [ 95.974302][ T7176] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.340'. [ 96.191172][ T7181] syzkaller0: entered promiscuous mode [ 96.194487][ T7181] syzkaller0: entered allmulticast mode [ 96.460590][ T7192] netlink: 24 bytes leftover after parsing attributes in process `syz.3.345'. [ 96.463816][ T7192] netlink: 40 bytes leftover after parsing attributes in process `syz.3.345'. [ 97.338915][ T7207] netlink: 52 bytes leftover after parsing attributes in process `syz.2.348'. [ 97.743609][ T5745] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 97.908386][ T7221] syzkaller0: entered promiscuous mode [ 97.911223][ T7221] syzkaller0: entered allmulticast mode [ 97.914970][ T7220] tipc: Started in network mode [ 97.917410][ T7220] tipc: Node identity 8e1ced405578, cluster identity 4711 [ 97.920503][ T7220] tipc: Enabled bearer , priority 0 [ 97.939492][ T7220] tipc: Resetting bearer [ 97.955059][ T7220] tipc: Disabling bearer [ 98.048326][ T48] Bluetooth: hci4: Frame reassembly failed (-84) [ 98.051245][ T48] Bluetooth: hci4: Frame reassembly failed (-90) [ 98.054376][ T7225] Bluetooth: hci4: Frame reassembly failed (-84) [ 99.636206][ T64] Bluetooth: hci2: unexpected event for opcode 0x0004 [ 100.063621][ T5745] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 100.063651][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 100.118530][ T7247] binder: 7246:7247 ioctl c018620c 80000240 returned -1 [ 100.481532][ T41] kauditd_printk_skb: 32 callbacks suppressed [ 100.481548][ T41] audit: type=1326 audit(1781687773.047:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.1.362" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 100.505960][ T41] audit: type=1326 audit(1781687773.067:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.1.362" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 100.523824][ T41] audit: type=1326 audit(1781687773.067:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.1.362" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 100.534411][ T41] audit: type=1326 audit(1781687773.067:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.1.362" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 100.551012][ T41] audit: type=1326 audit(1781687773.067:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.1.362" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 100.563710][ T41] audit: type=1326 audit(1781687773.067:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.1.362" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 100.580281][ T41] audit: type=1326 audit(1781687773.067:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.1.362" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 100.591867][ T41] audit: type=1326 audit(1781687773.077:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.1.362" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 100.610572][ T41] audit: type=1326 audit(1781687773.077:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.1.362" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 100.620829][ T41] audit: type=1326 audit(1781687773.087:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.1.362" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 102.166595][ T7272] [U]  [ 102.167824][ T7272] [U] K{ [ 102.169261][ T7272] [U] T 1ŠFFˊ`GJǘGO/MC [ 102.179680][ T7272] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 102.193740][ T7272] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 102.198364][ T7272] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 102.212636][ T7272] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 102.222759][ T7272] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 102.227841][ T7272] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 102.238527][ T7272] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 102.351841][ T7272] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 102.358528][ T7272] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 102.373683][ T7272] [U] 22Ʃ۩X?0;3U [ 102.375910][ T7272] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 102.396526][ T7272] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 102.401822][ T7272] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 102.409727][ T7272] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 102.414582][ T7272] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 102.422425][ T7272] [U] EC [ 102.433805][ T7272] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 102.439876][ T7278] vxcan0: tx address claim with dest, not broadcast [ 102.441657][ T7271] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 103.464312][ T7287] syz.0.369 (7287) used greatest stack depth: 18976 bytes left [ 103.562439][ T7296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.372'. [ 103.713599][ T5745] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 103.717023][ T5745] Bluetooth: hci2: Injecting HCI hardware error event [ 103.719857][ T5745] Bluetooth: hci2: hardware error 0x00 [ 104.150517][ T7309] ptrace attach of ""[7313] was attempted by "/syz-executor exec"[7309] [ 104.447507][ T7315] [U]  [ 104.448611][ T7315] [U] K{ [ 104.449788][ T7315] [U] T 1ŠFFˊ`GJǘGO/MC [ 104.454709][ T7315] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 104.461936][ T7315] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 104.469269][ T7315] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 104.485025][ T7315] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 104.506976][ T7315] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 104.524492][ T7315] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 104.539113][ T7315] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 104.605051][ T7315] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 104.608871][ T7315] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 104.613197][ T7315] [U] 22Ʃ۩X?0;3U [ 104.615100][ T7315] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 104.624247][ T7315] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 104.627690][ T7315] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 104.631275][ T7315] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 104.634680][ T7315] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 104.639398][ T7315] [U] EC [ 104.640524][ T7315] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 104.647510][ T7314] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 105.028964][ T7324] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 105.031085][ T7324] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 105.033747][ T7324] vhci_hcd vhci_hcd.0: Device attached [ 105.104827][ T7326] vhci_hcd: connection closed [ 105.105085][ T5838] vhci_hcd vhci_hcd.3: stop threads [ 105.108739][ T5838] vhci_hcd vhci_hcd.3: release socket [ 105.111151][ T5838] vhci_hcd vhci_hcd.3: disconnect device [ 105.743667][ T5745] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 108.038973][ T7382] 9pnet_virtio: no channels available for device syz [ 108.777646][ T7391] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.394'. [ 109.002755][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.399'. [ 109.422527][ T7423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.406'. [ 109.427002][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.406'. [ 109.430419][ T7423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.406'. [ 109.463021][ T7421] ptrace attach of ""[7428] was attempted by "/syz-executor exec"[7421] [ 109.466821][ T41] kauditd_printk_skb: 29 callbacks suppressed [ 109.466831][ T41] audit: type=1800 audit(1781687782.037:84): pid=7421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.402" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 109.782427][ T7427] netlink: 52 bytes leftover after parsing attributes in process `syz.1.407'. [ 110.416411][ T7436] binder: binder_mmap: 7435 80a76000-80a7a000 bad vm_flags failed -1 [ 110.579400][ T7447] smc: net device vcan0 applied user defined pnetid SYZ1 [ 110.582328][ T41] audit: type=1326 audit(1781687783.147:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.1.409" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 110.591335][ T41] audit: type=1326 audit(1781687783.157:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.1.409" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71461ab code=0x7ffc0000 [ 110.599908][ T41] audit: type=1326 audit(1781687783.157:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.1.409" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71461ab code=0x7ffc0000 [ 110.603287][ T7447] netlink: 'syz.1.409': attribute type 2 has an invalid length. [ 110.607975][ T41] audit: type=1326 audit(1781687783.157:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.1.409" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 110.618105][ T41] audit: type=1326 audit(1781687783.157:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.1.409" exe="/syz-executor" sig=0 arch=40000003 syscall=91 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 110.626343][ T41] audit: type=1326 audit(1781687783.157:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.1.409" exe="/syz-executor" sig=0 arch=40000003 syscall=91 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 110.633676][ T41] audit: type=1326 audit(1781687783.157:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.1.409" exe="/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 110.640370][ T41] audit: type=1326 audit(1781687783.157:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.1.409" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 110.646807][ T41] audit: type=1326 audit(1781687783.157:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.1.409" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 110.893632][ T7461] 9pnet_virtio: no channels available for device syz [ 111.138074][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.416'. [ 112.096324][ T7480] fuse: Unknown parameter 'group_id00000000000000000000' [ 112.153445][ T7489] netlink: 'syz.1.423': attribute type 1 has an invalid length. [ 112.157614][ T7489] netlink: 'syz.1.423': attribute type 3 has an invalid length. [ 112.160071][ T7489] netlink: 'syz.1.423': attribute type 3 has an invalid length. [ 112.361835][ T7501] infiniband uyz0: set active [ 112.364088][ T7501] infiniband uyz0: added bridge_slave_1 [ 112.374049][ T7501] smbdirect: ib_dev[uyz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 112.380388][ T7501] smbdirect: ib_dev[uyz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 112.386987][ T7509] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 112.387884][ T7501] smbdirect: ib_dev[uyz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 112.389737][ T7509] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 112.391002][ T7509] vhci_hcd vhci_hcd.0: Device attached [ 112.405624][ T7501] RDS/IB: uyz0: added [ 112.408561][ T7501] smc: adding ib device uyz0 with port count 1 [ 112.410948][ T7501] smc: ib device uyz0 port 1 has no pnetid [ 112.460612][ T7513] 9pnet_virtio: no channels available for device syz [ 112.583935][ T5810] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 112.643936][ T5810] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 113.213176][ T7511] vhci_hcd: connection reset by peer [ 113.215236][ T5838] vhci_hcd vhci_hcd.1: stop threads [ 113.217308][ T5838] vhci_hcd vhci_hcd.1: release socket [ 113.220924][ T5838] vhci_hcd vhci_hcd.1: disconnect device [ 113.485783][ T7554] netlink: 'syz.0.441': attribute type 1 has an invalid length. [ 113.493148][ T7554] 8021q: adding VLAN 0 to HW filter on device bond4 [ 113.497936][ T7554] netlink: 16 bytes leftover after parsing attributes in process `syz.0.441'. [ 113.500798][ T7554] netlink: 16 bytes leftover after parsing attributes in process `syz.0.441'. [ 113.514812][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.440'. [ 114.473704][ T41] kauditd_printk_skb: 254 callbacks suppressed [ 114.473794][ T41] audit: type=1326 audit(1781687787.047:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7579 comm="syz.1.447" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71461ab code=0x7ffc0000 [ 114.497591][ T41] audit: type=1326 audit(1781687787.047:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7579 comm="syz.1.447" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71461ab code=0x7ffc0000 [ 114.520436][ T41] audit: type=1326 audit(1781687787.047:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7579 comm="syz.1.447" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71461ab code=0x7ffc0000 [ 114.545239][ T41] audit: type=1326 audit(1781687787.047:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7579 comm="syz.1.447" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71461ab code=0x7ffc0000 [ 114.559070][ T41] audit: type=1326 audit(1781687787.047:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7579 comm="syz.1.447" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71461ab code=0x7ffc0000 [ 114.568116][ T41] audit: type=1326 audit(1781687787.047:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7579 comm="syz.1.447" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71461ab code=0x7ffc0000 [ 114.577042][ T41] audit: type=1326 audit(1781687787.047:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7579 comm="syz.1.447" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71461ab code=0x7ffc0000 [ 114.585710][ T41] audit: type=1326 audit(1781687787.047:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7579 comm="syz.1.447" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71461ab code=0x7ffc0000 [ 114.592575][ T41] audit: type=1326 audit(1781687787.047:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7579 comm="syz.1.447" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71461ab code=0x7ffc0000 [ 114.599483][ T41] audit: type=1326 audit(1781687787.047:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7579 comm="syz.1.447" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71461ab code=0x7ffc0000 [ 115.253779][ T5845] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 115.406652][ T5845] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 115.409512][ T5845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.412229][ T5845] usb 6-1: Product: syz [ 115.413607][ T5845] usb 6-1: Manufacturer: syz [ 115.415154][ T5845] usb 6-1: SerialNumber: syz [ 115.418990][ T5845] usb 6-1: config 0 descriptor?? [ 115.655792][ T7601] netlink: 24 bytes leftover after parsing attributes in process `syz.1.454'. [ 115.677896][ T5815] usb 6-1: USB disconnect, device number 6 [ 115.701891][ T7606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.455'. [ 115.864155][ T7608] Cannot find add_set index 2 as target [ 116.656593][ T7624] tmpfs: Bad value for 'mpol' [ 116.705316][ T7625] autofs4:pid:7625:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 116.715473][ T7625] blkio.reset_stats is deprecated [ 117.620994][ T7640] netlink: 'syz.0.465': attribute type 7 has an invalid length. [ 117.623491][ T7640] netlink: 'syz.0.465': attribute type 8 has an invalid length. [ 117.736269][ T5810] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 117.874585][ T7649] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 118.030730][ T7648] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.132185][ T7648] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.237147][ T7648] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.350118][ T7648] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.283393][ T5838] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.289135][ T5838] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.296232][ T5838] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.306940][ T5838] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.689402][ T5745] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 119.770224][ T48] Bluetooth: hci4: Frame reassembly failed (-84) [ 119.963628][ T5606] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 120.105438][ T7702] xt_CT: You must specify a L4 protocol and not use inversions on it [ 120.114069][ T5606] usb 6-1: Using ep0 maxpacket: 16 [ 120.122657][ T5606] usb 6-1: unable to get BOS descriptor or descriptor too short [ 120.126376][ T5606] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 120.128775][ T5606] usb 6-1: can't read configurations, error -71 [ 121.195880][ T7716] dlm: Unknown command passed to DLM device : 3 [ 121.195880][ T7716] [ 121.638543][ T7722] batman_adv: batadv0: Adding interface: macsec1 [ 121.642070][ T7722] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.653064][ T7722] batman_adv: batadv0: Interface activated: macsec1 [ 121.832326][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 121.839204][ T5745] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 121.963210][ T7724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.490'. [ 122.303719][ T34] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 122.382537][ T7745] kAFS: No cell specified [ 122.455827][ T34] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 122.466013][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 122.482063][ T34] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 122.495841][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 122.504539][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 122.516864][ T34] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 122.523727][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 122.533701][ T34] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 122.538207][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 122.542791][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 122.546756][ T34] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 122.549101][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 122.552642][ T34] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 122.558354][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 122.565087][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 122.571852][ T34] usb 7-1: string descriptor 0 read error: -22 [ 122.575872][ T34] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 122.579095][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.593396][ T34] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 122.762835][ T7756] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 122.765218][ T7756] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 122.769553][ T7756] vhci_hcd vhci_hcd.0: Device attached [ 122.854097][ T5845] usb 7-1: USB disconnect, device number 5 [ 123.033583][ T56] usb 38-1: SetAddress Request (2) to port 0 [ 123.035816][ T56] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 123.487413][ T7757] vhci_hcd: connection reset by peer [ 123.489184][ T5814] vhci_hcd vhci_hcd.0: stop threads [ 123.492092][ T5814] vhci_hcd vhci_hcd.0: release socket [ 123.496123][ T5814] vhci_hcd vhci_hcd.0: disconnect device [ 123.624011][ T7772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.501'. [ 123.661299][ T5845] libceph: connect (1)[c::]:6789 error -101 [ 123.663239][ T5845] libceph: mon0 (1)[c::]:6789 connect error [ 123.710223][ T7770] ceph: No mds server is up or the cluster is laggy [ 123.801722][ T7786] netlink: 40 bytes leftover after parsing attributes in process `syz.3.501'. [ 124.931629][ T7814] misc userio: Invalid payload size [ 125.004857][ T7815] 9pnet_virtio: no channels available for device syz [ 125.662363][ T7821] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 125.664464][ T7821] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 125.675894][ T7821] vhci_hcd vhci_hcd.0: Device attached [ 125.680415][ T7821] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.702175][ T7821] macvlan2: entered promiscuous mode [ 125.703209][ T7825] [U]  [ 125.705165][ T7825] [U] K{ [ 125.705742][ T7821] bridge0: entered promiscuous mode [ 125.707376][ T7826] program syz.0.511 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.708062][ T7825] [U] T 1ŠFFˊ`GJǘGO/MC [ 125.711975][ T7826] ata1.00: invalid transfer count 0 [ 125.714259][ T7825] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 125.720713][ T7825] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 125.725754][ T7825] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 125.737931][ T7825] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 125.745703][ T7825] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 125.749602][ T7825] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 125.753872][ T7825] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/< [ 125.768848][ T7825] dump_stack_lvl+0x100/0x190 [ 125.768874][ T7825] should_fail_ex.cold+0x5/0xa [ 125.768904][ T7825] _copy_from_iter+0x1f4/0x1690 [ 125.768925][ T7825] ? __pfx__copy_from_iter+0x10/0x10 [ 125.768941][ T7825] ? trace_kmalloc+0xeb/0x110 [ 125.768954][ T7825] ? __pfx_woken_wake_function+0x10/0x10 [ 125.768975][ T7825] ? __pfx___might_resched+0x10/0x10 [ 125.768992][ T7825] ? kfree+0x1e5/0x6c0 [ 125.769012][ T7825] file_tty_write.isra.0+0x45b/0x890 [ 125.769034][ T7825] vfs_write+0x6ac/0x1050 [ 125.769054][ T7825] ? __pfx_tty_write+0x10/0x10 [ 125.769067][ T7825] ? __pfx_vfs_write+0x10/0x10 [ 125.769087][ T7825] ? lock_release+0x24d/0x310 [ 125.769107][ T7825] ksys_write+0x12a/0x250 [ 125.769117][ T7825] ? __pfx_ksys_write+0x10/0x10 [ 125.769128][ T7825] ? ksys_write+0x1ac/0x250 [ 125.769139][ T7825] ? __pfx_ksys_write+0x10/0x10 [ 125.769150][ T7825] ? rcu_is_watching+0x12/0xc0 [ 125.769170][ T7825] __do_fast_syscall_32+0xe7/0x970 [ 125.769190][ T7825] do_fast_syscall_32+0x32/0x70 [ 125.769207][ T7825] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 125.769224][ T7825] RIP: 0023:0xf6feefec [ 125.769238][ T7825] Code: Unable to access opcode bytes at 0xf6feefc2. [ 125.769244][ T7825] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 125.769258][ T7825] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001c40 [ 125.769266][ T7825] RDX: 0000000000001006 RSI: 0000000000000000 RDI: 0000000000000000 [ 125.769274][ T7825] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 125.769282][ T7825] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 125.769290][ T7825] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 125.769302][ T7825] [ 125.954056][ T7098] usb 40-1: SetAddress Request (2) to port 0 [ 125.961231][ T7098] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 126.020086][ T7833] veth1_macvtap: left promiscuous mode [ 126.022468][ T7833] macsec0: entered allmulticast mode [ 126.031480][ T7833] veth1_macvtap: entered promiscuous mode [ 126.033289][ T7833] veth1_macvtap: entered allmulticast mode [ 126.035705][ T7833] macsec0: left allmulticast mode [ 126.037361][ T7833] veth1_macvtap: left allmulticast mode [ 126.282897][ T7841] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 126.285872][ T7841] block device autoloading is deprecated and will be removed. [ 126.290097][ T7840] [U] ؛(JЛMXZ;؝_*335\XMUAK!AQ` [ 126.292976][ T7840] [U] K{ [ 126.294680][ T7840] [U] T 1ŠFFˊ`GJǘGO/MC [ 126.296987][ T7840] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 126.303048][ T7840] [U] K\&}66XHX Ե.`A$40|϶9޿ U4ĮVBZ}WMTQΦR 4 [ 126.311019][ T7840] [U] ".H6"KÇ[J4IN[Z(^|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 126.333635][ T7840] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 126.341847][ T7840] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 126.350542][ T7840] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 126.354601][ T7840] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 126.398117][ T7840] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 126.402717][ T7840] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 126.407358][ T7840] [U] 22Ʃ۩X?0;3U [ 126.409985][ T7840] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 126.424100][ T7840] [U] [['XN' ,MR/RLFK̤Z#`̑ L؛˜B~M [ 126.428055][ T7840] [U] L>сD+D"5ʍH3<IR=F^F4NVDOIO:U>Y [ 126.431162][ T7840] [U] 'B6V20ķǞ҄"T8{9FW]̩ [ 126.434041][ T7840] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 126.438711][ T7840] [U] EC [ 126.441673][ T7840] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 126.476111][ T7822] vhci_hcd: connection reset by peer [ 126.478315][ T5814] vhci_hcd vhci_hcd.1: stop threads [ 126.480399][ T5814] vhci_hcd vhci_hcd.1: release socket [ 126.488448][ T5814] vhci_hcd vhci_hcd.1: disconnect device [ 126.574330][ T7858] trusted_key: encrypted_key: insufficient parameters specified [ 126.578976][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'. [ 126.599249][ T7861] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 126.920920][ T7839] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 127.202964][ T7874] gre0: entered promiscuous mode [ 127.205050][ T7874] gre0: entered allmulticast mode [ 127.397006][ T7882] FAULT_INJECTION: forcing a failure. [ 127.397006][ T7882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.413457][ T7882] CPU: 2 UID: 0 PID: 7882 Comm: syz.3.531 Tainted: G L syzkaller #0 PREEMPT(full) [ 127.413476][ T7882] Tainted: [L]=SOFTLOCKUP [ 127.413480][ T7882] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 127.413486][ T7882] Call Trace: [ 127.413489][ T7882] [ 127.413504][ T7882] dump_stack_lvl+0x100/0x190 [ 127.413526][ T7882] should_fail_ex.cold+0x5/0xa [ 127.413538][ T7882] _copy_from_user+0x2e/0xd0 [ 127.413581][ T7882] kstrtouint_from_user+0xd6/0x1d0 [ 127.413596][ T7882] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 127.413618][ T7882] ? cachefiles_acquire_volume+0x3c0/0xd10 [ 127.413644][ T7882] proc_fail_nth_write+0x83/0x220 [ 127.413666][ T7882] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 127.413680][ T7882] ? __pfx___might_resched+0x10/0x10 [ 127.413695][ T7882] vfs_write+0x2aa/0x1050 [ 127.413710][ T7882] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 127.413725][ T7882] ? __pfx_vfs_write+0x10/0x10 [ 127.413740][ T7882] ? rcu_is_watching+0x12/0xc0 [ 127.413759][ T7882] ? __fget_files+0x21f/0x3d0 [ 127.413775][ T7882] ksys_write+0x12a/0x250 [ 127.413789][ T7882] ? __pfx_ksys_write+0x10/0x10 [ 127.413805][ T7882] ? rcu_is_watching+0x12/0xc0 [ 127.413828][ T7882] ? rcu_is_watching+0x12/0xc0 [ 127.413853][ T7882] do_int80_emulation+0x14b/0x720 [ 127.413877][ T7882] asm_int80_emulation+0x1a/0x20 [ 127.413893][ T7882] RIP: 0023:0xf71261ab [ 127.413901][ T7882] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 127.413912][ T7882] RSP: 002b:00000000f53dd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 127.413923][ T7882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53dd5d0 [ 127.413930][ T7882] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 127.413935][ T7882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 127.413941][ T7882] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 127.413947][ T7882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 127.413956][ T7882] [ 127.533942][ T7887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.533'. [ 127.550904][ T7887] tmpfs: Bad value for 'mpol' [ 127.575323][ T41] kauditd_printk_skb: 274 callbacks suppressed [ 127.575341][ T41] audit: type=1326 audit(1781687800.147:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.3.534" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x0 [ 127.700681][ T7892] netlink: 48 bytes leftover after parsing attributes in process `syz.3.534'. [ 127.944450][ T7899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.536'. [ 127.947526][ T7899] netlink: 'syz.0.536': attribute type 5 has an invalid length. [ 127.950061][ T7899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.536'. [ 127.955234][ T7899] geneve2: entered promiscuous mode [ 127.956918][ T7899] geneve2: entered allmulticast mode [ 127.959367][ T5785] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 127.967817][ T5785] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 127.981753][ T5785] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 127.986502][ T5785] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 128.089194][ T56] usb 38-1: device descriptor read/8, error -110 [ 128.222718][ T7906] evm: overlay not supported [ 128.584950][ T56] usb usb38-port1: attempt power cycle [ 128.656638][ T41] audit: type=1800 audit(1781687801.227:633): pid=7920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.542" name="/" dev="sockfs" ino=18873 res=0 errno=0 [ 129.049880][ T64] Bluetooth: hci3: unexpected event for opcode 0x0004 [ 129.092418][ T64] Bluetooth: hci1: unexpected event for opcode 0x040d [ 129.195549][ T56] usb usb38-port1: unable to enumerate USB device [ 129.444282][ T7950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.549'. [ 129.486540][ T7955] random: crng reseeded on system resumption [ 129.993635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 130.133989][ T7967] loop6: detected capacity change from 0 to 8 [ 130.211160][ T7969] hub 8-0:1.0: USB hub found [ 130.214746][ T7969] hub 8-0:1.0: 1 port detected [ 130.237770][ T7852] libceph: connect (1)[c::]:6789 error -101 [ 130.292197][ T7852] libceph: mon0 (1)[c::]:6789 connect error [ 130.296083][ T7967] loop6: detected capacity change from 8 to 7 [ 130.298608][ T7969] ceph: No mds server is up or the cluster is laggy [ 130.355628][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.358828][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.363941][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.367369][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.372286][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.375868][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.503699][ T7098] usb 40-1: device descriptor read/8, error -110 [ 132.322367][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 132.325599][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.328215][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 132.331168][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.336374][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 132.339252][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.341869][ T7963] Sensor A: ================= START STATUS ================= [ 132.342021][ T7977] kthread_run failed with err -4 [ 132.344845][ T7963] Sensor A: Test Pattern: 75% Colorbar [ 132.347699][ T7963] Sensor A: Show Information: All [ 132.349627][ T7963] Sensor A: Vertical Flip: false [ 132.351285][ T7963] Sensor A: Horizontal Flip: false [ 132.352953][ T7963] Sensor A: Brightness: 128 [ 132.355002][ T7963] Sensor A: Contrast: 128 [ 132.356380][ T7963] Sensor A: Hue: 0 [ 132.359614][ T7963] Sensor A: Saturation: 128 [ 132.361098][ T7963] Sensor A: Pixel Rate: 160000000 [ 132.362713][ T7963] Sensor A: Horizontal Blanking: 800 [ 132.364801][ T7963] Sensor A: Vertical Blanking: 3223 [ 132.366541][ T7963] Sensor A: ================== END STATUS ================== [ 132.380508][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 132.383853][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.386806][ T7967] ldm_validate_partition_table(): Disk read failed. [ 132.389466][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 132.392954][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.396886][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 132.400127][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.402843][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 132.405646][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.408268][ T7967] Dev loop6: unable to read RDB block 0 [ 132.410529][ T7967] loop6: unable to read partition table [ 132.412349][ T7967] loop6: partition table beyond EOD, truncated [ 132.415935][ T7967] loop_reread_partitions: partition scan of loop6 (uG ܱ.:0 [ 132.415935][ T7967] 咁/scripts/get_dvb_firmware to get the firmware [ 137.514831][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.522978][ T7959] Restarting kernel threads ... [ 137.526402][ T5886] usb 5-1: USB disconnect, device number 8 [ 137.529155][ T7959] Done restarting kernel threads. [ 138.633741][ T34] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 138.663627][ T7098] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 138.793742][ T34] usb 6-1: Using ep0 maxpacket: 32 [ 138.799398][ T34] usb 6-1: config index 0 descriptor too short (expected 13339, got 27) [ 138.807567][ T34] usb 6-1: config 108 has an invalid descriptor of length 32, skipping remainder of the config [ 138.823579][ T34] usb 6-1: config 108 has 0 interfaces, different from the descriptor's value: 32 [ 138.829454][ T34] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 138.835906][ T34] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 138.839251][ T34] usb 6-1: Product: syz [ 138.839570][ T7098] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.840979][ T34] usb 6-1: Manufacturer: syz [ 138.840993][ T34] usb 6-1: SerialNumber: syz [ 138.849400][ T7098] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.853676][ T7098] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 138.861501][ T7098] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 138.871701][ T7098] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.877135][ T7098] usb 7-1: config 0 descriptor?? [ 139.137265][ T8157] fuse: Bad value for 'rootmode' [ 139.167721][ T34] usb 6-1: USB disconnect, device number 9 [ 139.291548][ T7098] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 139.293964][ T7098] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 139.296250][ T7098] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 139.298583][ T7098] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 139.300857][ T7098] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 139.303168][ T7098] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 139.305541][ T7098] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 139.307863][ T7098] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 139.310202][ T7098] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 139.312671][ T7098] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 139.318975][ T7098] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 139.557675][ T7098] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 139.845395][ T8170] netlink: 256 bytes leftover after parsing attributes in process `syz.0.594'. [ 139.908192][ T8170] xfrm1: entered allmulticast mode [ 140.744006][ T5886] usb 7-1: reset high-speed USB device number 6 using dummy_hcd [ 140.838399][ T41] audit: type=1326 audit(1781687813.407:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz.1.599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 140.845143][ T41] audit: type=1326 audit(1781687813.407:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz.1.599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 140.851780][ T41] audit: type=1326 audit(1781687813.417:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz.1.599" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 140.858424][ T41] audit: type=1326 audit(1781687813.417:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz.1.599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 140.865811][ T41] audit: type=1326 audit(1781687813.417:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz.1.599" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 140.872279][ T41] audit: type=1326 audit(1781687813.417:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz.1.599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 140.879069][ T41] audit: type=1326 audit(1781687813.417:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz.1.599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 140.885804][ T41] audit: type=1326 audit(1781687813.417:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz.1.599" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 140.892347][ T41] audit: type=1326 audit(1781687813.417:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz.1.599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 140.898966][ T41] audit: type=1326 audit(1781687813.417:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz.1.599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 141.692950][ T56] libceph: connect (1)[c::]:6789 error -101 [ 141.702379][ T56] libceph: mon0 (1)[c::]:6789 connect error [ 141.746893][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.605'. [ 141.753650][ T8214] ceph: No mds server is up or the cluster is laggy [ 141.893660][ T7098] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 141.917894][ T8220] loop5: detected capacity change from 0 to 7 [ 141.922710][ T8220] Dev loop5: unable to read RDB block 7 [ 141.925317][ T8220] loop5: unable to read partition table [ 141.927513][ T8220] loop5: partition table beyond EOD, truncated [ 141.931911][ T8220] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 142.040624][ T8228] netlink: 16 bytes leftover after parsing attributes in process `syz.2.610'. [ 142.053641][ T7098] usb 5-1: Using ep0 maxpacket: 32 [ 142.056879][ T7098] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.060130][ T7098] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.064404][ T7098] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 142.067243][ T7098] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.069768][ T7098] usb 5-1: Product: syz [ 142.071211][ T7098] usb 5-1: Manufacturer: syz [ 142.072677][ T7098] usb 5-1: SerialNumber: syz [ 142.346837][ T5810] usb 7-1: USB disconnect, device number 6 [ 142.561868][ T8244] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 143.320167][ T64] Bluetooth: hci1: unexpected event 0x18 length: 247 > 23 [ 143.435695][ T8251] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 143.441532][ T8251] xt_HMARK: spi-set and port-set can't be combined [ 144.189084][ T8263] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 144.261203][ T8265] netlink: 28 bytes leftover after parsing attributes in process `syz.3.623'. [ 144.261234][ T8265] netlink: 'syz.3.623': attribute type 7 has an invalid length. [ 144.261245][ T8265] netlink: 'syz.3.623': attribute type 8 has an invalid length. [ 144.261256][ T8265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.623'. [ 144.727695][ T7098] usb 5-1: USB disconnect, device number 9 [ 145.006154][ T8286] tipc: Enabled bearer , priority 10 [ 145.010054][ T8286] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 145.012925][ T8286] tipc: Enabled bearer , priority 10 [ 146.123929][ T5810] tipc: Node number set to 4278255617 [ 146.499221][ T8325] ntfs3(nullb0): Primary boot signature is not NTFS. [ 146.501437][ T8325] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 146.510626][ T8323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.643'. [ 146.514469][ T8323] bridge_slave_1: left allmulticast mode [ 146.516907][ T8323] bridge_slave_1: left promiscuous mode [ 146.519543][ T8323] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.526389][ T8323] bridge_slave_0: left allmulticast mode [ 146.528749][ T8323] bridge_slave_0: left promiscuous mode [ 146.531723][ T8323] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.195636][ T8346] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 147.197686][ T8346] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 147.202145][ T8346] vhci_hcd vhci_hcd.0: Device attached [ 147.202613][ T8342] 8021q: adding VLAN 0 to HW filter on device bond5 [ 147.394761][ T56] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 147.466396][ T56] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 147.552786][ T8367] netlink: 'syz.0.651': attribute type 2 has an invalid length. [ 147.559713][ T8367] M: entered promiscuous mode [ 147.622592][ T8377] 9pnet_virtio: no channels available for device syz [ 148.019072][ T8349] vhci_hcd: connection reset by peer [ 148.021522][ T5785] vhci_hcd vhci_hcd.3: stop threads [ 148.023434][ T5785] vhci_hcd vhci_hcd.3: release socket [ 148.025241][ T5785] vhci_hcd vhci_hcd.3: disconnect device [ 148.182190][ T8411] pim6reg: entered allmulticast mode [ 148.237475][ T8415] team0: entered allmulticast mode [ 148.239677][ T8415] team_slave_0: entered allmulticast mode [ 148.242015][ T8415] team_slave_1: entered allmulticast mode [ 148.244851][ T8415] team0: left allmulticast mode [ 148.246977][ T8415] team_slave_0: left allmulticast mode [ 148.249345][ T8415] team_slave_1: left allmulticast mode [ 148.251737][ T8415] pim6reg: left allmulticast mode [ 149.183575][ T5745] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.185945][ T8358] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 149.188447][ T8358] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 151.263584][ T5745] Bluetooth: hci1: command 0x0c1a tx timeout [ 152.137836][ T8465] netlink: 12 bytes leftover after parsing attributes in process `syz.0.670'. [ 152.149885][ T41] kauditd_printk_skb: 843 callbacks suppressed [ 152.149919][ T41] audit: type=1326 audit(1781687824.707:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8458 comm="syz.0.670" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 152.171880][ T41] audit: type=1326 audit(1781687824.707:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8458 comm="syz.0.670" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 152.189285][ T41] audit: type=1326 audit(1781687824.707:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8458 comm="syz.0.670" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf700efec code=0x7ffc0000 [ 152.211205][ T41] audit: type=1326 audit(1781687824.707:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8458 comm="syz.0.670" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 152.226487][ T41] audit: type=1326 audit(1781687824.707:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8458 comm="syz.0.670" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 152.235560][ T41] audit: type=1326 audit(1781687824.707:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8458 comm="syz.0.670" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf700efec code=0x7ffc0000 [ 152.241779][ T41] audit: type=1326 audit(1781687824.707:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8458 comm="syz.0.670" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 152.252132][ T41] audit: type=1326 audit(1781687824.707:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8458 comm="syz.0.670" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 152.265153][ T41] audit: type=1326 audit(1781687824.707:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8458 comm="syz.0.670" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf700efec code=0x7ffc0000 [ 152.272970][ T41] audit: type=1326 audit(1781687824.707:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8458 comm="syz.0.670" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 152.623605][ T56] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 152.625980][ T8492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.679'. [ 152.668401][ T8491] netlink: 72 bytes leftover after parsing attributes in process `syz.2.680'. [ 152.720781][ T8501] netlink: 16 bytes leftover after parsing attributes in process `syz.3.681'. [ 152.723960][ T8501] netlink: 100 bytes leftover after parsing attributes in process `syz.3.681'. [ 152.727604][ T8501] netlink: 100 bytes leftover after parsing attributes in process `syz.3.681'. [ 152.869229][ T8511] trusted_key: encrypted_key: insufficient parameters specified [ 152.878145][ T8511] trusted_key: encrypted_key: insufficient parameters specified [ 152.965944][ T8510] pim6reg: entered allmulticast mode [ 154.123063][ T8529] fuse: Unknown parameter 'f݌߅6X(nTd' [ 154.363849][ T34] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 154.525635][ T34] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 154.528358][ T34] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 154.531455][ T34] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 154.534243][ T34] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 154.537531][ T34] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 154.541977][ T34] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 154.544850][ T34] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 154.547309][ T34] usb 6-1: Product: syz [ 154.548583][ T34] usb 6-1: Manufacturer: syz [ 154.555480][ T34] cdc_wdm 6-1:1.0: skipping garbage [ 154.557134][ T34] cdc_wdm 6-1:1.0: skipping garbage [ 154.560730][ T34] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 154.562581][ T34] cdc_wdm 6-1:1.0: Unknown control protocol [ 154.709727][ T8535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.691'. [ 155.075869][ T8547] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 155.078882][ T8547] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 155.509412][ T5845] usb 6-1: USB disconnect, device number 10 [ 156.407418][ T8561] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 156.680707][ T8569] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 156.683577][ T8569] overlayfs: failed to set xattr on upper [ 156.685893][ T8569] overlayfs: ...falling back to redirect_dir=nofollow. [ 156.688768][ T8569] overlayfs: ...falling back to index=off. [ 156.690827][ T8569] overlayfs: ...falling back to uuid=null. [ 156.693122][ T8569] overlayfs: ...falling back to xino=off. [ 156.695667][ T8569] overlayfs: conflicting lowerdir path [ 156.742029][ T8571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.701'. [ 156.852645][ T8575] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 156.874374][ T8575] netlink: 72 bytes leftover after parsing attributes in process `syz.3.703'. [ 156.923719][ T846] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 156.949938][ T8578] syzkaller0: entered promiscuous mode [ 156.951700][ T8578] syzkaller0: entered allmulticast mode [ 157.083665][ T846] usb 5-1: Using ep0 maxpacket: 32 [ 157.087203][ T846] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 157.093223][ T846] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 157.097445][ T846] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 157.100926][ T846] usb 5-1: Product: syz [ 157.102741][ T846] usb 5-1: Manufacturer: syz [ 157.105884][ T846] usb 5-1: SerialNumber: syz [ 157.108973][ T846] usb 5-1: config 0 descriptor?? [ 157.111813][ T8566] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 157.379644][ T846] usb 5-1: USB disconnect, device number 10 [ 157.990971][ T8610] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20002 [ 158.243617][ T5886] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 158.403602][ T5886] usb 5-1: Using ep0 maxpacket: 8 [ 158.407911][ T5886] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 250, changing to 11 [ 158.412573][ T5886] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 158.416902][ T5886] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 158.425062][ T5886] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.429025][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.432482][ T5886] usb 5-1: Product: ᰉ [ 158.434245][ T5886] usb 5-1: Manufacturer: ю [ 158.436631][ T5886] usb 5-1: SerialNumber: 탣欨视⋚ [ 158.648324][ T5886] cdc_ncm 5-1:1.0: bind() failure [ 158.657706][ T5886] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 158.662964][ T5886] cdc_ncm 5-1:1.1: bind() failure [ 158.670635][ T5886] usb 5-1: USB disconnect, device number 11 [ 159.658755][ T8663] pim6reg: entered allmulticast mode [ 160.401385][ T8675] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 160.404233][ T8675] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 160.408368][ T8675] vhci_hcd vhci_hcd.0: Device attached [ 160.428293][ T8675] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 160.693630][ T29] usb 38-1: SetAddress Request (6) to port 0 [ 160.696231][ T29] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 160.968424][ T8692] Trying to write to read-only block-device nullb0 [ 160.975942][ T8676] vhci_hcd: connection reset by peer [ 160.980550][ T5838] vhci_hcd vhci_hcd.0: stop threads [ 160.982299][ T5838] vhci_hcd vhci_hcd.0: release socket [ 160.984706][ T5838] vhci_hcd vhci_hcd.0: disconnect device [ 161.045349][ T8691] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 161.549331][ T8702] bridge_slave_1: default FDB implementation only supports local addresses [ 161.618107][ T8706] netlink: 84 bytes leftover after parsing attributes in process `syz.2.741'. [ 162.180253][ T8726] netlink: 24 bytes leftover after parsing attributes in process `syz.2.745'. [ 162.349291][ T8729] trusted_key: syz.2.745 sent an empty control message without MSG_MORE. [ 162.532899][ T8730] capability: warning: `syz.1.746' uses 32-bit capabilities (legacy support in use) [ 162.604185][ T41] kauditd_printk_skb: 11 callbacks suppressed [ 162.604196][ T41] audit: type=1800 audit(1781687835.167:1508): pid=8729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.745" name="file1" dev="tmpfs" ino=939 res=0 errno=0 [ 162.865438][ T8742] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 4294967180 out of range (51000000..2150000000) [ 164.336296][ T8778] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048) [ 164.555259][ T8783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.760'. [ 165.445272][ T8800] netlink: 12 bytes leftover after parsing attributes in process `syz.2.766'. [ 165.504598][ T8790] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 165.506723][ T8790] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 165.509272][ T8790] vhci_hcd vhci_hcd.0: Device attached [ 165.745741][ T29] usb 38-1: device descriptor read/8, error -110 [ 165.815992][ T56] usb 40-1: SetAddress Request (6) to port 0 [ 165.818011][ T56] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 166.031760][ T8802] vhci_hcd: connection reset by peer [ 166.073688][ T5838] vhci_hcd vhci_hcd.1: stop threads [ 166.075547][ T5838] vhci_hcd vhci_hcd.1: release socket [ 166.077572][ T5838] vhci_hcd vhci_hcd.1: disconnect device [ 166.137965][ T29] usb usb38-port1: attempt power cycle [ 166.704209][ T29] usb usb38-port1: unable to enumerate USB device [ 167.147698][ T8819] 9p: Bad value for 'rfdno' [ 167.432314][ T8823] input: syz0 as /devices/virtual/input/input9 [ 168.053064][ T8845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.781'. [ 168.095989][ T8845] team0: Port device team_slave_0 removed [ 168.321913][ T8870] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode [ 168.583567][ T5606] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 168.726855][ T5606] usb 5-1: device descriptor read/64, error -71 [ 168.963577][ T5606] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 169.143633][ T5606] usb 5-1: device descriptor read/64, error -71 [ 169.263741][ T5606] usb usb5-port1: attempt power cycle [ 169.357270][ T8898] netlink: 20 bytes leftover after parsing attributes in process `syz.1.799'. [ 169.360315][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.799'. [ 169.613593][ T5606] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 169.633940][ T5606] usb 5-1: device descriptor read/8, error -71 [ 169.883603][ T5606] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 169.904567][ T5606] usb 5-1: device descriptor read/8, error -71 [ 170.013945][ T5606] usb usb5-port1: unable to enumerate USB device [ 170.361661][ T8917] overlayfs: overlapping lowerdir path [ 170.492039][ T8917] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 170.640755][ T8948] afs: Unknown parameter 'dyn00000000000000000000' [ 170.877385][ T56] usb 40-1: device descriptor read/8, error -110 [ 171.440272][ T8994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.821'. [ 171.595795][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.824'. [ 171.636317][ T9009] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size. [ 171.787206][ T56] usb usb40-port1: attempt power cycle [ 171.866610][ T9015] 8021q: VLANs not supported on ip6gre0 [ 172.344862][ T56] usb usb40-port1: unable to enumerate USB device [ 172.543397][ T9034] netlink: 24 bytes leftover after parsing attributes in process `syz.3.833'. [ 172.558966][ T9035] netlink: 16 bytes leftover after parsing attributes in process `syz.1.826'. [ 173.726399][ T9045] overlayfs: failed to resolve './bus:/': -2 [ 173.752219][ T41] audit: type=1326 audit(1781687846.317:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.1.835" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 173.763635][ T41] audit: type=1326 audit(1781687846.317:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.1.835" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 173.784072][ T41] audit: type=1326 audit(1781687846.317:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.1.835" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 173.791084][ T41] audit: type=1326 audit(1781687846.337:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.1.835" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 173.798074][ T41] audit: type=1326 audit(1781687846.337:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.1.835" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 173.805350][ T41] audit: type=1326 audit(1781687846.337:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.1.835" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 173.812367][ T41] audit: type=1326 audit(1781687846.337:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.1.835" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 173.819318][ T41] audit: type=1326 audit(1781687846.337:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.1.835" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 173.825920][ T41] audit: type=1326 audit(1781687846.337:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.1.835" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 173.832519][ T41] audit: type=1326 audit(1781687846.337:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.1.835" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fec code=0x7ffc0000 [ 174.552517][ T9074] qrtr: Invalid version 255 [ 175.579926][ T9085] netlink: 'syz.1.846': attribute type 39 has an invalid length. [ 176.066051][ T9088] 9pnet_virtio: no channels available for device syz [ 177.130445][ T9109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.145149][ T9110] netlink: 28 bytes leftover after parsing attributes in process `syz.2.852'. [ 177.528482][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.855'. [ 177.536602][ T9122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.855'. [ 178.284809][ T9137] netem: change failed [ 178.939445][ T9161] 9pnet_virtio: no channels available for device syz [ 179.413647][ T34] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 179.524974][ T5743] 9pnet: Tag 0 still in use [ 179.532104][ C0] ------------[ cut here ]------------ [ 179.533845][ C0] refcount_t: underflow; use-after-free. [ 179.535463][ C0] WARNING: lib/refcount.c:28 at refcount_warn_saturate+0xf4/0x130, CPU#0: syz.2.864/9155 [ 179.538366][ C0] Modules linked in: [ 179.538379][ C0] CPU: 0 UID: 0 PID: 9155 Comm: syz.2.864 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.538394][ C0] Tainted: [L]=SOFTLOCKUP [ 179.538397][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.538403][ C0] RIP: 0010:refcount_warn_saturate+0xf4/0x130 [ 179.538418][ C0] Code: cc e8 60 d1 0f fd 48 8d 3d 89 0c eb 0b 67 48 0f b9 3a e8 4f d1 0f fd 5b 5d e9 88 81 94 06 e8 43 d1 0f fd 48 8d 3d 7c 0c eb 0b <67> 48 0f b9 3a e8 32 d1 0f fd 5b 5d c3 cc cc cc cc e8 26 d1 0f fd [ 179.538428][ C0] RSP: 0018:ffffc90000007d98 EFLAGS: 00010046 [ 179.538437][ C0] RAX: 0000000080010002 RBX: ffff88804b228dd8 RCX: ffffffff84f8cf0b [ 179.560023][ C0] RDX: ffff888023262540 RSI: ffffffff84f8cf9d RDI: ffffffff90e3dc20 [ 179.562420][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000004 [ 179.564963][ C0] R10: 0000000000000003 R11: 000000000000001e R12: ffff88804b228dd8 [ 179.567450][ C0] R13: ffff8880790f8c00 R14: 000000000000000b R15: 1ffff1100415380c [ 179.569905][ C0] FS: 0000000000000000(0000) GS:ffff888097166000(0063) knlGS:00000000f5475b40 [ 179.572829][ C0] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 179.573834][ T34] usb 6-1: Using ep0 maxpacket: 32 [ 179.575074][ C0] CR2: 00000000f741157c CR3: 0000000078924000 CR4: 0000000000352ef0 [ 179.575084][ C0] Call Trace: [ 179.575089][ C0] [ 179.575094][ C0] p9_req_put+0x1ec/0x250 [ 179.575111][ C0] req_done+0x1dc/0x2e0 [ 179.575124][ C0] ? __pfx_req_done+0x10/0x10 [ 179.578733][ T34] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 179.579897][ C0] ? sched_clock_cpu+0x6c/0x570 [ 179.579914][ C0] ? __pfx_try_to_wake_up+0x10/0x10 [ 179.579929][ C0] ? __pfx_req_done+0x10/0x10 [ 179.579940][ C0] vring_interrupt+0x2ef/0x650 [ 179.579950][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 179.581590][ T34] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 179.582155][ C0] __handle_irq_event_percpu+0x232/0x880 [ 179.585870][ T34] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 53, changing to 9 [ 179.586442][ C0] handle_irq_event+0xab/0x1e0 [ 179.586460][ C0] handle_edge_irq+0x34c/0x950 [ 179.586476][ C0] __common_interrupt+0xd8/0x2f0 [ 179.589806][ T34] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 58171, setting to 1024 [ 179.591112][ C0] common_interrupt+0xb9/0xe0 [ 179.591131][ C0] [ 179.591135][ C0] [ 179.591139][ C0] asm_common_interrupt+0x26/0x40 [ 179.591149][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 179.591161][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 c6 5f 57 f6 48 89 df e8 4e af 57 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 75 bd 46 f6 65 8b 05 1e 99 7e 08 85 c0 74 16 5b [ 179.591171][ C0] RSP: 0018:ffffc900032b7808 EFLAGS: 00000246 [ 179.593496][ T34] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 179.594683][ C0] [ 179.594687][ C0] RAX: 0000000000000046 RBX: ffff8880252e8f80 RCX: ffffffff8210e1df [ 179.594694][ C0] RDX: 0000000000000000 RSI: ffffffff8c1ce280 RDI: ffffffff8b8d0722 [ 179.594700][ C0] RBP: 0000000000000282 R08: 0000000000000000 R09: fffffbfff21b2432 [ 179.594706][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880252e8e10 [ 179.594712][ C0] R13: ffff8880252e8fc0 R14: ffff8880252e8968 R15: ffff8880259bc280 [ 179.594720][ C0] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 179.596895][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 179.598270][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 179.598285][ C0] __unix_dgram_recvmsg+0x31a/0xc30 [ 179.598301][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 179.598315][ C0] ? trace_irq_enable.constprop.0+0x122/0x160 [ 179.598330][ C0] ? irqentry_exit+0x24d/0xa00 [ 179.604732][ T34] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 179.607524][ C0] unix_dgram_recvmsg+0xcd/0x100 [ 179.607542][ C0] ____sys_recvmsg+0x5b3/0x640 [ 179.607554][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 179.607569][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 179.607583][ C0] ? rcu_is_watching+0x12/0xc0 [ 179.609746][ T34] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 179.610941][ C0] ? ___sys_recvmsg+0x177/0x1a0 [ 179.610956][ C0] ? kfree+0x1e5/0x6c0 [ 179.610967][ C0] ? rcu_is_watching+0x12/0xc0 [ 179.610982][ C0] ___sys_recvmsg+0x16a/0x1a0 [ 179.610995][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 179.613034][ T34] usb 6-1: Product: syz [ 179.616126][ C0] ? __pfx___might_resched+0x10/0x10 [ 179.616142][ C0] ? do_recvmmsg+0x4ef/0x740 [ 179.616155][ C0] do_recvmmsg+0x54d/0x740 [ 179.616168][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 179.616180][ C0] ? __sched_setaffinity+0x17c/0x280 [ 179.616189][ C0] ? __pfx___sched_setaffinity+0x10/0x10 [ 179.616200][ C0] ? __pfx_sched_setaffinity+0x10/0x10 [ 179.616209][ C0] ? fd_install+0x24f/0x580 [ 179.616224][ C0] __sys_recvmmsg+0x21f/0x270 [ 179.616237][ C0] ? __pfx___sys_recvmmsg+0x10/0x10 [ 179.616248][ C0] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 179.616261][ C0] ? trace_irq_enable.constprop.0+0x122/0x160 [ 179.616274][ C0] __do_fast_syscall_32+0xe7/0x970 [ 179.616287][ C0] ? trace_hardirqs_on_prepare+0x1d/0x30 [ 179.616300][ C0] do_fast_syscall_32+0x32/0x70 [ 179.616313][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 179.616326][ C0] RIP: 0023:0xf7fd4fec [ 179.616338][ C0] Code: Unable to access opcode bytes at 0xf7fd4fc2. [ 179.616343][ C0] RSP: 002b:00000000f547550c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 179.616353][ C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 179.616360][ C0] RDX: 00000000080002c1 RSI: 0000000000000002 RDI: 0000000000000000 [ 179.616365][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 179.616371][ C0] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 179.616376][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 179.616385][ C0] [ 179.616391][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 179.616400][ C0] CPU: 0 UID: 0 PID: 9155 Comm: syz.2.864 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.616413][ C0] Tainted: [L]=SOFTLOCKUP [ 179.616417][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.616423][ C0] Call Trace: [ 179.616426][ C0] [ 179.616430][ C0] dump_stack_lvl+0x100/0x190 [ 179.616446][ C0] vpanic+0x552/0x970 [ 179.616455][ C0] ? __pfx_vpanic+0x10/0x10 [ 179.616463][ C0] ? lock_release+0x24d/0x310 [ 179.616476][ C0] panic+0xd1/0xe0 [ 179.616484][ C0] ? __pfx_panic+0x10/0x10 [ 179.616494][ C0] ? check_panic_on_warn+0x1f/0x90 [ 179.616511][ C0] check_panic_on_warn.cold+0x19/0x34 [ 179.616522][ C0] ? refcount_warn_saturate+0xf4/0x130 [ 179.616534][ C0] __warn.cold+0x191/0x318 [ 179.616543][ C0] __report_bug+0x30f/0x440 [ 179.616555][ C0] ? refcount_warn_saturate+0xf4/0x130 [ 179.616567][ C0] ? __pfx___report_bug+0x10/0x10 [ 179.616578][ C0] ? refcount_warn_saturate+0xed/0x130 [ 179.616590][ C0] ? refcount_warn_saturate+0x5b/0x130 [ 179.616604][ C0] report_bug_entry+0xe1/0x290 [ 179.616615][ C0] ? refcount_warn_saturate+0xf4/0x130 [ 179.616627][ C0] handle_bug+0x1cd/0x2a0 [ 179.616640][ C0] exc_invalid_op+0x17/0x50 [ 179.616653][ C0] asm_exc_invalid_op+0x1a/0x20 [ 179.616662][ C0] RIP: 0010:refcount_warn_saturate+0xf4/0x130 [ 179.616675][ C0] Code: cc e8 60 d1 0f fd 48 8d 3d 89 0c eb 0b 67 48 0f b9 3a e8 4f d1 0f fd 5b 5d e9 88 81 94 06 e8 43 d1 0f fd 48 8d 3d 7c 0c eb 0b <67> 48 0f b9 3a e8 32 d1 0f fd 5b 5d c3 cc cc cc cc e8 26 d1 0f fd [ 179.616685][ C0] RSP: 0018:ffffc90000007d98 EFLAGS: 00010046 [ 179.616693][ C0] RAX: 0000000080010002 RBX: ffff88804b228dd8 RCX: ffffffff84f8cf0b [ 179.616699][ C0] RDX: ffff888023262540 RSI: ffffffff84f8cf9d RDI: ffffffff90e3dc20 [ 179.616705][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000004 [ 179.616710][ C0] R10: 0000000000000003 R11: 000000000000001e R12: ffff88804b228dd8 [ 179.616716][ C0] R13: ffff8880790f8c00 R14: 000000000000000b R15: 1ffff1100415380c [ 179.616724][ C0] ? refcount_warn_saturate+0x5b/0x130 [ 179.616735][ C0] ? refcount_warn_saturate+0xed/0x130 [ 179.616748][ C0] ? refcount_warn_saturate+0xed/0x130 [ 179.616760][ C0] p9_req_put+0x1ec/0x250 [ 179.616774][ C0] req_done+0x1dc/0x2e0 [ 179.616786][ C0] ? __pfx_req_done+0x10/0x10 [ 179.616796][ C0] ? sched_clock_cpu+0x6c/0x570 [ 179.616823][ C0] ? __pfx_try_to_wake_up+0x10/0x10 [ 179.616838][ C0] ? __pfx_req_done+0x10/0x10 [ 179.616848][ C0] vring_interrupt+0x2ef/0x650 [ 179.616857][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 179.616866][ C0] __handle_irq_event_percpu+0x232/0x880 [ 179.616883][ C0] handle_irq_event+0xab/0x1e0 [ 179.616898][ C0] handle_edge_irq+0x34c/0x950 [ 179.616913][ C0] __common_interrupt+0xd8/0x2f0 [ 179.616928][ C0] common_interrupt+0xb9/0xe0 [ 179.616942][ C0] [ 179.616945][ C0] [ 179.616949][ C0] asm_common_interrupt+0x26/0x40 [ 179.616959][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 179.616970][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 c6 5f 57 f6 48 89 df e8 4e af 57 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 75 bd 46 f6 65 8b 05 1e 99 7e 08 85 c0 74 16 5b [ 179.616979][ C0] RSP: 0018:ffffc900032b7808 EFLAGS: 00000246 [ 179.616987][ C0] RAX: 0000000000000046 RBX: ffff8880252e8f80 RCX: ffffffff8210e1df [ 179.616993][ C0] RDX: 0000000000000000 RSI: ffffffff8c1ce280 RDI: ffffffff8b8d0722 [ 179.616999][ C0] RBP: 0000000000000282 R08: 0000000000000000 R09: fffffbfff21b2432 [ 179.617005][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880252e8e10 [ 179.617010][ C0] R13: ffff8880252e8fc0 R14: ffff8880252e8968 R15: ffff8880259bc280 [ 179.617018][ C0] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 179.617031][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 179.617042][ C0] __unix_dgram_recvmsg+0x31a/0xc30 [ 179.617057][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 179.617071][ C0] ? trace_irq_enable.constprop.0+0x122/0x160 [ 179.617086][ C0] ? irqentry_exit+0x24d/0xa00 [ 179.617098][ C0] unix_dgram_recvmsg+0xcd/0x100 [ 179.617112][ C0] ____sys_recvmsg+0x5b3/0x640 [ 179.617124][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 179.617139][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 179.617152][ C0] ? rcu_is_watching+0x12/0xc0 [ 179.617169][ C0] ? ___sys_recvmsg+0x177/0x1a0 [ 179.617185][ C0] ? kfree+0x1e5/0x6c0 [ 179.617200][ C0] ? rcu_is_watching+0x12/0xc0 [ 179.617220][ C0] ___sys_recvmsg+0x16a/0x1a0 [ 179.617241][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 179.617257][ C0] ? __pfx___might_resched+0x10/0x10 [ 179.617268][ C0] ? do_recvmmsg+0x4ef/0x740 [ 179.617281][ C0] do_recvmmsg+0x54d/0x740 [ 179.617293][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 179.617305][ C0] ? __sched_setaffinity+0x17c/0x280 [ 179.617314][ C0] ? __pfx___sched_setaffinity+0x10/0x10 [ 179.617325][ C0] ? __pfx_sched_setaffinity+0x10/0x10 [ 179.617334][ C0] ? fd_install+0x24f/0x580 [ 179.617349][ C0] __sys_recvmmsg+0x21f/0x270 [ 179.617359][ C0] ? __pfx___sys_recvmmsg+0x10/0x10 [ 179.617370][ C0] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 179.617382][ C0] ? trace_irq_enable.constprop.0+0x122/0x160 [ 179.617394][ C0] __do_fast_syscall_32+0xe7/0x970 [ 179.617407][ C0] ? trace_hardirqs_on_prepare+0x1d/0x30 [ 179.617419][ C0] do_fast_syscall_32+0x32/0x70 [ 179.617432][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 179.617443][ C0] RIP: 0023:0xf7fd4fec [ 179.617452][ C0] Code: Unable to access opcode bytes at 0xf7fd4fc2. [ 179.617456][ C0] RSP: 002b:00000000f547550c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 179.617465][ C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 179.617471][ C0] RDX: 00000000080002c1 RSI: 0000000000000002 RDI: 0000000000000000 [ 179.617477][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 179.617483][ C0] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 179.617488][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 179.617497][ C0] [ 179.618766][ C0] Kernel Offset: disabled