last executing test programs: 9m3.956346664s ago: executing program 0 (id=212): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003a80)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0x6}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 9m3.76235427s ago: executing program 0 (id=214): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x3c, 0x82, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000500)=""/130, 0x0, 0x0, 0x277, 0xbe, &(0x7f0000000840)="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", &(0x7f00000005c0)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5a", 0x1, 0x8000, 0x1}, 0x4c) 9m3.758780377s ago: executing program 0 (id=215): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x20000000, 0x40800) openat$dma_heap(0xffffff9c, &(0x7f0000000000), 0x90000, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = eventfd2(0x43, 0x1) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x1, r2}) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x1a) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x80000001, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x300) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000180)={r8, 0x2, 0x8, 0x0, 0x0}) 9m3.566236375s ago: executing program 0 (id=218): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000003, 0x8010, 0xffffffffffffffff, 0x8000000) r1 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/../file0/../file0\x00', &(0x7f0000000140)={0x80780, 0x102, 0x10}, 0x18) syz_io_uring_submit(r0, 0x0, &(0x7f0000000200)=@IORING_OP_MKDIRAT={0x25, 0x1, 0x0, r1, 0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x141, 0x0, 0x1}) 9m3.275492205s ago: executing program 0 (id=219): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1b2, 0x187143) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x18, 0xd, "fee8a2ab78fc179fcff8a0e91ddaaca7bd6447a4b4e00d9683dda1afb94c1956b7fb0a018c060000000000000300000000000000000000000000e0ffffff00", "2809e8dbe10859892d0000b420a9c81f40f05f819e0117020000f20020000000e903001000", "90be8b1c5512406c5f00", [0x4, 0x5]}}) r2 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x80081280, &(0x7f0000000440)={r0, 0x200, {0x2a12, 0x80010000, 0x0, 0x3, 0x9, 0x0, 0x0, 0x15, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7ca64c6a4b4e00d9683dda1af1ea80000000000000000000000deff1200100000000000000000000000000800004000", "2809a94ad54afac861b25e750200000000000000a93c7540fc767f9e01177d3dd40600000061ac0000008008000000000000f20000000002000800", "90be8b1c55f96400", [0x5, 0x7]}}) 9m2.986179043s ago: executing program 0 (id=220): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="10c32900000000dbdf253700000008005700020000000800342b675bd3758e792c34cc5bf858e26599e2cb3688532661feb890f64900270002000000a75f59d89d3639214e59f560db111da535aced570a3768b9995bbd315f65ade2"], 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40010) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000005c0)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(r1, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r3 = socket$kcm(0x10, 0x6, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x48050) sendmsg(0xffffffffffffffff, 0x0, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xf, 0x491, 0x3, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, 0x0, &(0x7f0000000200)=0x421) 9m2.9039941s ago: executing program 32 (id=220): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="10c32900000000dbdf253700000008005700020000000800342b675bd3758e792c34cc5bf858e26599e2cb3688532661feb890f64900270002000000a75f59d89d3639214e59f560db111da535aced570a3768b9995bbd315f65ade2"], 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40010) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000005c0)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(r1, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r3 = socket$kcm(0x10, 0x6, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x48050) sendmsg(0xffffffffffffffff, 0x0, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xf, 0x491, 0x3, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, 0x0, &(0x7f0000000200)=0x421) 6m16.092148159s ago: executing program 1 (id=905): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000040)=0xb, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x30, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x108}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x20004c00) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007600)=[{{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000000080)="5c34595c24cc2c0a8a2c0e745af81012bafefdc8a1c154257d97d558befafc7c2f4a5adffb", 0x25}], 0x1}}], 0x1, 0x48015) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x80800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000020000000000000060b4000818110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000dab7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c40)={r5, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000002080)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x2000000000c45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x9, 0x0, 0x400, 0x80, 0x3, 0x0, 0x1, 0x8d], 0x100000, 0x80}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 6m15.483381536s ago: executing program 1 (id=906): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) get_mempolicy(0x0, 0x0, 0xdf8, &(0x7f0000ff5000/0x4000)=nil, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x6c, 0x30, 0xb, 0x5, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000009, 0x0, 0x0, 0x0, 0x8}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf250f00000008000300", @ANYRES32=r4, @ANYBLOB="05002e000000080005003700fd000036"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) ioctl$PTP_ENABLE_PPS(r5, 0x40043d04, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) bind$inet(r6, &(0x7f0000002100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) sendmmsg$inet(r6, &(0x7f0000000600)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080a0) sendmmsg$inet(r6, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12) (fail_nth: 3) write$dsp(r1, 0x0, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[], 0x10) close_range(r7, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket(0x1, 0x6, 0x1) 6m14.60304719s ago: executing program 1 (id=911): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="a7", 0x1, 0x2400c040, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffc}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@struct={0x4, 0x1, 0x0, 0x4, 0x0, 0x1, [{0xa, 0x3, 0x6}]}, @int={0x10, 0x0, 0x0, 0x1, 0x5, 0x20, 0x0, 0x19}]}}, 0x0, 0x42}, 0x28) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04040affffffff"], 0xd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) 6m13.602725348s ago: executing program 1 (id=912): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000340)=""/117, 0x75}], 0x1, 0x7, 0x8a4) ioctl$RTC_UIE_ON(r1, 0x7003) open(&(0x7f0000000480)='./file0/../file0\x00', 0x200002, 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) sched_getattr(r2, &(0x7f0000000300)={0x38}, 0x38, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x2}) close(r4) r5 = dup(r3) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) openat$cdrom(0xffffffffffffff9c, 0x0, 0x103040, 0x0) r6 = syz_io_uring_setup(0x80235, &(0x7f0000000400)={0x0, 0x536, 0x1, 0x8, 0x24c, 0x0, r5}, &(0x7f00000004c0)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r6, 0x234f, 0x2d59, 0x2, 0x0, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r9, 0x540a, 0x0) write(r9, &(0x7f0000000100)='^', 0x1) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000280)={0x0, "c683faa6825f1a25af3b6191facc8751ba3d8a447a0f359cf181bb0d58924dd9d9b34837a9ef3a3f72c925bbd42a07f3b2f9b25d4e7c08909985c4a4734ae2bd"}, 0x48, 0xfffffffffffffffe) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) 6m12.459126199s ago: executing program 1 (id=918): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x2b1e}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffff060c4a3060b2e0ffffffbbbbbbbbbbbb86dd4471fcfd040041ec00000000000000000000ffffe0000001fe8000000000000000000000000000aa80"], 0x0) 6m12.303440009s ago: executing program 1 (id=919): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xd, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0xf0ffff, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m12.189336562s ago: executing program 33 (id=919): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xd, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0xf0ffff, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.276609653s ago: executing program 2 (id=3046): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_INSN(r0, 0x8020640c, &(0x7f0000000000)={0x8000000, 0x4e3, &(0x7f0000000500)=[0x9, 0x84, 0xfffffffd, 0x1, 0x3, 0x2f, 0x4, 0x1, 0xffffffff, 0x0, 0xffff8000, 0x10, 0x0, 0x8e, 0x9, 0x1b, 0xaa3d, 0x10, 0x2, 0x1ff, 0xc1, 0xf, 0x5, 0x0, 0x3, 0x0, 0x2f8, 0x9, 0x0, 0x1, 0x5, 0xffffffff, 0x3ff, 0x3, 0x6, 0x7, 0xff, 0x7f, 0x39a8, 0x3, 0x7, 0x6, 0x401, 0x7, 0x7, 0x5, 0x5, 0x4, 0x6, 0x1000000, 0xc, 0x0, 0x501b, 0x7, 0x9, 0x39af9b3b, 0x46e8, 0x1, 0x9, 0x9, 0x7fff, 0xffff, 0x2, 0x1, 0x0, 0xfffffffd, 0x80, 0x8, 0x2, 0xa, 0xed9, 0xffff, 0x1, 0x3, 0x7, 0x1, 0xf2, 0x7, 0xff, 0x9, 0x1, 0x6, 0x21a4, 0x2, 0xbf, 0x3, 0xa, 0xe, 0x3, 0x7, 0x800, 0xb, 0x10000, 0x6320, 0x1, 0x40, 0x0, 0x9, 0x7ff, 0x5, 0x785, 0x5, 0x1, 0x475, 0x9, 0x3f2, 0x40, 0xf, 0x6, 0x101, 0x80, 0x80, 0x0, 0xfffffc01, 0x3, 0x7, 0x2, 0x0, 0x4, 0x8, 0x7fff, 0x6, 0x276, 0x1, 0xffffffff, 0x8, 0x5a6349fa, 0x1, 0x5, 0x8, 0x9, 0xffffff00, 0x1ad, 0x9c, 0x3, 0x9, 0x8, 0x3, 0x8001, 0x18b6, 0x5, 0x7, 0xc, 0x8, 0x0, 0x3, 0xc, 0xfff, 0x400, 0x81, 0x0, 0x80000000, 0xffffff00, 0x6, 0x401, 0x5b29, 0x6, 0x5, 0x10, 0xfff, 0x6, 0x2, 0x8d8, 0x4, 0x5, 0x17af, 0x7, 0x5, 0x8, 0x2, 0x2, 0x10000, 0x5, 0x0, 0x10, 0x5, 0x1db3, 0x2, 0xa, 0x1, 0x401, 0x3, 0xf2c4, 0xfffffffa, 0x3, 0xfffffffb, 0x5, 0xc640, 0x5855e698, 0x1, 0xd09, 0x5, 0x3, 0x2, 0x8, 0x10001, 0x4, 0xdb1, 0x3, 0xb0d3, 0x3, 0x0, 0x80000001, 0x1, 0x81, 0x8, 0x10001, 0x8, 0x0, 0x3, 0x1, 0x8, 0x1, 0x7, 0x80000000, 0x9, 0x9, 0x8, 0x4, 0x8, 0x5, 0x40, 0x0, 0x8, 0x80, 0x9, 0x0, 0xe19, 0x2, 0xffff, 0x861, 0x8, 0x4, 0xe, 0x7fff, 0x2, 0x7, 0x7, 0x7, 0x9, 0x18000000, 0x9, 0x80000000, 0x100, 0xa, 0x5, 0x10001, 0xbbaf, 0x2, 0x81, 0x6, 0x2, 0x841, 0xe5c9, 0x80, 0xffff, 0xac1, 0x6, 0x0, 0x1000, 0x80000000, 0x800, 0x9, 0x3e1, 0x8, 0x7e1, 0x0, 0x12d, 0x9c5a, 0x9, 0x8001, 0x8, 0xc1, 0x9, 0x9, 0x3, 0x4, 0x2, 0x3, 0xfffff800, 0x8, 0x413, 0x48d, 0x6, 0x0, 0x7, 0x3, 0x3, 0x1, 0x10000, 0x63, 0x4, 0x9, 0x6, 0x6, 0x2, 0x80000000, 0x8, 0x7, 0xfffffff9, 0xc1, 0x80000000, 0x400, 0x9, 0x5, 0x4, 0x5, 0x5, 0x3, 0x1, 0x0, 0x7, 0x81, 0xf7, 0xc, 0x6, 0xc, 0xff, 0x3, 0x6, 0x9f0, 0x4, 0x6, 0xff800, 0x0, 0x40, 0xfff, 0x4, 0x8, 0x7, 0x2, 0x7, 0x5, 0x7, 0x4, 0xbf, 0x5, 0x30000, 0x8, 0x6, 0x8, 0x9, 0x6, 0x3, 0x40, 0x6, 0x83e, 0x137, 0x9, 0x6, 0x9, 0x2, 0x101, 0x0, 0x80, 0x2, 0xb, 0x6, 0x5, 0x9, 0x1, 0x5, 0xe9, 0x100, 0x8, 0x5, 0x7, 0xa, 0x6, 0xfffffffe, 0x76, 0x79b6c5aa, 0x2, 0x6, 0xfffffeff, 0x6, 0x4, 0x9, 0x400, 0x1, 0x5, 0x10, 0x7fff, 0x3, 0x2, 0xffffff5a, 0x5, 0x8, 0x2, 0xf86125c6, 0x9, 0x4, 0xfffffff9, 0x6, 0x4, 0x5, 0x4, 0x4, 0x3, 0x3, 0xfffffffc, 0x6, 0x81, 0x7, 0x96, 0x5, 0x5, 0xd847, 0x401, 0x9f2, 0x400, 0xb446, 0x3ff, 0x0, 0x6, 0xc, 0x1, 0x80000001, 0x8001, 0xb8, 0x9, 0x2b90, 0xfff, 0x4, 0x6, 0x6, 0x4, 0x10000000, 0x9ed4, 0x5, 0x9, 0x1, 0x9, 0xffffffff, 0x1, 0x9, 0x4, 0x80000000, 0x7fffffff, 0x3ff, 0x7, 0x0, 0x9b9, 0x3, 0xffffffff, 0x0, 0x3, 0x6, 0xd08, 0xfff, 0x7, 0x9, 0x5, 0xc, 0x7, 0xd1, 0x5b, 0x7fff, 0x1, 0x6, 0x4c, 0x401, 0x7, 0x8e, 0x80, 0x9, 0x8, 0xfffffffe, 0x0, 0x2, 0x400, 0x4, 0x1, 0x2, 0xc1, 0x1, 0x38b1, 0x1, 0x9, 0x3, 0x8, 0x3, 0x5, 0x2, 0xaa6, 0x81, 0x2, 0x60000, 0x6, 0x5, 0x10, 0xfff, 0xc7, 0x1, 0xb, 0x573d3096, 0x7, 0x10, 0x280, 0x3, 0x2, 0x0, 0x2, 0x4, 0x0, 0x4, 0x756acc46, 0x10001, 0x100, 0x4, 0xa, 0x8, 0x2, 0x6e87, 0x72eb, 0xfffffff7, 0x7, 0x1, 0x9, 0x80, 0x2, 0x400, 0x53, 0x10000, 0x2, 0x40, 0x6, 0x8, 0x45, 0x3, 0x8, 0x29b5, 0xffffffff, 0x7, 0xcdde, 0x1, 0x0, 0xfffffff4, 0xfffffff7, 0x8, 0x5, 0x4, 0xfffffffa, 0x80, 0x2, 0xc, 0x6e, 0x5, 0x5, 0x6f, 0xeda, 0xffff, 0x9, 0x8, 0x3, 0x100, 0x8, 0x4, 0x6, 0x1, 0x6, 0x2, 0x400, 0x4, 0xfffff800, 0xb8f, 0x100, 0x2, 0xf61c, 0x2, 0x7, 0x100, 0x7f, 0x800, 0x5, 0x4, 0x1ff, 0x8, 0x4, 0xa, 0x64f3, 0x3, 0x6, 0x2, 0x9, 0x200, 0x10, 0x6, 0x4f24b388, 0x5, 0x1, 0x80000000, 0xfffffffd, 0xb, 0x6, 0x5, 0xd, 0x1, 0x10, 0x10000, 0x7, 0x8, 0x7, 0x2, 0x6, 0x2, 0x101, 0xfffffffe, 0x7, 0x7, 0x4, 0x6, 0x5, 0x7, 0xa, 0x7, 0x7fff, 0x7fffffff, 0x5, 0x2, 0x7fff, 0x4, 0x7, 0x6, 0x9a4a, 0x4, 0x8001, 0x9, 0x1, 0x0, 0x7, 0x3, 0x0, 0x5, 0xa779, 0xd6, 0x8, 0xf, 0x7, 0x101, 0x0, 0x5, 0x2, 0x4, 0x5, 0x9, 0x40, 0x6, 0xb, 0x10000, 0x6, 0xc, 0x5, 0x5, 0x7ff, 0x2, 0xfffffffd, 0xed45, 0x0, 0x80000001, 0xff, 0x8, 0x9, 0x3b, 0x7fffffff, 0x6, 0xfffffffd, 0x0, 0x8, 0xfffffff9, 0x9, 0xe1, 0x4c69, 0x80000001, 0xe8e1, 0x1, 0x7ff, 0x1747, 0x8, 0xd8, 0x1, 0x40, 0x635, 0x10000, 0x8, 0xfffff5f2, 0x80000000, 0x6, 0x4, 0x5, 0xfffffff8, 0x6, 0x6, 0x8, 0x0, 0x5, 0xfffffffd, 0x1, 0x2, 0x202000, 0xe, 0xfffff210, 0x6c09a5d8, 0x0, 0x80, 0x10001, 0x3, 0x8, 0x4, 0x40, 0x1e0e, 0x6, 0xdae, 0xb, 0x8000, 0x1, 0x5, 0x6fded0fa, 0x9, 0x8, 0x0, 0x1, 0x1, 0x80000000, 0xa, 0xd2, 0xb316, 0x98e, 0x8, 0x7, 0x1, 0x200, 0x6bf8, 0x6, 0x200, 0x0, 0xa8, 0x6a, 0x5, 0x8, 0x0, 0xa, 0x7f, 0x7, 0x51b, 0x5, 0x9, 0x6, 0x0, 0x1, 0x0, 0x7, 0x3, 0x7, 0x3, 0x101, 0xf, 0x4e04, 0xffffffff, 0x990, 0x0, 0x8, 0x7, 0xfffffff7, 0x0, 0xe1, 0x7fff, 0xfffffffb, 0x1, 0x1, 0x3, 0x1, 0x200, 0x9, 0x1, 0x7fff, 0xa0000000, 0x3, 0x56, 0x40, 0x9, 0x2, 0x2, 0x8, 0x0, 0x3, 0x0, 0x84b, 0x7, 0xffffff00, 0x5, 0x7, 0xffff, 0x8c5, 0x854, 0x5, 0x370, 0x1a78, 0xb8c00000, 0x3, 0x0, 0x3, 0x5, 0x101, 0x9, 0x10001, 0x480f, 0xfffffff9, 0x9, 0x2, 0x9, 0x5, 0x4, 0x0, 0x1ff, 0x28, 0x5, 0xfff, 0x9, 0x10, 0x3ff, 0xfffffe12, 0x9, 0x1c1, 0x5, 0x2, 0x5, 0xb37, 0xfffffffe, 0x80000000, 0x8, 0xa4, 0x2, 0x9, 0x8, 0x6, 0x100, 0x8000, 0x5, 0x2, 0x8, 0x7, 0x8000, 0x9, 0x2, 0x80000001, 0x7, 0xfffffffe, 0x1, 0x0, 0xedb, 0x7ff, 0x0, 0x10001, 0x10, 0x6, 0x3, 0x531, 0xe, 0x2, 0x8, 0x3, 0x2, 0x5, 0x2, 0x4, 0x6, 0x5, 0x1, 0x9, 0x2, 0x7, 0xaf, 0x7, 0x7fdf3029, 0x0, 0xa, 0x43, 0x8, 0x0, 0x2, 0xe, 0xffffffff, 0x40, 0x8, 0x7fff, 0x0, 0x8001, 0x7, 0x8, 0x80000001, 0x7ff, 0x6, 0x800, 0x7f, 0x4, 0x6, 0x2, 0x0, 0x7, 0x81, 0xf2eb, 0x726, 0x2, 0x2, 0x80, 0x0, 0x0, 0x400, 0x4, 0x5, 0x800, 0x4, 0x80000001, 0x3, 0x5, 0xfffffff7, 0x6, 0xe6, 0x9, 0x10, 0x0, 0xffff9d9e, 0x1, 0x401, 0x6, 0x1, 0x80000000, 0x45bd, 0x5, 0x8, 0x7, 0x5, 0x7f, 0xb7000000, 0x8, 0x8, 0x4, 0xffffffff, 0x3545, 0x1000, 0x9, 0x5, 0xfffffc00, 0x9df, 0xf, 0x39, 0x0, 0x4, 0x10, 0x4ae1, 0xff, 0x9f1, 0x7f, 0xffffffff, 0x5, 0x5, 0x3, 0x20, 0x0, 0xfff, 0x80, 0x10, 0x3, 0x9, 0xffffcd7d, 0x2, 0xfe, 0x80000000, 0xc, 0x81, 0x0, 0x5, 0x6, 0x4, 0x617, 0x8, 0x80000001, 0x48, 0x9, 0x4, 0xfff, 0x7, 0xb, 0xc68, 0x8, 0x2, 0x1, 0x4, 0x800, 0x2, 0x1, 0x540e4170, 0x5, 0x7, 0x4, 0x3, 0xe452, 0x5, 0x4, 0x5, 0x89c6, 0x3, 0x9, 0x9, 0x67, 0x582d, 0x3, 0x3, 0x8, 0x2, 0x5e, 0x401, 0xffffff7f, 0x4f17, 0x9, 0x9, 0x100, 0x38000, 0x4, 0x7fff, 0x400, 0xffffffc0, 0x7, 0x0, 0x7, 0x6, 0x2, 0x1, 0x80000001, 0x0, 0x5, 0x5, 0x1, 0x0, 0x7, 0x2, 0xfff, 0x3, 0x7, 0xfffffff9, 0x5, 0x9, 0x2, 0x2, 0x9, 0x2, 0x12, 0x3, 0x7, 0x6, 0x7, 0x6, 0xd, 0x8, 0x40, 0x5, 0xea9f, 0x8, 0x80000000, 0x0, 0x3, 0x39a, 0x80000000, 0x1, 0x40, 0x3, 0x9, 0x3, 0x5, 0xfffffff7, 0x3, 0x5, 0x8, 0x8f08, 0x7, 0xd2c, 0x400, 0x40, 0x2, 0x1, 0xc6, 0xc6, 0x4, 0x8, 0xfffffffb, 0x50c, 0x3, 0x6, 0x9, 0x0, 0x9, 0x8, 0x900, 0x4, 0x92, 0xdd3f, 0xe, 0xcae, 0x37, 0x4, 0x5, 0x2ae0, 0x471, 0x9, 0x4, 0xa51b, 0x2, 0x3, 0x60, 0xffffff7f, 0x10000, 0x7f, 0x4, 0xef, 0x3ff, 0x6c, 0x81, 0x5, 0x0, 0xffffff80, 0x8, 0xffff7fff, 0x7be, 0x80000000, 0x6, 0x7f800, 0x1, 0x8000, 0x2, 0x3994, 0x6, 0x9, 0x55, 0xffffffff, 0x0, 0x6, 0x7, 0x3d17, 0x3, 0x8, 0x8000, 0x3, 0x4, 0x650a, 0x401, 0x1, 0x80, 0x1, 0x7, 0x1, 0x5, 0x1, 0x1, 0x0, 0x8, 0x8, 0x7, 0xe4, 0x5, 0xaf, 0x8000, 0xabbb, 0x5, 0x2b2, 0x2, 0xd2, 0x20000000, 0x200, 0x6, 0x5, 0xfffffffa, 0x6, 0x4, 0x3, 0x8, 0x81, 0xfffffff7, 0x1, 0x2, 0x3, 0x8, 0x40, 0x4, 0x1, 0x10000, 0x9, 0x7, 0x2, 0x8ec, 0xd, 0x8, 0x3, 0x1, 0x800, 0x0, 0x10000, 0x1, 0x7, 0x8, 0x401, 0x200, 0x101, 0x5, 0xe, 0x5a20e3d4, 0x4, 0x10001, 0x40000000, 0x3, 0x1, 0x0, 0x200, 0x7fff, 0x0, 0xfb, 0x0, 0x4, 0x9, 0x9, 0x5, 0x11a730ea, 0x3, 0x2, 0x8, 0x5, 0x9, 0x2, 0x1, 0x7fff, 0x4, 0x2, 0xf86, 0x5d6c3487, 0x5, 0xfffffffb, 0xc0bb, 0x8000, 0x7, 0x7, 0x100, 0x3, 0x5, 0x9, 0x92, 0xb92a, 0x7, 0x694, 0x10, 0x0, 0x329], 0x3, 0x4}) 4.150909948s ago: executing program 2 (id=3048): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000040)={0x5, 0x3, 0x0, 0x8001, 0x10, "f3f0a0e7c6f3a0153af5e3c9309af36ca76c3d"}) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000c80)="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", 0x223}], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r5) 2.994647547s ago: executing program 3 (id=3058): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b9861f000000000000000000", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.809803399s ago: executing program 2 (id=3060): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, 0x0, 0x5005) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f0000100000000000000000000000030005000000000002000000ffffffff0000fe0000000000080012000000010000000000000000000600000000000000000000000000000000000000000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000"], 0x80}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe5e) timer_delete(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x162341, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) setreuid(0x0, 0x0) fcntl$setlease(r5, 0x400, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 2.640300083s ago: executing program 3 (id=3062): bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000040)={0x5, 0x3, 0x0, 0x8001, 0x10, "f3f0a0e7c6f3a0153af5e3c9309af36ca76c3d"}) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000c80)="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", 0x18a}], 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(0xffffffffffffffff, 0x1) 2.63334135s ago: executing program 4 (id=3063): sched_setattr(0x0, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) unshare(0x6a040601) syz_emit_ethernet(0x1011, 0x0, 0x0) 2.571091703s ago: executing program 4 (id=3064): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="a7", 0x1, 0x2400c040, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffc}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@struct={0x4, 0x1, 0x0, 0x4, 0x0, 0x1, [{0xa, 0x3, 0x6}]}, @int={0x10, 0x0, 0x0, 0x1, 0x5, 0x20, 0x0, 0x19}]}}, 0x0, 0x42}, 0x28) getpgid(0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04040affffffff"], 0xd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) 1.921157787s ago: executing program 5 (id=3067): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x4) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.920908106s ago: executing program 2 (id=3068): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000040)={0x5, 0x3, 0x0, 0x8001, 0x10, "f3f0a0e7c6f3a0153af5e3c9309af36ca76c3d"}) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000c80)="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", 0x223}], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r5) 1.790933008s ago: executing program 5 (id=3069): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) add_key(&(0x7f00000001c0)='user\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) setuid(0xee01) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 1.738389728s ago: executing program 5 (id=3070): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x42, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = add_key$keyring(0x0, &(0x7f00000009c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000840)='asymmetric\x00', 0x0, &(0x7f00000008c0)="5fc2", 0x2, r1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$video(&(0x7f0000000180), 0x3, 0x1) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x9, @pix={0xb, 0x9, 0x32315258, 0x7, 0xe, 0x8, 0x5, 0xa, 0x0, 0x2, 0x0, 0x3}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYRES32=r5], 0x10}}, 0x40011) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="30800000", @ANYRES16=r7, @ANYBLOB="00002dbd7000fbdbdf253500000008000300", @ANYRES32=r8, @ANYBLOB="0c00990005000000770000000500200125000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x44050) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="253ebbde148f8e42b79d9bc5e79f52ca5e4d27af9510855eb3e3bcdb3649b82ecb6fee1106f67fb3aafb2bfab626e7d09764fa0ff322cbd69b71c481894c9edebde10f85dd063fab8713b486c3ee896010a9a058ed7aeb61bdc1e676989212cf81bdd25d3f1f73e072a708e6f51750b800ee2b97db2f8fe1660123d791ade954c840", 0x82}, {&(0x7f0000000740)="9266737525d63cd89d5e3d90c3309518df3a5e5a7d2da8532aca2e94dd432132da37ffffe6136143d204c82214fe815b0cd7ef1fa5fdf26e716b03952d9738d313c035a1b1dcc99e2a11a62d326b5582a5b360fd8c7c1ba8700b8580642d477ae60f3a7c43b4e89c02861c0d0aa31ce4a6ff9e851fd7a198686d7df48cb4f24c37d81b4c0ac8cc0680e0add25411c285c0800c6cf9063d9a711c497560f09fc3df9e", 0xa2}, {&(0x7f0000000a00)="0855768eb5dce7ffe8c71bee4279b84a9e7902f3c29cabf478c24f072a20aed3951d50260bce5c453bb2669358f9c1473438ac8ad741f169ae04a7a21d31c1b0e276f838af83271c1f627a4c57d142d93fa2ff9f28ca40ceff132298ec6530c517695d2f18d47e80fca0274fcf0dfb39c9638fc76b9f12bb40fd294e5c030ed2369c49f735ee44c54d959cd7cea98e06cfe8720fbf9bde229b2de88b5c6003004374be0ed08bf5c7b7b6bd2695db2d1d0576a51f0aad61ccda2b34e7b2012c7c2cda5963ae5675fb00a713fb862c3e82e481", 0xd2}, {&(0x7f0000000b00)="6822946dbd6cdc4963f87910b896ed4d0415429c36fa66d4f09c9b1b03e3c541985c64f6bf1da9c3792e0bfbc1d53ad0669da055cabd6778fd7d127d322bb5dff103e9433673ec0ddf8da965a4889cc58ba3b6c56056781189e3fcaeb2ea26a8300c18234f42f5d50f975d0d1bd7ff54358e181943142d01d1147e8b18bfb1677af3152e2558fa0001cd6ed3f6c9e670bf2e3bddf235ed6f88d6f447a0b6fb0ed5b68d06daa767fa5720afc08d5218287c48b2132d7814b019c4f449ce2e5bc7b6ab17238db40fb8405097ecc500c3c8c0890ab9765c776dc261", 0xda}, {&(0x7f0000000c00)="22a76399cb431b5949249a0b010359dd13045c9b719262f30b6f460c7e5a25800524914334b81c33814afa851252e42853052bfd7c2116c9c943cc6909f56c7f2901f1e231ad7a7049bb9c75a17865ba2df46b6fcac7ba7865d10ac105ab26a431e0c051cbcbe7d0b0cca2f44032fa1935b2d1edfca70627dd738b92ff654bfe0cf619b91757a812982e935e94abc8b532cad47b841ddaa910c20142089e9aa88df448ca967eb8dd23b2e039a31dd302a7758d4e79dbdd49139b74b84c6be8d6ea8b831bb3a6fd2cf9600e1d5b6c1297c7c1ca6b1b", 0xd5}], 0x5, &(0x7f0000000e40)=[{0xf4, 0x84, 0x29, "f7b7bbd0964671c9a76a4107dddfeed3ca799ed90ce1fb1a8f39eb64288d088e881ddb0e49dd9d88789034043b7ce11ac8e443a919319544cb66e9a57fa36e57b18f8b41677254deb5f66e783a13d608824db80b50f3898be23a563813a00a1f174efe5425a3cf694d6a2a8dfa8de7a9e9643796df96ca93a6ef0ada38a2cd3ca5f2ee5f18d3373d32858007e037354dcc73facb37f8e07625b3fb7d0f1af4816a65720427d7830c0f1de1ec59fb2efbb38ea3796c1f2ffab0aeac7a746330df7addf852d33b304d045f70e35e5ae66aeb4975449bb05d4b2150ffb786669138bd12513620"}, {0x18, 0xff, 0x78c, "eaf11a091efcbe70f2d683"}, {0x78, 0x104, 0x200, "6c5fe831ff3bcbe8d1675bf055c02af36e58d20401f0d298d90eae6aed8602d2d4e8bb446c7a53c97dd2b392d01947301311326f20a28baaa37051440558b801cdfbec216adf08a0f1803648278324ca40f1bfed2c0f02c7c391432078a83a1a00d42a14d88dab76c2e805f6"}, {0xdc, 0xfe, 0x3, "ed84020f37d4135f9e98fe5da524529163b38ba599236bed69fff445c6bc0b325b4e0701a90c961598332eb5d091e179788f47e3de3c2cdc7524d75e16e1c1a85f6adca1e6e32df89af343ca5c9541db74a89150a3b026b151bcfa41e690f08f453b85b2897462393ee5efc4c1b37a66adb11b678b682e7e7a8c9f82386a7e9de3be51c792ec77f45ee7514563851797b255fdb4b537f567e9dc5e7ec90a0b78c45767a080bcd2aee24a036e0d925a1952c4708e56f09b62419974b3d89b2d20a467e109fa7e2c24af8c0f8a0b"}, {0xe4, 0x116, 0x1e, "26b09ee66349deb3698a02aa2fc58a67cae80ea8beabd359640d63a70962b232b49cf55360707e867527c84fd3ae220e09ecc68dc62e6234d62a81b2a62bc4ef29da65d0fa030787d22cc6b86f2ced3b210a45394f48ee6db1861ba2b32bae6396885459a0fa2ee3a31d4170c5e61640adbbb6f5e07568976a441443b41fd3eb88535b9d93d37361f4b07288d9fdf2244c87313ac707164340b894cc7df6cc9eb0ea179c45bf8a848f9d7562ba64e20c1e050ba168642f4c8f39c52ac3ccf1d25739258193d31bf623385b0e9ba1e1b15f21fa2e26562cc8"}], 0x344}}, {{&(0x7f0000000900)=@in={0x2, 0x4e20, @multicast2}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000d00)="361fa67cc11569953e809ec9b5373ea12651fbd0016a6532ee52990477bd16ecdedc414418e01fa40f810642539e9ede5cf95b7d34c67a3a63c21d5628985a5c36e14b634dcf2d857e1ac707f24097cda53ad98242cec49ab48f36de0a33bbedd8f87d9fc796a4f8cacce506422b8bac9c6cb7785d58fc3de9cdd67d6fc096a8cc86efccc8043c0f0c4a3c5f963b5170750ed6caf0ab59ed09eba18dae62ec9a797be95614bd6ce9e6f980f0243627ec9a4995f3c666f219914dee45fa62644a4262a1", 0xc3}, {&(0x7f00000011c0)="00cc66bba87dbe3719cb727cb18f97da07e47d1bed6211c49928301fa958bb66e5152196bac26e47c38873db0b354df39daba0088a1fb69b684e759862694b3376aff742d76375a1bd442ac288d4fb3ca1081877ea1d6798f69068b93d72c56052b77751d8b09b2a1214a1931336ac02bd7e22d88c11bb17f6067eddb52e2b16117ea8705477707b5dcaeb8cd2e7", 0x8e}, {&(0x7f0000001280)="a23956b6f52797a878d6a0b905a6f25bd424c0ee478537a62bd034df5e83a0bd5496b12f2fe5f69416af479b7c02c523e54c928c8150c925a30b738f527ffab9d80560aaaddd1db17938c5e284ecffb545b396b1d0efe338171b2c22141b03e7464eb6f384f7ac08", 0x68}, {&(0x7f0000001300)="b8c2e00288fc5fca9c36346714eb66e416cd12f6248821c05ba3aca2da360de34197a5d788c29b72fc62caa92fde3d74d3c82ba6ee3871bf298d36d03c73fafcb40827723f24dddacf9236f9dc20e3421658", 0x52}, {&(0x7f0000001380)="60c7948896edf9305bb98d7dedb7085aa614bae04f4cb3282f55937c096497b78bddf8e5abcc924d4a6faf2fb5185d61df7851ffe23e83db05f485efabbeeb4992a2927e4984993e93ea910993fc2f25a622d7206b2d6639cfcad271ba700c244927bec466049b2484071178f83fa244ccd69cf383ce84d4f10f0ac4d0437cff86a869e8b51aab265c8557d6dd21ac8037f3cc679dee75eb56b312472452b19969d5ea75bc04aad1101099cbe9aac0fbb21234bd35af8258a5c06aca161bdd4071ca35470cf7cb10e07155b1ded14e0631d25d1ff2dffe125045e3ad3243ffc491ad3cff", 0xe4}, {&(0x7f0000001480)="43a85a26cbe786978fd531f1af4ec35dbcd6bd90ef7b6f198cd172cb20c9f49a441e8384a5a8e736b64b1b6f1147ce07c5a3d76b1c14c7beecd7c2011df114e5db594ffeeb386f49acd92297ba54f2901bc1267be57da9b50802e70370b57da6d2519e57ee3bde349a41d579f5f4eb42de6956736605d09d383d1e0df4870423f6a2880745361bc2c39b9bff6f609116b0c5181b4824fbfd2067a563aeae9ac48a52cec538efe655faa8f6fde15930777612e9573e9c6c", 0xb7}, {&(0x7f0000001540)="8ea9c28e3497edc2f76d18ee16ae85be29c431faf4aad6a144eff74f8a671492634264a32c449807ec5ce7cddb3ec28c0457b798d61d6f1c5301a730d98a270b917d0bfd0f90774b1627679a31f84478285f0cef8efdcf5ed57c3ae7eb6edede8c2476a7faccb16e297552d07ef716eb9c0f0255310885aa039951b79f0bbfd70b7712bee9a93ed2861903c2eb4f80884abe64e89a43c418cd23c717de5e821e994c25f1242f0315bddb840cefe8dae6dcb695a6af5ac7b593", 0xb9}, {&(0x7f00000004c0)="25c39562d55e10e3ee1b9d97f6d3611d0e2b444cf8fe5d403a2c534b350511a9cdd24ea094", 0x25}, {&(0x7f0000000800)}, {&(0x7f0000003280)="207548d160825ddc99b8a445ed3276ca7fd7be70f7da2fe79d3a754666f26f0b60a4f3eb3bcb91307191ae14eff46d66b794682888fa3bf8ad7cee2a3696192eddb2bde837f2ce34eb2f57c532270036a812b12c2a49dbc46bf6ec0cd244fd79f5", 0x61}], 0xa, &(0x7f0000001700)=[{0x80, 0x10b, 0x6, "fae72b5d5d4cba4bca621a629e1c109a5f0edff8a166e5a7e720f0124a5a252a527271d9f48c6daebe69e121e41bfa2041e8f700b4782306a53d92352b69f1bcfcfa84b5344b46c2b0e12ec4496929a0ddec1e3f980b4eaf6e34b310499ae94fe105c0a6ad56f4267bba4db1fd7f8a41f378"}, {0xec, 0x103, 0xfffffe00, "ebb3bf750313e829dcfb02074e15ef72261685a24a213d81f37aab71384fd59dcb0ea0879b5ac57a168b5fc39d295ac39404c869d6c6f94e2c7571bd16306a31a8d0d861d40af8bcd803ce4e7f86351912ea0fefbfd99e434bbed794adeb4fbb4d46df47f9fbe2e4351236d94ede0560f7b153046d4ba0127f4484bb68d8463d49ba0f624cb2c64a522b1350c399864f915fbcde98754c6369d1888bde949910bb700053cff0f0f04dbc7a843377ed866ac35a5fcdc0c167ab714a6d38d97cf2178f5d3cf9a8e551ad2db0cf0f41287981334710ab1dce7d3f06280a8dd1"}, {0x9c, 0x108, 0x200, "4cc0d886f095b500502e36f87dd5ec3d67565cb452b092c79e7ce48bf1fca31bb31a28e3a58f882985458e06d6d4795d834cc5b2fd8ab5ea2f53c511391bdf769944bd5d40facccf235d622067b463f1713c7a33d0091d5cba5c1d86ec1e12c1d7461b2713584d4668cf35352806e71d50c64cdcc77046653645f4d0836c159a5f6b155826429aae66b88fcb5c"}], 0x208}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000001940)="94cc38d7c2312bc3dd427b4267e1be31ae3e38ad551bb45538ed92dc829ca5fed8897bbdf7175046c0fe469e617e057a09ca2f2ae94eb310b727e2bf82a7a9dbf8a91587a06b6c10faeb0b4270dc415a45abc1ef9184d166d871c1ab6f4788c72a3b9b73695ea56ef8d81a47a1218ba8aae2d257354e3562015f27dedd7d", 0x7e}, {&(0x7f0000000880)="ac1ae728712922c2662b93551e893a78af72f27abf9e305daef7a1e0ade94692d5618b82ad3b7ada4d98845a8b47962fdc9d68", 0x33}, {&(0x7f00000019c0)="ecd15fe88a142aa98d57478fdbd290c90bb9148e301d3f2339f9bd12fc96a7f4967a1d48fa2072a82ec006fe0c0cbb6ce21d5e0501e9249edc3c4fee86cc088067325277e7c10b98baebf5f2503a3502b0544573efa0d54a18d857603d9f2b07f2bd2c6ef0b424f8ef9bdfe60985", 0x6e}, {&(0x7f0000001a40)="4ef4c695aad11c2b34f19b65cde6d72ae5034a0575f52cf0c9c51876093147aef29b5cf5f55cf688e159a1c7daa5d8b7b00c6b50c62b4419a083f57bfff4d1832d23c3edbfc00b224e7accfb3047f61aba5b41ebd02dff2041ba9d4258881e2553f1ace35861b0d6f9ba16dd42873fe9e42a129dddc35662b76ac7024fb6b84616af5c2552afbd2a6f0b5795d392595949578d9fad651919cf27030da564a4e86cc81c75d6d4022f7eecfc902b00c6c2888e00cb98739bd88caa4fda9a128c", 0xbf}], 0x4, &(0x7f0000001b00)=[{0x80, 0x88, 0x7c8ea03c, "b9f1d8628436ea51d9c705d8b51fce92a04e31ed8006c8f6fbe5c2c1739898221708a86561dd4f7de9e275bdf7fb488ededb3e2fc7fb402003f32d2c7254ec25e855dbe3e5711ef9f2a438019c13dba8ae5119e465e10a84170b5fc6dc5fc0120b57dd6ea2e4da8a54193063f80669b6fa2b"}, {0x58, 0x6, 0x5, "96b3490a70bfff468a64bee3abca38c313818eb71901faa26ad6a708eb71e587900b98d54c35b02e8b023da9800e42b749af9739d5ef6c83791f1e9c0e785a5887201d90b7d85acc6dda"}, {0x60, 0x114, 0x3, "31639f2ec0390dc3fba17e385cdac6a54793a6f9f335e036dc99d4250154238929b42156ea21ad1487ff9dca993943e92e7f19a11197812e6235db11d5cdcc24c0527632edcccd1a2d7730a7e2240c9ff1"}, {0x4c, 0x104, 0xb74, "a35237a639c5a48416493afbde0c65eb91c3ac27d65fa27029002602003ae8de370984ed57c508844d5a48e02b04091c7a0dfa2539dbf0fd9cf679095b"}, {0xc0, 0x220, 0x853, "e2b556cf8efff826e2681c03f72a75f8d23fe3b501867398ff3655aa18a68ff2d5472f05aaeaab73ba6306709796c671cd03e7efb8d8ba8b71a92ba58a818a1e0221d51c5d21674846403f33afbd39bf1f03f35a4c58a34ab47bc5198c78fdc6613105af08ea93bbad724f705cbf5a4f7e98e4d6c07a001996f477ff5ba40cd9f0f37717ac413e08b33b51ff1a4184647f4e01ec80527f59998ba56b51cec1f039b9caaea42f26157c4df1249707e69c413085"}, {0x1c, 0x3a, 0x5, "fc59791ef20400000000000000"}, {0x5c, 0x11, 0x6, "b52a928c3251f1fb5c4fdcfcf2d527224db9e123d7ae1a5c2b12b9e2b9f397db3ccacf329502261e00e3a85a9269e69558724ecbd78ed6012198e4fe374a78ec006b550aedac5beddb1a3b1b369f8297"}], 0x2bc}}, {{&(0x7f0000001e00)=@ieee802154={0x24, @short={0x2, 0xffff}}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000001e80)="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", 0x1000}], 0x1, &(0x7f0000002ec0)=[{0x68, 0x108, 0x2202f731, "2567079124475cf75dc584aefd2183a95da3f4d47b5b2e9298562de67a2f5439e6e79a6e592de210d76bf7c453e125739c4cd8db8364778234bace22593f26cdc43963ee5e98b3d6bcf1103132cc757cde23f3130eb2ad49cb"}, {0x5c, 0x10b, 0x3, "fe87dee83210c403894c3210d502a565520d576def14392ed2e472334e94f9892e57f97a8f73f6eb286bb3d03d7b3e0813c05a4759c99c156fdbaab042e927b5e31249c42dd191bd1a3634bff44d"}, {0xf4, 0x117, 0xfffffffa, "b92313797a75b4777e81a231e2ef1719aa996430423d5632e7979a5898f5bc5539e6e228d62d119d122fbab24527960964f5a2de94c8a7bac072fa7acc6b4a9d940426c98644cdecfceeeeac4041788beeb2901eee3920f6b11ad2dc12c4170a83bd12e93551653bf131cad2147b191bb18f382945163bee3cda4fc608f3c6a4d49e3827490ac49b8f2457c0c249bc157dadcbafba40fd1d1cbfe88f9b96c98f1fc1d63cad7cd78a71191af9857512152dce9f0f7762b051ed6733a40f8ce80bcb286e102ef2ba9040d64d923c57f7bd39b0b2fcceb12c60f3ffbfba401d359a45575360423b65"}, {0xe0, 0x108, 0x7fff, "dc4dca4d176eb17bbdc3ae59384b7442b3a490dbf27abfc3cbd8e07c9c6af861aeef598d16dfe831452275027271741f609ae1cd1c93817c056f1d1f32cd9b8db888031e5950e4a1de11a598b4f7d800341034e731e1c7917c2110f211d0003bfac9c316a7fca9c6bb5a1810da150f41017dd30bef41142d4213ffb8cfb2b3129acf657a8e6a04e864a0434e12b0139f61418df21ba4821775592ad8feccf7f5992c94f683a5395004fe4786dcf68e76e44f972cbb11ec161e9cc15c7af90d1a76bded5af06d44bf67f63d5ddce0a5264e1a3f"}, {0xa8, 0x10d, 0x2, "b5b472996a17da5c35bbe46ccbf00b6b86c1c3f81d2e7ccd4d1b134571736e32fe6959f71903834487f9d4514ccba82a01565a239bc9d4f556e48b82c637a56a5c4a455909e3e84ae8aed80407b2610f9e46f6a77987e4105978a43c0e9e6e2641b29b9ea3f58d77dbdb46a1848cfadd7ddd76e03de631a21411726fcfbfcee8b7cd4e86356ac8d8934829ab44f8ac35e379b66f7d3a95299fdba8aa"}], 0x340}}], 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003300)={0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r9, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x40) 1.73316777s ago: executing program 4 (id=3071): r0 = syz_open_procfs(0x0, &(0x7f00000190c0)='syscall\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x4e24, @local}, {0x2, 0x4e24, @rand_addr=0x6}, 0x1d7, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd1, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20004044}, 0x24040804) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000100)={0x1, r2, 0x2eb, 0x6ee, 0xfffffffb, 0x2, 0x4}) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 1.641084476s ago: executing program 4 (id=3072): sched_setattr(0x0, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) unshare(0x6a040000) (fail_nth: 9) syz_emit_ethernet(0x1011, 0x0, 0x0) 1.430018636s ago: executing program 4 (id=3073): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1200000007000000082000002200000000000000c8c6e9055456e9e4d85ec525509b7e630f6fdada0ccc9d91bf646af5ac86ea0bd4da207d0e870c7bc9ebae6f1efc528aad667167fba5d5", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0xc) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000080)=""/55, 0x0, 0xeeee8000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000004c0)={0x1, 0x0, [{0x91fbf00640ea90b6, 0xe3, &(0x7f00000005c0)=""/227}]}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x10, 0x1, 0x25dffbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xc, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x12}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000002c0)=0x4000000) 866.390568ms ago: executing program 3 (id=3074): r0 = socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 778.275406ms ago: executing program 5 (id=3075): r0 = socket(0x2, 0x3, 0x100000001) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0) setsockopt(r0, 0xff, 0x1, 0x0, 0x26) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x31, 0x3, 0x3, @empty, @loopback, 0x40, 0x80, 0x9, 0xfffffff1}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000400008500000013000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESDEC=r0, @ANYRESOCT=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x54, 0x0, &(0x7f00000002c0)="0e08000000000000b89e08dc86dd", 0x0, 0xfe2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 775.567831ms ago: executing program 5 (id=3076): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) sched_setattr(0x0, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x242, 0x0) clock_adjtime(0xffffffd3, &(0x7f00000004c0)={0xa, 0x6, 0x9c45c323, 0x9, 0x7, 0xb, 0xfffffffffffffffc, 0x8, 0x9657, 0x3, 0x7fffffff, 0x401, 0x1e, 0x9, 0x80000000000000, 0xcc0, 0x10048, 0x3, 0x94d6, 0xd, 0x2, 0x10000000010000c, 0x6, 0xfffffffffffffffa, 0x8, 0x2000000000000}) sched_setattr(r1, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x7f, 0x401, 0x8, 0x240000000, 0x2, 0x40, 0x78a}, 0x0) unshare(0x6a040000) syz_emit_ethernet(0x1011, 0x0, 0x0) unshare(0x20020080) 642.548632ms ago: executing program 3 (id=3077): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x4) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 642.177273ms ago: executing program 4 (id=3078): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000600)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001600)={0xcb5, [{}, {}, {r4}, {}, {}, {}, {}, {0x0, r3}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x6, "ac355867251af2"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000002600)={r3, r5, "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", "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"}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x2a) syz_io_uring_setup(0x893, &(0x7f0000000140)={0x0, 0x2436, 0x2000, 0xfffffffb, 0xb6}, 0x0, &(0x7f0000000280)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r7, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r8, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) pipe2(0x0, 0x80000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r10 = syz_io_uring_setup(0x893, &(0x7f0000000300)={0x0, 0x17da, 0x1000, 0x3, 0x10d}, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x18, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r10, 0x75fa, 0xe475, 0x0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000500)={0xffffffffffffffff, 0x4, {0x0, 0x0, 0x0, 0x85, 0xf, 0x0, 0x6, 0x11, 0x1, "aaaa729cede1e2ee3b92211faea601e77ca0c46a9efcae0fa8cc502b9fd5deb61b56dd9181dd27a295fa1a87987682d87022141de9bce5d719f14adac54fd93c", "09536824da819bdff500b299cb6c1df0a0bf79c2772e6b6a3eebdaac86676d35b91ddfd6ff80cac20a7325a245db667b68c4e6ec66dc22f3ae8b27ed74cdfdb9", "6619aeb29161231ebdc45b998bfe532a2fda3bdb41d429ec8735c7a2fa081751", [0x1, 0x5]}}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4093260010004a0400"/20, @ANYRES32=r6, @ANYBLOB="018804000000000020001280080001007369740014000280080003007f00000106000f0001000000"], 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000400), 0x0, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r6, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 431.154956ms ago: executing program 5 (id=3079): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x20c89}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x36}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket(0x2c, 0xa, 0x9) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb483767a2c3497de, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0x5c, &(0x7f00000003c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x5d, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000300)={0x1, 0x0, [{0x7, 0x0, 0x2, 0x1, 0x2, 0x4, 0x80008000}]}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000340)={0x1, 0x0, [{0x3b, 0x0, 0x1a}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='syscall\x00') read$FUSE(r8, &(0x7f0000005380)={0x2020}, 0x2020) ioctl$SNAPSHOT_CREATE_IMAGE(r8, 0x40043311, &(0x7f0000000040)) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0) 430.814898ms ago: executing program 3 (id=3080): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000200)=r1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x20a, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 210.920258ms ago: executing program 2 (id=3081): r0 = getpid() add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000)=0x6, 0x4ffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x6}, 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000380)={r1, 0x58, &(0x7f0000000140)}, 0x10) r2 = syz_pidfd_open(r0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=@updpolicy={0xc0, 0x13, 0xcb23c9c9931e99e9, 0x70bd2c, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xc}, 0x0, 0x0, 0x0, 0x1}, [@offload={0xc, 0x1c, {0x0, 0x1}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x81}, 0x40000) ioctl$BTRFS_IOC_ADD_DEV(r2, 0xff01, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}]}}}]}, 0x48}, 0x9}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00"], 0x48}}, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x0, 0x26, 0x0, 0x1, 0x43}, 0x28) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0}, 0x28) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x34}, @l2cap_cid_signaling={{0x30}, [@l2cap_conf_req={{0x4, 0x2, 0x2c}, {0xfffe, 0x5, [@l2cap_conf_rfc={0x4, 0x9, {0x0, 0x80, 0x4, 0x0, 0x9, 0x5}}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x96, 0x9, 0xe20, 0x6, 0x6}}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x2, 0x8, 0x1, 0x6, 0x7}}]}}]}}, 0x39) 69.637341ms ago: executing program 2 (id=3082): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="a7", 0x1, 0x2400c040, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffc}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@struct={0x4, 0x1, 0x0, 0x4, 0x0, 0x1, [{0xa, 0x3, 0x6}]}, @int={0x10, 0x0, 0x0, 0x1, 0x5, 0x20, 0x0, 0x19}]}}, 0x0, 0x42}, 0x28) getpgid(0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04040affffffff"], 0xd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) 0s ago: executing program 3 (id=3083): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002880)={0x1f, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000003000080000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7cda2fc72ec29675a091f5387b5f3bfbb7e951bceaac2081a00040000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000000604000002000000850000006d0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) read$FUSE(r2, &(0x7f0000002a40)={0x2020}, 0xfffffdd8) close(r2) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405668, &(0x7f0000000080)={0x0, 0x0, 0x2, "bc3e098e0000f403040000000000000000000000000000ffffffffffffffec00"}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x9, 0x3, 0x1}) eventfd2(0x0, 0x0) kernel console output (not intermixed with test programs): ip=0xf7f17f6c code=0x0 [ 556.112010][T14507] posix_timers_cache 38KB 64KB [ 556.114201][T14507] taskstats 76KB 143KB [ 556.116199][T14507] mem_cgroup_per_node 136KB 185KB [ 556.118198][T14507] mem_cgroup 152KB 208KB [ 556.120161][T14507] proc_dir_entry 763KB 796KB [ 556.122267][T14507] pde_opener 7KB 15KB [ 556.124276][T14507] seq_file 32KB 70KB [ 556.126220][T14507] sigqueue 15KB 31KB [ 556.128176][T14507] shmem_inode_cache 7974KB 8173KB [ 556.130157][T14507] kernfs_iattrs_cache 52KB 58KB [ 556.132328][T14507] kernfs_node_cache 34514KB 34608KB [ 556.134315][T14507] mnt_cache 79KB 110KB [ 556.136356][T14507] bfilp 11KB 15KB [ 556.138346][T14507] filp 505KB 685KB [ 556.140273][T14507] names_cache 425KB 504KB [ 556.142324][T14507] net_namespace 114KB 229KB [ 556.144328][T14507] ima_iint_cache 38KB 55KB [ 556.146409][T14507] lsm_inode_cache 1533KB 1929KB [ 556.148518][T14507] lsm_file_cache 156KB 212KB [ 556.150534][T14507] key_jar 28KB 70KB [ 556.153444][T14507] uts_namespace 82KB 123KB [ 556.155537][T14507] nsproxy 11KB 31KB [ 556.157640][T14507] vm_area_struct 1269KB 1343KB [ 556.159609][T14507] fs_cache 41KB 56KB [ 556.162188][T14507] files_cache 133KB 239KB [ 556.164391][T14507] signal_cache 904KB 2064KB [ 556.166420][T14507] sighand_cache 1151KB 2224KB [ 556.168470][T14507] task_struct 4998KB 5126KB [ 556.170475][T14507] cred 159KB 360KB [ 556.172669][T14507] anon_vma_chain 375KB 413KB [ 556.174693][T14507] anon_vma 386KB 494KB [ 556.176643][T14507] pid 144KB 335KB [ 556.178634][T14507] Acpi-Operand 195KB 316KB [ 556.180735][T14507] Acpi-ParseExt 21KB 35KB [ 556.182715][T14507] Acpi-Parse 12KB 23KB [ 556.184783][T14507] Acpi-State 9KB 27KB [ 556.186858][T14507] Acpi-Namespace 31KB 48KB [ 556.189100][T14507] shared_policy_node 10KB 12KB [ 556.191222][T14507] numa_policy 9KB 15KB [ 556.193207][T14507] perf_event 28KB 62KB [ 556.195190][T14507] trace_event_file 540KB 540KB [ 556.197190][T14507] ftrace_event_field 1020KB 1023KB [ 556.199215][T14507] pool_workqueue 2121KB 2144KB [ 556.201270][T14507] task_group 90KB 123KB [ 556.203288][T14507] maple_node 1325KB 1544KB [ 556.205447][T14507] mm_struct 382KB 520KB [ 556.207453][T14507] vmap_area 802KB 1184KB [ 556.209708][T14507] debug_objects_cache 2805KB 8040KB [ 556.211921][T14507] page->ptl 165KB 192KB [ 556.214018][T14507] kmalloc-cg-8k 2096KB 2208KB [ 556.216226][T14507] kmalloc-cg-4k 17864KB 18144KB [ 556.218238][T14507] kmalloc-cg-2k 11768KB 11808KB [ 556.220215][T14507] kmalloc-cg-1k 3194KB 3296KB [ 556.222174][T14507] kmalloc-cg-512 2134KB 2144KB [ 556.224194][T14507] kmalloc-cg-256 501KB 520KB [ 556.226272][T14507] kmalloc-cg-128 366KB 368KB [ 556.228290][T14507] kmalloc-cg-64 64KB 84KB [ 556.230289][T14507] kmalloc-cg-32 63KB 172KB [ 556.232358][T14507] kmalloc-cg-16 11KB 32KB [ 556.234932][T14507] kmalloc-cg-8 25KB 48KB [ 556.236928][T14507] kmalloc-cg-192 137KB 144KB [ 556.238861][T14507] kmalloc-cg-96 80KB 84KB [ 556.242082][T14507] kmalloc-8k 6576KB 6688KB [ 556.244514][T14507] kmalloc-4k 24432KB 24832KB [ 556.246475][T14507] kmalloc-2k 14600KB 14976KB [ 556.248473][T14507] kmalloc-1k 8044KB 8128KB [ 556.250489][T14507] kmalloc-512 11614KB 11696KB [ 556.252617][T14507] kmalloc-256 4719KB 4784KB [ 556.254785][T14507] kmalloc-128 1501KB 1608KB [ 556.257104][T14507] kmalloc-64 3246KB 3432KB [ 556.259231][T14507] kmalloc-32 1984KB 2156KB [ 556.261384][T14507] kmalloc-16 447KB 496KB [ 556.263299][T14507] kmalloc-8 1155KB 1192KB [ 556.265201][T14507] kmalloc-192 1774KB 1840KB [ 556.267164][T14507] kmalloc-96 1552KB 1736KB [ 556.269212][T14507] kmem_cache_node 213KB 220KB [ 556.296335][T14507] kmem_cache 176KB 218KB [ 556.298623][T14507] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz2,task=syz.2.2433,pid=14507,uid=0 [ 556.303818][T14507] Out of memory (oom_kill_allocating_task): Killed process 14497 (syz.2.2433) total-vm:108536kB, anon-rss:4412kB, file-rss:27348kB, shmem-rss:11464kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 556.828263][ T40] audit: type=1326 audit(1774522777.893:4076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14549 comm="syz.4.2446" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f54f6c code=0x0 [ 556.893357][ T46] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.896593][ T46] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.899617][ T46] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.904796][ T46] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.271023][ T63] Bluetooth: hci3: command tx timeout [ 557.383450][T14566] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2450'. [ 557.751633][ T63] Bluetooth: hci3: connection err: -111 [ 557.781016][T14594] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2462'. [ 557.967063][T14602] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 557.969724][T14602] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 557.979055][T14602] vhci_hcd vhci_hcd.0: Device attached [ 558.260876][ T39] usb 48-1: SetAddress Request (10) to port 0 [ 558.263775][ T39] usb 48-1: new SuperSpeed USB device number 10 using vhci_hcd [ 558.331408][T14622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2473'. [ 558.405032][T14606] vhci_hcd: connection reset by peer [ 558.408417][ T12] vhci_hcd vhci_hcd.5: stop threads [ 558.414605][ T12] vhci_hcd vhci_hcd.5: release socket [ 558.420813][ T12] vhci_hcd vhci_hcd.5: disconnect device [ 558.760920][ T1023] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 558.920831][ T1023] usb 8-1: Using ep0 maxpacket: 8 [ 558.929442][ T1023] usb 8-1: config index 0 descriptor too short (expected 9, got 0) [ 558.932836][ T1023] usb 8-1: can't read configurations, error -22 [ 559.130801][ T1023] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 559.160554][T14631] bridge1: entered promiscuous mode [ 559.186486][T14633] syzkaller0: entered promiscuous mode [ 559.188567][T14633] syzkaller0: entered allmulticast mode [ 559.208506][T14635] netlink: 'syz.2.2478': attribute type 1 has an invalid length. [ 559.211429][T14635] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2478'. [ 559.290739][ T1023] usb 8-1: Using ep0 maxpacket: 8 [ 559.295817][ T1023] usb 8-1: config index 0 descriptor too short (expected 9, got 0) [ 559.299159][ T1023] usb 8-1: can't read configurations, error -22 [ 559.302380][ T1023] usb usb8-port1: attempt power cycle [ 559.358736][T14638] syzkaller0: entered promiscuous mode [ 559.361136][T14638] syzkaller0: entered allmulticast mode [ 559.472219][T14640] FAULT_INJECTION: forcing a failure. [ 559.472219][T14640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.477764][T14640] CPU: 1 UID: 0 PID: 14640 Comm: syz.2.2480 Tainted: G L syzkaller #0 PREEMPT(full) [ 559.477791][T14640] Tainted: [L]=SOFTLOCKUP [ 559.477796][T14640] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 559.477806][T14640] Call Trace: [ 559.477813][T14640] [ 559.477819][T14640] dump_stack_lvl+0x100/0x190 [ 559.477850][T14640] should_fail_ex.cold+0x5/0xa [ 559.477868][T14640] _copy_to_user+0x32/0xd0 [ 559.477890][T14640] simple_read_from_buffer+0xcb/0x170 [ 559.477917][T14640] proc_fail_nth_read+0x1af/0x230 [ 559.477938][T14640] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 559.477956][T14640] ? rw_verify_area+0xce/0x6d0 [ 559.477979][T14640] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 559.477998][T14640] vfs_read+0x1e4/0xb30 [ 559.478016][T14640] ? __pfx_vfs_read+0x10/0x10 [ 559.478030][T14640] ? find_held_lock+0x2b/0x80 [ 559.478042][T14640] ? __fget_files+0x215/0x3d0 [ 559.478062][T14640] ? __fget_files+0x21f/0x3d0 [ 559.478084][T14640] ksys_read+0x12a/0x250 [ 559.478099][T14640] ? __pfx_ksys_read+0x10/0x10 [ 559.478120][T14640] do_int80_emulation+0x141/0x6b0 [ 559.478136][T14640] asm_int80_emulation+0x1a/0x20 [ 559.478152][T14640] RIP: 0023:0xf7115cab [ 559.478166][T14640] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 559.478180][T14640] RSP: 002b:00000000f53cd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 559.478196][T14640] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53cd5d0 [ 559.478205][T14640] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 559.478214][T14640] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 559.478220][T14640] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 559.478228][T14640] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 559.478249][T14640] [ 559.659260][ T1023] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 559.681646][ T1023] usb 8-1: Using ep0 maxpacket: 8 [ 559.687868][ T1023] usb 8-1: config index 0 descriptor too short (expected 9, got 0) [ 559.690486][ T1023] usb 8-1: can't read configurations, error -22 [ 559.830718][ T1023] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 559.861476][ T1023] usb 8-1: Using ep0 maxpacket: 8 [ 559.865120][ T1023] usb 8-1: config index 0 descriptor too short (expected 9, got 0) [ 559.867932][ T1023] usb 8-1: can't read configurations, error -22 [ 559.870099][ T1023] usb usb8-port1: unable to enumerate USB device [ 559.923327][T14665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2485'. [ 559.940857][ T50] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 559.945193][T14667] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2487'. [ 560.103111][ T50] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.107926][ T50] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.112054][ T50] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 560.117424][ T50] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 560.121215][ T50] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.126906][ T50] usb 10-1: config 0 descriptor?? [ 560.151529][ T40] audit: type=1326 audit(1774522781.223:4077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14670 comm="syz.4.2489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 560.161453][ T40] audit: type=1326 audit(1774522781.223:4078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14670 comm="syz.4.2489" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 560.169573][ T40] audit: type=1326 audit(1774522781.223:4079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14670 comm="syz.4.2489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 560.177222][ T40] audit: type=1326 audit(1774522781.223:4080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14670 comm="syz.4.2489" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 560.185151][ T40] audit: type=1326 audit(1774522781.223:4081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14670 comm="syz.4.2489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 560.192773][ T40] audit: type=1326 audit(1774522781.223:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14670 comm="syz.4.2489" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 560.199414][ T40] audit: type=1326 audit(1774522781.233:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14670 comm="syz.4.2489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 560.207143][ T40] audit: type=1326 audit(1774522781.233:4084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14670 comm="syz.4.2489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 560.246816][T14673] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2489'. [ 560.547322][ T50] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 560.804599][T14683] overlay: Unknown parameter 'dont_measure' [ 560.805379][T14684] overlay: Unknown parameter 'dont_measure' [ 560.957816][T14692] netlink: 'syz.4.2495': attribute type 5 has an invalid length. [ 561.852435][T14707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2499'. [ 562.069880][T14711] lo speed is unknown, defaulting to 1000 [ 562.627765][ T6042] usb 10-1: USB disconnect, device number 13 [ 562.890819][ T40] kauditd_printk_skb: 43 callbacks suppressed [ 562.890832][ T40] audit: type=1326 audit(1774522783.943:4128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14717 comm="syz.5.2502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17f6c code=0x7ffc0000 [ 562.908876][ T40] audit: type=1326 audit(1774522783.943:4129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14717 comm="syz.5.2502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17f6c code=0x7ffc0000 [ 562.925833][ T40] audit: type=1326 audit(1774522783.943:4130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14717 comm="syz.5.2502" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f17f6c code=0x7ffc0000 [ 562.945084][ T40] audit: type=1326 audit(1774522783.943:4131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14717 comm="syz.5.2502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17f6c code=0x7ffc0000 [ 562.958311][ T40] audit: type=1326 audit(1774522783.943:4132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14717 comm="syz.5.2502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17f6c code=0x7ffc0000 [ 562.966727][ T40] audit: type=1326 audit(1774522783.943:4133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14717 comm="syz.5.2502" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f17f6c code=0x7ffc0000 [ 563.042962][ T40] audit: type=1326 audit(1774522783.943:4134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14717 comm="syz.5.2502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17f6c code=0x7ffc0000 [ 563.050490][ T40] audit: type=1326 audit(1774522783.943:4135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14717 comm="syz.5.2502" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f17f6c code=0x7ffc0000 [ 563.058083][ T40] audit: type=1326 audit(1774522783.953:4136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14717 comm="syz.5.2502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17f6c code=0x7ffc0000 [ 563.099594][T14735] [U] V3Fپ"S/4:XTZWTLW= [ 563.103938][T14735] [U] J"E:" [ 563.118969][ T40] audit: type=1326 audit(1774522783.953:4137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14717 comm="syz.5.2502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17f6c code=0x7ffc0000 [ 563.503487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #4a!!! [ 563.564358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 563.673894][T14749] netlink: 'syz.4.2508': attribute type 5 has an invalid length. [ 564.010719][ T39] usb 48-1: device descriptor read/8, error -110 [ 564.401545][ T39] usb usb48-port1: attempt power cycle [ 564.541789][ T6042] usb 8-1: new full-speed USB device number 39 using dummy_hcd [ 564.645487][ T63] Bluetooth: hci2: connection err: -111 [ 564.672113][ T6042] usb 8-1: device descriptor read/64, error -71 [ 564.821679][T14779] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 564.823872][T14779] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 564.830740][T14779] vhci_hcd vhci_hcd.0: Device attached [ 564.910935][ T6042] usb 8-1: new full-speed USB device number 40 using dummy_hcd [ 565.430303][T14780] vhci_hcd: connection closed [ 565.610848][ T1222] vhci_hcd vhci_hcd.2: stop threads [ 565.615419][ T1222] vhci_hcd vhci_hcd.2: release socket [ 565.617791][ T1222] vhci_hcd vhci_hcd.2: disconnect device [ 565.926793][ T39] usb usb48-port1: unable to enumerate USB device [ 565.950749][ T60] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 565.980787][ T6042] usb 8-1: device descriptor read/64, error -71 [ 566.091080][ T6042] usb usb8-port1: attempt power cycle [ 566.100763][ T60] usb 10-1: Using ep0 maxpacket: 32 [ 566.103946][ T60] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 566.106944][ T60] usb 10-1: config 0 has no interface number 0 [ 566.111060][ T60] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 566.114037][ T60] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.116596][ T60] usb 10-1: Product: syz [ 566.118183][ T60] usb 10-1: Manufacturer: syz [ 566.119699][ T60] usb 10-1: SerialNumber: syz [ 566.123602][ T60] usb 10-1: config 0 descriptor?? [ 566.128181][ T60] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 566.131524][ T60] usb 10-1: selecting invalid altsetting 1 [ 566.133469][ T60] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 566.139327][ T60] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 566.143101][ T60] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 566.145695][ T60] usb 10-1: media controller created [ 566.152831][ T60] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 566.228153][T14789] netlink: 'syz.2.2521': attribute type 5 has an invalid length. [ 566.432624][ T6042] usb 8-1: new full-speed USB device number 41 using dummy_hcd [ 566.436271][T14798] FAULT_INJECTION: forcing a failure. [ 566.436271][T14798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.441831][T14798] CPU: 2 UID: 0 PID: 14798 Comm: syz.5.2520 Tainted: G L syzkaller #0 PREEMPT(full) [ 566.441851][T14798] Tainted: [L]=SOFTLOCKUP [ 566.441855][T14798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 566.441862][T14798] Call Trace: [ 566.441866][T14798] [ 566.441870][T14798] dump_stack_lvl+0x100/0x190 [ 566.441891][T14798] should_fail_ex.cold+0x5/0xa [ 566.441906][T14798] _copy_to_user+0x32/0xd0 [ 566.441922][T14798] simple_read_from_buffer+0xcb/0x170 [ 566.441948][T14798] proc_fail_nth_read+0x1af/0x230 [ 566.441970][T14798] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 566.441986][T14798] ? rw_verify_area+0xce/0x6d0 [ 566.442002][T14798] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 566.442016][T14798] vfs_read+0x1e4/0xb30 [ 566.442029][T14798] ? __pfx_vfs_read+0x10/0x10 [ 566.442039][T14798] ? find_held_lock+0x2b/0x80 [ 566.442051][T14798] ? __fget_files+0x215/0x3d0 [ 566.442065][T14798] ? __fget_files+0x21f/0x3d0 [ 566.442080][T14798] ksys_read+0x12a/0x250 [ 566.442090][T14798] ? __pfx_ksys_read+0x10/0x10 [ 566.442105][T14798] do_int80_emulation+0x141/0x6b0 [ 566.442117][T14798] asm_int80_emulation+0x1a/0x20 [ 566.442129][T14798] RIP: 0023:0xf7115cab [ 566.442153][T14798] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 566.442164][T14798] RSP: 002b:00000000f53944bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 566.442175][T14798] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f53945d0 [ 566.442182][T14798] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 566.442188][T14798] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 566.442194][T14798] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 566.442200][T14798] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 566.442215][T14798] [ 566.516827][ T6042] usb 8-1: device descriptor read/8, error -71 [ 566.750792][ T6042] usb 8-1: new full-speed USB device number 42 using dummy_hcd [ 566.771368][ T6042] usb 8-1: device descriptor read/8, error -71 [ 566.881115][ T6042] usb usb8-port1: unable to enumerate USB device [ 567.192741][ T60] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 567.198281][ T60] zl10353_read_register: readreg error (reg=127, ret==-110) [ 567.212660][T14787] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 567.279104][ T60] usb 10-1: USB disconnect, device number 14 [ 567.434292][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.441111][ T39] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 567.600751][ T39] usb 7-1: Using ep0 maxpacket: 8 [ 567.603733][ T39] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 567.606306][ T39] usb 7-1: config 0 has no interface number 0 [ 567.608278][ T39] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 567.612026][ T39] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 567.615703][ T39] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 567.619113][ T39] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 567.623519][ T39] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 567.626372][ T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.630547][ T39] usb 7-1: config 0 descriptor?? [ 567.636662][ T39] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 567.728329][T14828] [U] V3Fپ"S/4:XTZWTLW= [ 567.731960][T14828] [U] J"E:" [ 569.022416][T14831] netlink: 'syz.4.2533': attribute type 5 has an invalid length. [ 569.036188][ T40] kauditd_printk_skb: 47 callbacks suppressed [ 569.036208][ T40] audit: type=1326 audit(1774522790.093:4185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14830 comm="syz.4.2533" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x0 [ 569.879721][ T40] audit: type=1326 audit(1774522790.943:4186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14837 comm="syz.3.2535" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92f6c code=0x7ffc0000 [ 569.888298][ T40] audit: type=1326 audit(1774522790.943:4187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14837 comm="syz.3.2535" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92f6c code=0x7ffc0000 [ 569.899163][ T40] audit: type=1326 audit(1774522790.943:4188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14837 comm="syz.3.2535" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f92f6c code=0x7ffc0000 [ 569.906170][ T40] audit: type=1326 audit(1774522790.943:4189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14837 comm="syz.3.2535" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92f6c code=0x7ffc0000 [ 569.914665][ T40] audit: type=1326 audit(1774522790.943:4190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14837 comm="syz.3.2535" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92f6c code=0x7ffc0000 [ 569.924122][ T40] audit: type=1326 audit(1774522790.943:4191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14837 comm="syz.3.2535" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f92f6c code=0x7ffc0000 [ 569.931202][ T40] audit: type=1326 audit(1774522790.963:4192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14837 comm="syz.3.2535" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92f6c code=0x7ffc0000 [ 569.938880][ T40] audit: type=1326 audit(1774522790.963:4193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14837 comm="syz.3.2535" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92f6c code=0x7ffc0000 [ 569.945842][ T40] audit: type=1326 audit(1774522790.963:4194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14837 comm="syz.3.2535" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f92f6c code=0x7ffc0000 [ 570.855842][ T4738] usb 7-1: USB disconnect, device number 23 [ 570.863612][ T4738] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 571.665944][T14899] lo speed is unknown, defaulting to 1000 [ 572.308356][T14899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2551'. [ 572.314228][T14899] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2551'. [ 572.317154][T14899] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2551'. [ 572.698298][ T63] Bluetooth: hci4: connection err: -111 [ 573.437199][T14910] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2554'. [ 573.449165][T14910] bridge_slave_0: left allmulticast mode [ 573.451088][T14910] bridge_slave_0: left promiscuous mode [ 573.453112][T14910] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.457985][T14910] bridge_slave_1: left allmulticast mode [ 573.459805][T14910] bridge_slave_1: left promiscuous mode [ 573.463986][T14910] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.469873][T14910] bond0: (slave bond_slave_0): Releasing backup interface [ 573.478682][T14910] bond0: (slave bond_slave_1): Releasing backup interface [ 573.485591][T14910] team0: Port device team_slave_0 removed [ 573.490291][T14910] team0: Port device team_slave_1 removed [ 573.494744][T14910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.497167][T14910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.510399][T14910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.514044][T14910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.527828][T14910] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 573.876138][T14924] [U] V3Fپ"S/4:XTZWTLW= [ 573.878600][T14924] [U] J"E:" [ 574.224896][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 574.224915][ T40] audit: type=1326 audit(1774522795.293:4228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14921 comm="syz.2.2559" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fdef6c code=0x0 [ 576.928978][T14962] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2571'. [ 577.147469][T14975] [U] V3Fپ"S/4:XTZWTLW= [ 577.149977][T14975] [U] J"E:" [ 577.452936][T14985] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2577'. [ 577.507384][T14987] gfs2: error -5 reading superblock [ 577.716679][T14994] syzkaller0: entered promiscuous mode [ 577.718504][T14994] syzkaller0: entered allmulticast mode [ 577.978059][ T5940] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 577.985250][ T5940] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 577.990738][ T60] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 578.000950][ T5940] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 578.010111][ T5940] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 578.019008][ T5940] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 578.066537][T15000] lo speed is unknown, defaulting to 1000 [ 578.142396][ T60] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 578.146974][ T60] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.164826][ T60] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.173164][ T60] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 578.186999][ T60] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 578.193583][ T60] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 578.200455][ T60] usb 10-1: Manufacturer: syz [ 578.213279][ T60] usb 10-1: config 0 descriptor?? [ 578.601473][T15000] chnl_net:caif_netlink_parms(): no params data found [ 578.630383][T15011] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2587'. [ 578.644533][ T60] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 578.684755][ T60] appleir 0003:05AC:8243.0005: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 578.712524][T11809] syz_tun (unregistering): left allmulticast mode [ 578.723120][T11809] bond0: (slave syz_tun): Releasing backup interface [ 578.804511][T15000] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.807706][T15000] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.810950][T15000] bridge_slave_0: entered allmulticast mode [ 578.814988][T15000] bridge_slave_0: entered promiscuous mode [ 578.819849][T15000] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.822978][T15000] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.826055][T15000] bridge_slave_1: entered allmulticast mode [ 578.829785][T15000] bridge_slave_1: entered promiscuous mode [ 578.849442][T15000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.856588][T15000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.894321][T15000] team0: Port device team_slave_0 added [ 578.898523][T15000] team0: Port device team_slave_1 added [ 578.923345][T15000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 578.926406][T15000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 578.937187][T15000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 578.943370][T15000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 578.946365][T15000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 578.957307][T15000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 578.961993][ T6042] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 578.962645][T15025] overlayfs: failed to resolve './file0': -2 [ 579.004649][T15000] hsr_slave_0: entered promiscuous mode [ 579.007876][T15000] hsr_slave_1: entered promiscuous mode [ 579.010881][T15000] debugfs: 'hsr0' already exists in 'hsr' [ 579.013349][T15000] Cannot create hsr debugfs directory [ 579.121066][ T6042] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 579.131516][ T6042] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.138193][ T6042] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 579.142409][ T6042] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 579.144944][ T6042] usb 7-1: Manufacturer: syz [ 579.147870][ T6042] usb 7-1: config 0 descriptor?? [ 579.200688][ T6042] rc_core: IR keymap rc-hauppauge not found [ 579.202638][ T6042] Registered IR keymap rc-empty [ 579.204873][ T6042] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 579.209563][ T6042] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input20 [ 579.305207][T15027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.309329][T15027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.436739][ T39] usb 7-1: USB disconnect, device number 24 [ 579.520181][T15000] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 579.526055][T15000] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 579.531551][T15000] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 579.536197][T15000] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 579.571957][T15000] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.574821][T15000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.578278][T15000] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.581445][T15000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.641973][T15000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.656511][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.660420][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.679943][T15000] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.691153][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.694219][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.704435][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.707630][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.913160][T15000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.026405][T15045] syzkaller0: entered promiscuous mode [ 580.028459][T15045] syzkaller0: entered allmulticast mode [ 580.060694][ T60] usb 10-1: reset high-speed USB device number 15 using dummy_hcd [ 580.080753][ T5940] Bluetooth: hci0: command tx timeout [ 580.129967][T15000] veth0_vlan: entered promiscuous mode [ 580.137220][T15000] veth1_vlan: entered promiscuous mode [ 580.164065][T15000] veth0_macvtap: entered promiscuous mode [ 580.170215][T15000] veth1_macvtap: entered promiscuous mode [ 580.187025][T15000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.190722][ T60] usb 10-1: device descriptor read/64, error -32 [ 580.209437][T15000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 580.217676][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.236156][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.271683][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.275620][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.347780][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.353548][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.383101][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.386335][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.430723][ T60] usb 10-1: reset high-speed USB device number 15 using dummy_hcd [ 580.498877][T15056] binder: 15055:15056 ioctl c0306201 800004c0 returned -14 [ 580.503638][T15056] binder: 15055:15056 ioctl c0306201 800001c0 returned -14 [ 580.560766][ T60] usb 10-1: device descriptor read/64, error -32 [ 580.761287][T15072] [U] V3Fپ"S/4:XTZWTLW= [ 580.764579][T15072] [U] J"E:" [ 580.789002][T15071] [U] V3Fپ"S/4:XTZWTLW= [ 580.804447][ T60] usb 10-1: reset high-speed USB device number 15 using dummy_hcd [ 580.810945][ T39] usb 8-1: new low-speed USB device number 43 using dummy_hcd [ 580.821427][ T60] usb 10-1: device descriptor read/8, error -32 [ 580.963131][ T39] usb 8-1: config index 0 descriptor too short (expected 56273, got 45) [ 580.966449][ T39] usb 8-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 580.969661][ T39] usb 8-1: config 0 has an invalid descriptor of length 82, skipping remainder of the config [ 580.974802][ T39] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 129 [ 580.978443][ T39] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=19.23 [ 580.983773][ T39] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.989840][ T39] usb 8-1: config 0 descriptor?? [ 581.412042][T15074] syzkaller0: entered promiscuous mode [ 581.413803][T15074] syzkaller0: entered allmulticast mode [ 581.547610][T15067] [U] J"E:" [ 581.702689][ T6024] usb 10-1: USB disconnect, device number 15 [ 581.803138][ T5940] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 581.874980][T15085] trusted_key: encrypted_key: keyword 'load|ʓ.V' not recognized [ 581.992371][T15090] binder: 15089:15090 ioctl c0306201 800004c0 returned -14 [ 581.996453][T15090] binder: 15089:15090 ioctl c0306201 800001c0 returned -14 [ 582.093943][T15099] syzkaller0: entered promiscuous mode [ 582.097737][T15099] syzkaller0: entered allmulticast mode [ 582.133183][T15100] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2606'. [ 582.151263][ T5940] Bluetooth: hci0: command tx timeout [ 582.929599][T15113] bridge2: entered promiscuous mode [ 583.219155][T15117] [U] V3Fپ"S/4:XTZWTLW= [ 583.222083][T15117] [U] J"E:" [ 583.591228][ T6024] usb 8-1: USB disconnect, device number 43 [ 583.635700][T15128] syzkaller0: entered promiscuous mode [ 583.637513][T15128] syzkaller0: entered allmulticast mode [ 584.240825][ T5940] Bluetooth: hci0: command tx timeout [ 584.293173][ T5940] Bluetooth: hci4: connection err: -111 [ 584.315904][T15140] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2622'. [ 584.616991][T15146] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2623'. [ 585.267493][T15151] [U] V3Fپ"S/4:XTZWTLW= [ 585.450932][T15155] [U] J"E:" [ 586.310789][ T5940] Bluetooth: hci0: command tx timeout [ 586.494117][T15152] [U] J"E:" [ 586.855785][T15172] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2631'. [ 586.939323][T15175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2632'. [ 586.998130][T15178] [U] V3Fپ"S/4:XTZWTLW= [ 587.001378][T15178] [U] J"E:" [ 587.052380][T15179] netlink: 840 bytes leftover after parsing attributes in process `syz.5.2633'. [ 588.248504][T15197] [U] V3Fپ"S/4:XTZWTLW= [ 589.056159][T15194] [U] J"E:" [ 589.858889][T15213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2643'. [ 589.966934][T15214] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2642'. [ 590.265224][T15219] [U] V3Fپ"S/4:XTZWTLW= [ 590.267789][T15219] [U] J"E:" [ 590.574774][T15221] syzkaller0: entered promiscuous mode [ 590.580891][T15221] syzkaller0: entered allmulticast mode [ 592.065146][T15237] netlink: 'syz.2.2650': attribute type 8 has an invalid length. [ 592.882371][T15252] [U] V3Fپ"S/4:XTZWTLW= [ 593.525789][T15241] [U] J"E:" [ 593.774413][T15258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2656'. [ 595.098128][T15273] [U] V3Fپ"S/4:XTZWTLW= [ 595.101317][T15273] [U] J"E:" [ 595.383678][T15277] syzkaller0: entered promiscuous mode [ 595.385608][T15277] syzkaller0: entered allmulticast mode [ 595.766101][T15293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2666'. [ 597.505111][T15327] ptrace attach of "/syz-executor exec"[15000] was attempted by " [ 597.546354][ T40] audit: type=1804 audit(1774522818.613:4229): pid=15327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2671" name="/newroot/20/bus/bus" dev="tmpfs" ino=158 res=1 errno=0 [ 597.547828][T15331] xt_l2tp: missing protocol rule (udp|l2tpip) [ 597.563179][T15332] [U] V3Fپ"S/4:XTZWTLW= [ 597.722208][T15326] netlink: 'syz.3.2675': attribute type 5 has an invalid length. [ 597.834329][ T40] audit: type=1326 audit(1774522818.903:4230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15325 comm="syz.3.2675" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f92f6c code=0x0 [ 598.289024][T15320] [U] J"E:" [ 598.648582][T15350] syzkaller0: entered promiscuous mode [ 598.651570][T15350] syzkaller0: entered allmulticast mode [ 598.716987][T15352] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2680'. [ 599.896064][T15363] xt_l2tp: missing protocol rule (udp|l2tpip) [ 599.958145][T15364] netlink: 'syz.3.2683': attribute type 5 has an invalid length. [ 600.080208][ T40] audit: type=1326 audit(1774522821.143:4231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15361 comm="syz.3.2683" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f92f6c code=0x0 [ 600.475093][T15377] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2688'. [ 600.572566][T15381] ptrace attach of "/syz-executor exec"[14084] was attempted by " [ 600.579813][ T40] audit: type=1804 audit(1774522821.643:4232): pid=15381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2689" name="/newroot/114/bus/bus" dev="overlay" ino=631 res=1 errno=0 [ 600.687336][T15382] overlayfs: failed to resolve './file0': -2 [ 601.082230][ T40] audit: type=1804 audit(1774522822.153:4233): pid=15381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2689" name="/newroot/114/bus/bus" dev="overlay" ino=631 res=1 errno=0 [ 601.130720][ T939] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 601.282112][ T939] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 601.286097][ T939] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.289672][ T939] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.292908][ T939] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 601.299003][ T939] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 601.303206][ T939] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 601.306704][ T939] usb 8-1: Manufacturer: syz [ 601.316012][ T939] usb 8-1: config 0 descriptor?? [ 601.560984][ T10] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 602.077543][ T939] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 602.091246][ T939] appleir 0003:05AC:8243.0006: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 602.098268][ T10] usb 10-1: device descriptor read/64, error -71 [ 602.182165][T15392] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 602.185672][T15392] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 602.202484][T15392] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 602.204698][T15392] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 602.214331][T15392] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 602.217722][T15392] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 602.229757][T15392] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 602.232538][T15392] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 602.328887][T15395] syzkaller0: entered promiscuous mode [ 602.331023][T15395] syzkaller0: entered allmulticast mode [ 602.340692][ T10] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 602.430259][T15396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.436011][T15396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.480763][ T10] usb 10-1: device descriptor read/64, error -71 [ 602.580968][ T10] usb usb10-port1: attempt power cycle [ 602.925011][ T10] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 602.949213][ T10] usb 10-1: device descriptor read/8, error -71 [ 603.211508][ T10] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 603.237460][ T10] usb 10-1: device descriptor read/8, error -71 [ 603.342916][ T10] usb usb10-port1: unable to enumerate USB device [ 603.849077][ T10] usb 8-1: USB disconnect, device number 44 [ 604.014554][ T40] audit: type=1326 audit(1774522825.083:4234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15404 comm="syz.3.2695" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92f6c code=0x7ffc0000 [ 604.023562][ T40] audit: type=1326 audit(1774522825.083:4235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15404 comm="syz.3.2695" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92f6c code=0x7ffc0000 [ 604.023593][ T40] audit: type=1326 audit(1774522825.093:4236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15404 comm="syz.3.2695" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f92f6c code=0x7ffc0000 [ 604.023724][ T40] audit: type=1326 audit(1774522825.093:4237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15404 comm="syz.3.2695" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92f6c code=0x7ffc0000 [ 604.023748][ T40] audit: type=1326 audit(1774522825.093:4238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15404 comm="syz.3.2695" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92f6c code=0x7ffc0000 [ 604.031106][ T40] audit: type=1326 audit(1774522825.103:4239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15404 comm="syz.3.2695" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f92f6c code=0x7ffc0000 [ 604.035884][ T40] audit: type=1326 audit(1774522825.103:4240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15404 comm="syz.3.2695" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92f6c code=0x7ffc0000 [ 604.035918][ T40] audit: type=1326 audit(1774522825.103:4241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15404 comm="syz.3.2695" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f92f6c code=0x7ffc0000 [ 604.039788][ T40] audit: type=1326 audit(1774522825.103:4242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15404 comm="syz.3.2695" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92f6c code=0x7ffc0000 [ 604.044434][ T40] audit: type=1326 audit(1774522825.113:4243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15404 comm="syz.3.2695" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f92f6c code=0x7ffc0000 [ 604.301966][ T10] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 604.440896][ T10] usb 10-1: device descriptor read/64, error -71 [ 604.462930][T15433] [U] V3Fپ"S/4:XTZWTLW= [ 604.710699][ T10] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 604.840686][ T10] usb 10-1: device descriptor read/64, error -71 [ 604.911955][T15441] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2706'. [ 604.915097][T15441] netem: invalid attributes len -8 [ 604.916871][T15441] netem: change failed [ 604.960869][ T10] usb usb10-port1: attempt power cycle [ 604.977771][T15443] syzkaller0: entered promiscuous mode [ 604.980133][T15443] syzkaller0: entered allmulticast mode [ 605.195227][T15447] [U] J"E:" [ 605.310745][ T10] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 605.331154][ T10] usb 10-1: device descriptor read/8, error -71 [ 605.570737][ T10] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 605.591279][ T10] usb 10-1: device descriptor read/8, error -71 [ 605.700884][ T10] usb usb10-port1: unable to enumerate USB device [ 606.002422][T15444] [U] J"E:" [ 606.294003][T15468] syzkaller0: entered promiscuous mode [ 606.296165][T15468] syzkaller0: entered allmulticast mode [ 606.405010][T15472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2716'. [ 606.832351][T15001] IPVS: starting estimator thread 0... [ 606.920759][T15480] IPVS: using max 44 ests per chain, 105600 per kthread [ 607.058922][T15483] xt_l2tp: missing protocol rule (udp|l2tpip) [ 607.117003][T15484] netlink: 'syz.5.2720': attribute type 5 has an invalid length. [ 608.238962][T15492] syzkaller0: entered promiscuous mode [ 608.240884][T15492] syzkaller0: entered allmulticast mode [ 608.417691][T15499] syzkaller0: entered promiscuous mode [ 608.419930][T15499] syzkaller0: entered allmulticast mode [ 608.768769][T15521] binder: 15519:15521 ioctl c0306201 0 returned -14 [ 608.873082][T15524] [U] V3Fپ"S/4:XTZWTLW= [ 608.875868][T15524] [U] J"E:" [ 608.951279][ T939] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 608.984252][ T39] IPVS: starting estimator thread 0... [ 609.090753][T15526] IPVS: using max 23 ests per chain, 55200 per kthread [ 609.102308][ T939] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.105931][ T939] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.109097][ T939] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 609.113373][ T939] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 609.116442][ T939] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.123460][ T939] usb 7-1: config 0 descriptor?? [ 609.543725][ T939] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 610.099243][ T939] usb 7-1: USB disconnect, device number 25 [ 610.101996][T15531] usb 7-1: string descriptor 0 read error: -19 [ 610.338740][T15539] syzkaller0: entered promiscuous mode [ 610.340694][T15539] syzkaller0: entered allmulticast mode [ 610.617640][T15543] binder: 15542:15543 ioctl c0306201 0 returned -14 [ 610.621417][T15543] FAULT_INJECTION: forcing a failure. [ 610.621417][T15543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 610.640668][T15543] CPU: 3 UID: 0 PID: 15543 Comm: syz.5.2738 Tainted: G L syzkaller #0 PREEMPT(full) [ 610.640687][T15543] Tainted: [L]=SOFTLOCKUP [ 610.640691][T15543] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 610.640698][T15543] Call Trace: [ 610.640702][T15543] [ 610.640706][T15543] dump_stack_lvl+0x100/0x190 [ 610.640726][T15543] should_fail_ex.cold+0x5/0xa [ 610.640740][T15543] _copy_from_user+0x2e/0xd0 [ 610.640754][T15543] kstrtouint_from_user+0xd6/0x1d0 [ 610.640771][T15543] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 610.640786][T15543] ? __lock_acquire+0x4a5/0x2630 [ 610.640802][T15543] ? lock_acquire+0x1cf/0x380 [ 610.640819][T15543] proc_fail_nth_write+0x83/0x220 [ 610.640834][T15543] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 610.640852][T15543] vfs_write+0x2aa/0x1070 [ 610.640863][T15543] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 610.640878][T15543] ? __pfx_vfs_write+0x10/0x10 [ 610.640887][T15543] ? find_held_lock+0x2b/0x80 [ 610.640898][T15543] ? __fget_files+0x215/0x3d0 [ 610.640911][T15543] ? __fget_files+0x21f/0x3d0 [ 610.640926][T15543] ksys_write+0x12a/0x250 [ 610.640936][T15543] ? __pfx_ksys_write+0x10/0x10 [ 610.640951][T15543] do_int80_emulation+0x141/0x6b0 [ 610.640963][T15543] asm_int80_emulation+0x1a/0x20 [ 610.640979][T15543] RIP: 0023:0xf7115cab [ 610.640988][T15543] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 610.640998][T15543] RSP: 002b:00000000f53d64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 610.641009][T15543] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f53d65d0 [ 610.641015][T15543] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 610.641020][T15543] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 610.641026][T15543] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 610.641033][T15543] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 610.641047][T15543] [ 610.951942][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 611.062814][T15559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2743'. [ 611.100688][ T39] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 611.250893][ T39] usb 8-1: Using ep0 maxpacket: 8 [ 611.254091][ T39] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 611.257006][ T39] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 611.270787][ T39] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 611.274145][ T39] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 611.277477][ T39] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 611.283094][ T39] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 611.283965][T15571] overlayfs: missing 'lowerdir' [ 611.286022][ T39] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.312816][T15571] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 611.316657][T15571] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 611.362498][T15571] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 611.365726][T15571] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 611.370854][T15571] vhci_hcd vhci_hcd.0: Device attached [ 611.500696][ T39] usb 8-1: usb_control_msg returned -32 [ 611.502870][ T39] usbtmc 8-1:16.0: can't read capabilities [ 611.660812][ T39] usb 48-1: SetAddress Request (14) to port 0 [ 611.663575][ T39] usb 48-1: new SuperSpeed USB device number 14 using vhci_hcd [ 611.700079][T15578] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2749'. [ 611.765199][T15572] vhci_hcd: connection reset by peer [ 611.775750][ T167] vhci_hcd vhci_hcd.5: stop threads [ 611.777494][ T167] vhci_hcd vhci_hcd.5: release socket [ 611.779213][ T167] vhci_hcd vhci_hcd.5: disconnect device [ 611.850706][T15587] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 611.856490][T15556] netlink: 'syz.3.2745': attribute type 8 has an invalid length. [ 611.863094][ T6042] usb 8-1: USB disconnect, device number 45 [ 612.058984][T15596] xt_l2tp: missing protocol rule (udp|l2tpip) [ 612.167249][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 612.167267][ T40] audit: type=1326 audit(1774522833.233:4279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15593 comm="syz.2.2756" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x0 [ 612.518589][T15610] syzkaller0: entered promiscuous mode [ 612.520514][T15610] syzkaller0: entered allmulticast mode [ 612.602030][T15611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2760'. [ 612.715121][T15617] FAULT_INJECTION: forcing a failure. [ 612.715121][T15617] name failslab, interval 1, probability 0, space 0, times 0 [ 612.722047][T15617] CPU: 0 UID: 0 PID: 15617 Comm: syz.5.2763 Tainted: G L syzkaller #0 PREEMPT(full) [ 612.722072][T15617] Tainted: [L]=SOFTLOCKUP [ 612.722076][T15617] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 612.722082][T15617] Call Trace: [ 612.722086][T15617] [ 612.722090][T15617] dump_stack_lvl+0x100/0x190 [ 612.722112][T15617] should_fail_ex.cold+0x5/0xa [ 612.722126][T15617] should_failslab+0xc2/0x120 [ 612.722139][T15617] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 612.722157][T15617] ? __alloc_skb+0x140/0x710 [ 612.722175][T15617] __alloc_skb+0x140/0x710 [ 612.722189][T15617] ? __alloc_skb+0x5b7/0x710 [ 612.722203][T15617] ? __pfx___alloc_skb+0x10/0x10 [ 612.722224][T15617] ? rcu_is_watching+0x12/0xc0 [ 612.722244][T15617] quota_send_warning+0x9b/0x4f0 [ 612.722258][T15617] ? __pfx_quota_send_warning+0x10/0x10 [ 612.722271][T15617] ? do_raw_spin_unlock+0x145/0x1e0 [ 612.722288][T15617] ? find_held_lock+0x2b/0x80 [ 612.722298][T15617] ? find_held_lock+0x2b/0x80 [ 612.722307][T15617] ? dquot_alloc_inode+0x448/0xb10 [ 612.722323][T15617] ? dquot_alloc_inode+0x448/0xb10 [ 612.722342][T15617] dquot_alloc_inode+0x4f2/0xb10 [ 612.722361][T15617] ? __pfx_dquot_alloc_inode+0x10/0x10 [ 612.722383][T15617] ? lockdep_init_map_type+0x5c/0x250 [ 612.722400][T15617] shmem_get_inode+0x81e/0x1040 [ 612.722417][T15617] ? __pfx_shmem_get_inode+0x10/0x10 [ 612.722431][T15617] ? bpf_lsm_capable+0x9/0x10 [ 612.722445][T15617] ? capable_wrt_inode_uidgid+0xde/0x170 [ 612.722461][T15617] shmem_mknod+0x20c/0x470 [ 612.722476][T15617] ? __pfx_shmem_mknod+0x10/0x10 [ 612.722495][T15617] vfs_create+0x301/0x6c0 [ 612.722512][T15617] ovl_create_real+0x546/0xb80 [ 612.722533][T15617] ovl_create_upper+0x1e5/0x5b0 [ 612.722552][T15617] ovl_create_or_link+0x321/0x390 [ 612.722571][T15617] ovl_create_object+0x2bf/0x3b0 [ 612.722588][T15617] ? __pfx_ovl_create_object+0x10/0x10 [ 612.722605][T15617] ? bpf_lsm_inode_create+0x9/0x10 [ 612.722620][T15617] ? security_inode_create+0xc4/0x280 [ 612.722635][T15617] ? may_o_create+0x46/0x3a0 [ 612.722650][T15617] ? __pfx_ovl_create+0x10/0x10 [ 612.722667][T15617] lookup_open.isra.0+0xc47/0x11b0 [ 612.722687][T15617] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 612.722706][T15617] ? __pfx___might_resched+0x10/0x10 [ 612.722722][T15617] ? mnt_get_write_access+0x52/0x2f0 [ 612.722743][T15617] ? __pfx_down_write+0x10/0x10 [ 612.722756][T15617] ? mnt_get_write_access+0x1e9/0x2f0 [ 612.722774][T15617] path_openat+0x2291/0x31a0 [ 612.722788][T15617] ? fred_int80_emulation+0x631/0x6a0 [ 612.722800][T15617] ? __pfx_path_openat+0x10/0x10 [ 612.722817][T15617] do_file_open+0x20e/0x430 [ 612.722830][T15617] ? __pfx_do_file_open+0x10/0x10 [ 612.722852][T15617] ? _raw_spin_unlock+0x28/0x50 [ 612.722866][T15617] ? alloc_fd+0x476/0x790 [ 612.722881][T15617] do_sys_openat2+0x10d/0x1e0 [ 612.722897][T15617] ? __pfx_do_sys_openat2+0x10/0x10 [ 612.722914][T15617] ? __fget_files+0x21f/0x3d0 [ 612.722926][T15617] __ia32_compat_sys_open+0xfe/0x1c0 [ 612.722942][T15617] ? __pfx___ia32_compat_sys_open+0x10/0x10 [ 612.722959][T15617] ? __pfx_ksys_write+0x10/0x10 [ 612.722974][T15617] __do_fast_syscall_32+0xe3/0x8c0 [ 612.722993][T15617] do_fast_syscall_32+0x32/0x70 [ 612.723004][T15617] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 612.723019][T15617] RIP: 0023:0xf7f17f6c [ 612.723028][T15617] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 612.723037][T15617] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000005 [ 612.723048][T15617] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 0000000000024842 [ 612.723054][T15617] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 612.723060][T15617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 612.723079][T15617] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 612.723085][T15617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 612.723100][T15617] [ 612.723132][T15617] VFS: Not enough memory to send quota warning. [ 613.880704][ T6042] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 614.030857][ T6042] usb 9-1: Using ep0 maxpacket: 8 [ 614.034875][ T6042] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 614.038299][ T6042] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 614.043057][ T6042] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 614.046769][ T6042] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 614.050244][ T6042] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 614.056226][ T6042] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 614.059245][ T6042] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.128931][T15640] netlink: 'syz.5.2770': attribute type 4 has an invalid length. [ 614.131605][T15640] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2770'. [ 614.138890][T15640] .`: renamed from bond0 [ 614.273346][ T6042] usb 9-1: usb_control_msg returned -32 [ 614.275324][ T6042] usbtmc 9-1:16.0: can't read capabilities [ 614.628534][T15641] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 614.643187][T15636] netlink: 'syz.4.2769': attribute type 8 has an invalid length. [ 614.651590][T12344] usb 9-1: USB disconnect, device number 15 [ 615.262137][T15646] xt_l2tp: missing protocol rule (udp|l2tpip) [ 615.298346][T15645] syzkaller0: entered promiscuous mode [ 615.301285][T15645] syzkaller0: entered allmulticast mode [ 615.369118][ T40] audit: type=1326 audit(1774522836.433:4280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15642 comm="syz.5.2772" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f17f6c code=0x0 [ 615.457062][T15652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2774'. [ 615.504803][T15652] overlayfs: failed to resolve './file1/file0': -2 [ 615.740796][T12344] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 615.910758][T12344] usb 7-1: Using ep0 maxpacket: 32 [ 615.919274][T12344] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 615.924299][T12344] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 615.928963][T12344] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 615.933542][T12344] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 615.937937][T12344] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 615.942765][T12344] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 615.948434][T12344] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 615.952690][T12344] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.956816][T12344] usb 7-1: config 0 descriptor?? [ 616.112050][T15668] tipc: Enabled bearer , priority 0 [ 616.157839][T15668] tipc: Resetting bearer [ 616.169620][T15671] netlink: 'syz.4.2781': attribute type 4 has an invalid length. [ 616.172659][T15671] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2781'. [ 616.173875][T12344] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 616.176365][T15667] tipc: Disabling bearer [ 616.204141][T15671] .`: renamed from bond0 (while UP) [ 616.266359][T15673] syzkaller0: entered promiscuous mode [ 616.268195][T15673] syzkaller0: entered allmulticast mode [ 616.404596][T15677] [U] V3Fپ"S/4:XTZWTLW= [ 616.598552][T15682] [U] J"E:" [ 616.712784][ T829] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 616.717068][ T39] usb 48-1: device descriptor read/8, error -110 [ 617.111350][ T39] usb usb48-port1: attempt power cycle [ 617.383964][T15679] [U] J"E:" [ 617.691303][ T39] usb usb48-port1: unable to enumerate USB device [ 617.846574][T15693] xt_l2tp: missing protocol rule (udp|l2tpip) [ 617.860582][T15692] x_tables: duplicate underflow at hook 1 [ 617.866907][T15692] hub 8-0:1.0: USB hub found [ 617.869022][T15692] hub 8-0:1.0: 1 port detected [ 617.953631][ T40] audit: type=1326 audit(1774522839.023:4281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15690 comm="syz.3.2788" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f92f6c code=0x0 [ 618.523354][ T50] usb 7-1: USB disconnect, device number 26 [ 618.549148][ T50] usblp0: removed [ 618.697519][T15702] syzkaller0: entered promiscuous mode [ 618.699358][T15702] syzkaller0: entered allmulticast mode [ 618.772186][T15707] loop2: detected capacity change from 0 to 7 [ 618.776101][T15707] Dev loop2: unable to read RDB block 7 [ 618.778601][T15707] loop2: AHDI p2 p3 [ 618.780304][T15707] loop2: partition table partially beyond EOD, truncated [ 619.202878][T15729] xt_l2tp: missing protocol rule (udp|l2tpip) [ 619.249563][T15733] 9pnet_fd: Insufficient options for proto=fd [ 619.310214][ T40] audit: type=1326 audit(1774522840.373:4282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15727 comm="syz.4.2801" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb3f6c code=0x0 [ 620.878413][T15785] xt_l2tp: missing protocol rule (udp|l2tpip) [ 620.988679][ T40] audit: type=1326 audit(1774522842.053:4283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15783 comm="syz.4.2819" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb3f6c code=0x0 [ 621.386821][T15791] input: syz0 as /devices/virtual/input/input22 [ 622.396231][T15811] [U] V3Fپ"S/4:XTZWTLW= [ 622.398757][T15811] [U] J"E:" [ 622.472510][ T1222] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 623.353648][T15823] FAULT_INJECTION: forcing a failure. [ 623.353648][T15823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 623.359155][T15823] CPU: 2 UID: 0 PID: 15823 Comm: syz.4.2830 Tainted: G L syzkaller #0 PREEMPT(full) [ 623.359184][T15823] Tainted: [L]=SOFTLOCKUP [ 623.359190][T15823] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 623.359207][T15823] Call Trace: [ 623.359214][T15823] [ 623.359221][T15823] dump_stack_lvl+0x100/0x190 [ 623.359249][T15823] should_fail_ex.cold+0x5/0xa [ 623.359270][T15823] _copy_from_user+0x2e/0xd0 [ 623.359290][T15823] do_compat_sigaltstack+0xf6/0x310 [ 623.359311][T15823] ? __pfx_do_compat_sigaltstack+0x10/0x10 [ 623.359330][T15823] ? ia32_restore_sigcontext+0x453/0x620 [ 623.359352][T15823] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 623.359379][T15823] ? rcu_is_watching+0x12/0xc0 [ 623.359404][T15823] ? _raw_spin_unlock_irq+0x23/0x50 [ 623.359425][T15823] ? lockdep_hardirqs_on+0x78/0x100 [ 623.359454][T15823] compat_restore_altstack+0x17/0x40 [ 623.359479][T15823] __do_compat_sys_rt_sigreturn+0x204/0x270 [ 623.359506][T15823] ? __pfx___do_compat_sys_rt_sigreturn+0x10/0x10 [ 623.359540][T15823] do_int80_emulation+0x141/0x6b0 [ 623.359560][T15823] asm_int80_emulation+0x1a/0x20 [ 623.359578][T15823] RIP: 0023:0xf7fb3f6a [ 623.359593][T15823] Code: 19 85 d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 623.359609][T15823] RSP: 002b:00000000f545550c EFLAGS: 00000292 [ 623.359624][T15823] RAX: 000000000000016a RBX: 000000000000000b RCX: 0000000080000400 [ 623.359634][T15823] RDX: 000000000000006e RSI: 0000000000000000 RDI: 0000000000000000 [ 623.359645][T15823] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 623.359655][T15823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 623.359664][T15823] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 623.359690][T15823] [ 623.438267][T15825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2830'. [ 623.441382][T15825] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2830'. [ 623.864969][T15827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2831'. [ 624.078012][ T1023] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 624.082449][ T1023] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 624.092974][ T1023] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [syz0] on syz1 [ 624.158752][T15836] fido_id[15836]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 624.520799][ T1023] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 624.540762][ T939] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 624.670755][ T939] usb 8-1: device descriptor read/64, error -71 [ 624.692135][T15853] [U] V3Fپ"S/4:XTZWTLW= [ 624.695656][T15853] [U] J"E:" [ 624.910703][ T939] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 625.050766][ T939] usb 8-1: device descriptor read/64, error -71 [ 625.160966][ T939] usb usb8-port1: attempt power cycle [ 625.350082][T15855] binder_alloc: 15854: binder_alloc_buf size -16 failed, no address space [ 625.355508][T15855] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 625.396189][T15857] syz_tun: entered allmulticast mode [ 625.401585][T15856] syz_tun: left allmulticast mode [ 625.542952][ T939] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 625.571120][ T939] usb 8-1: device descriptor read/8, error -71 [ 625.589320][ T1023] usb 7-1: Using ep0 maxpacket: 8 [ 625.593063][ T1023] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 625.597771][ T1023] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 625.600996][ T1023] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.606229][ T1023] usb 7-1: config 0 descriptor?? [ 625.650577][T15862] FAULT_INJECTION: forcing a failure. [ 625.650577][T15862] name failslab, interval 1, probability 0, space 0, times 0 [ 625.656217][T15862] CPU: 3 UID: 0 PID: 15862 Comm: syz.4.2842 Tainted: G L syzkaller #0 PREEMPT(full) [ 625.656235][T15862] Tainted: [L]=SOFTLOCKUP [ 625.656239][T15862] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 625.656245][T15862] Call Trace: [ 625.656250][T15862] [ 625.656256][T15862] dump_stack_lvl+0x100/0x190 [ 625.656275][T15862] should_fail_ex.cold+0x5/0xa [ 625.656289][T15862] ? tomoyo_realpath_from_path+0xb6/0x690 [ 625.656304][T15862] should_failslab+0xc2/0x120 [ 625.656316][T15862] __kmalloc_noprof+0xe0/0x850 [ 625.656336][T15862] tomoyo_realpath_from_path+0xb6/0x690 [ 625.656354][T15862] tomoyo_path_number_perm+0x23c/0x580 [ 625.656365][T15862] ? tomoyo_path_number_perm+0x22e/0x580 [ 625.656379][T15862] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 625.656406][T15862] ? find_held_lock+0x2b/0x80 [ 625.656416][T15862] ? hook_file_ioctl_common+0x146/0x410 [ 625.656429][T15862] ? __fget_files+0x215/0x3d0 [ 625.656442][T15862] ? __fget_files+0x21f/0x3d0 [ 625.656476][T15862] security_file_ioctl_compat+0xd3/0x230 [ 625.656491][T15862] __ia32_compat_sys_ioctl+0xc2/0x360 [ 625.656509][T15862] __do_fast_syscall_32+0xe3/0x8c0 [ 625.656529][T15862] do_fast_syscall_32+0x32/0x70 [ 625.656539][T15862] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 625.656553][T15862] RIP: 0023:0xf7fb3f6c [ 625.656562][T15862] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 625.656572][T15862] RSP: 002b:00000000f543450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 625.656582][T15862] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 000000000000541b [ 625.656589][T15862] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 625.656594][T15862] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 625.656600][T15862] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 625.656606][T15862] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 625.656620][T15862] [ 625.656625][T15862] ERROR: Out of memory at tomoyo_realpath_from_path. [ 625.814513][ T1023] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 625.850819][ T939] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 625.871219][ T939] usb 8-1: device descriptor read/8, error -71 [ 625.982438][ T939] usb usb8-port1: unable to enumerate USB device [ 626.326111][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 626.332843][ T6024] usb 7-1: USB disconnect, device number 27 [ 626.490715][ T60] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 626.640717][ T60] usb 10-1: Using ep0 maxpacket: 8 [ 626.643970][ T60] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 626.646605][ T60] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 626.650194][ T60] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 626.653877][ T60] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 626.657432][ T60] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 626.661218][ T60] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 626.665912][ T60] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 626.669191][ T60] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.901842][T15873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.905614][T15873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.918671][ T60] usb 10-1: usb_control_msg returned -71 [ 626.923815][ T60] usbtmc 10-1:16.0: can't read capabilities [ 626.940959][ T60] usb 10-1: USB disconnect, device number 24 [ 626.960067][T15881] syzkaller0: entered promiscuous mode [ 626.962328][T15881] syzkaller0: entered allmulticast mode [ 627.249188][T15887] syzkaller0: entered promiscuous mode [ 627.251901][T15887] syzkaller0: entered allmulticast mode [ 627.512354][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 627.957405][T15899] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 627.957928][T15900] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 627.959502][T15899] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 627.965632][T15899] vhci_hcd vhci_hcd.0: Device attached [ 627.973737][T15902] vhci_hcd: connection closed [ 627.977146][ T46] vhci_hcd vhci_hcd.5: stop threads [ 627.982780][ T46] vhci_hcd vhci_hcd.5: release socket [ 627.984681][ T46] vhci_hcd vhci_hcd.5: disconnect device [ 628.032823][T15908] syzkaller0: entered promiscuous mode [ 628.034736][T15908] syzkaller0: entered allmulticast mode [ 628.104451][T15909] [U] V3Fپ"S/4:XTZWTLW= [ 628.107958][T15909] [U] J"E:" [ 628.497102][T15917] FAULT_INJECTION: forcing a failure. [ 628.497102][T15917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 628.503949][T15917] CPU: 3 UID: 0 PID: 15917 Comm: syz.2.2861 Tainted: G L syzkaller #0 PREEMPT(full) [ 628.503973][T15917] Tainted: [L]=SOFTLOCKUP [ 628.503978][T15917] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 628.503987][T15917] Call Trace: [ 628.503993][T15917] [ 628.503999][T15917] dump_stack_lvl+0x100/0x190 [ 628.504026][T15917] should_fail_ex.cold+0x5/0xa [ 628.504045][T15917] _copy_from_user+0x2e/0xd0 [ 628.504064][T15917] memdup_user+0x6b/0xe0 [ 628.504080][T15917] strndup_user+0x78/0xe0 [ 628.504094][T15917] __ia32_sys_mount+0x136/0x310 [ 628.504113][T15917] ? __pfx___ia32_sys_mount+0x10/0x10 [ 628.504131][T15917] ? __pfx_ksys_write+0x10/0x10 [ 628.504149][T15917] __do_fast_syscall_32+0xe3/0x8c0 [ 628.504176][T15917] do_fast_syscall_32+0x32/0x70 [ 628.504189][T15917] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 628.504208][T15917] RIP: 0023:0xf6fdef6c [ 628.504220][T15917] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 628.504233][T15917] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 628.504247][T15917] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000040 [ 628.504256][T15917] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000080000400 [ 628.504265][T15917] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 628.504272][T15917] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 628.504281][T15917] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 628.504299][T15917] [ 628.931487][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.397079][T15922] syzkaller0: entered promiscuous mode [ 629.399153][T15922] syzkaller0: entered allmulticast mode [ 629.653645][T15935] [U] V3Fپ"S/4:XTZWTLW= [ 630.908729][T15928] [U] J"E:" [ 631.351365][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 631.534786][T15956] syzkaller0: entered promiscuous mode [ 631.537164][T15956] syzkaller0: entered allmulticast mode [ 632.105014][T15971] [U] V3Fپ"S/4:XTZWTLW= [ 632.107406][T15971] [U] J"E:" [ 632.282660][T15974] netlink: 'syz.5.2876': attribute type 1 has an invalid length. [ 632.285342][T15974] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2876'. [ 632.529452][T15977] FAULT_INJECTION: forcing a failure. [ 632.529452][T15977] name failslab, interval 1, probability 0, space 0, times 0 [ 632.534440][T15977] CPU: 1 UID: 0 PID: 15977 Comm: syz.2.2877 Tainted: G L syzkaller #0 PREEMPT(full) [ 632.534459][T15977] Tainted: [L]=SOFTLOCKUP [ 632.534462][T15977] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 632.534469][T15977] Call Trace: [ 632.534472][T15977] [ 632.534477][T15977] dump_stack_lvl+0x100/0x190 [ 632.534497][T15977] should_fail_ex.cold+0x5/0xa [ 632.534510][T15977] should_failslab+0xc2/0x120 [ 632.534522][T15977] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 632.534539][T15977] ? sock_alloc_inode+0x25/0x1c0 [ 632.534552][T15977] ? __pfx_sock_alloc_inode+0x10/0x10 [ 632.534564][T15977] sock_alloc_inode+0x25/0x1c0 [ 632.534574][T15977] alloc_inode+0x68/0x250 [ 632.534589][T15977] sock_alloc+0x44/0x280 [ 632.534600][T15977] do_accept+0xf9/0x530 [ 632.534613][T15977] ? do_raw_spin_lock+0x128/0x260 [ 632.534630][T15977] ? __pfx_do_accept+0x10/0x10 [ 632.534652][T15977] io_accept+0x260/0x9f0 [ 632.534666][T15977] ? __pfx_io_accept+0x10/0x10 [ 632.534677][T15977] ? __fget_files+0x21f/0x3d0 [ 632.534689][T15977] __io_issue_sqe+0xe8/0x7a0 [ 632.534703][T15977] io_issue_sqe+0x89/0x1410 [ 632.534720][T15977] io_submit_sqes+0xaf8/0x2370 [ 632.534738][T15977] ? __fget_files+0x21f/0x3d0 [ 632.534750][T15977] __do_sys_io_uring_enter+0x9c0/0x1a20 [ 632.534766][T15977] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 632.534786][T15977] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 632.534804][T15977] ? fput+0x79/0x100 [ 632.534830][T15977] ? ksys_write+0x1ac/0x250 [ 632.534840][T15977] ? __pfx_ksys_write+0x10/0x10 [ 632.534853][T15977] __do_fast_syscall_32+0xe3/0x8c0 [ 632.534872][T15977] do_fast_syscall_32+0x32/0x70 [ 632.534882][T15977] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 632.534896][T15977] RIP: 0023:0xf6fdef6c [ 632.534905][T15977] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 632.534920][T15977] RSP: 002b:00000000f53ac50c EFLAGS: 00000292 ORIG_RAX: 00000000000001aa [ 632.534931][T15977] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000003517 [ 632.534938][T15977] RDX: 000000000000c2de RSI: 0000000000000009 RDI: 0000000000000000 [ 632.534944][T15977] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 632.534949][T15977] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 632.534955][T15977] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 632.534969][T15977] [ 633.364027][ T189] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 633.421571][T15989] syzkaller0: entered promiscuous mode [ 633.423708][T15989] syzkaller0: entered allmulticast mode [ 633.663510][T15991] syzkaller0: entered promiscuous mode [ 633.665841][T15991] syzkaller0: entered allmulticast mode [ 634.043571][T15998] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 634.392032][T16009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2884'. [ 634.983278][T16019] [U] V3Fپ"S/4:XTZWTLW= [ 635.386980][T16029] [U] J"E:" [ 635.388809][T16029] [U] J"E:" [ 636.332336][T16036] FAULT_INJECTION: forcing a failure. [ 636.332336][T16036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.337423][T16036] CPU: 1 UID: 0 PID: 16036 Comm: syz.4.2894 Tainted: G L syzkaller #0 PREEMPT(full) [ 636.337444][T16036] Tainted: [L]=SOFTLOCKUP [ 636.337449][T16036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 636.337456][T16036] Call Trace: [ 636.337462][T16036] [ 636.337467][T16036] dump_stack_lvl+0x100/0x190 [ 636.337492][T16036] should_fail_ex.cold+0x5/0xa [ 636.337509][T16036] _copy_from_iter+0x1f4/0x1690 [ 636.337529][T16036] ? skb_set_owner_w+0x37d/0x780 [ 636.337549][T16036] ? __pfx__copy_from_iter+0x10/0x10 [ 636.337565][T16036] ? __pfx_skb_set_owner_w+0x10/0x10 [ 636.337582][T16036] ? pppol2tp_sock_to_session+0x249/0x590 [ 636.337599][T16036] ? __pfx_pppol2tp_sock_to_session+0x10/0x10 [ 636.337615][T16036] ? __pfx_aa_sk_perm+0x10/0x10 [ 636.337635][T16036] pppol2tp_sendmsg+0x438/0x5e0 [ 636.337655][T16036] ____sys_sendmsg+0x9e1/0xb70 [ 636.337668][T16036] ? __pfx_pppol2tp_sendmsg+0x10/0x10 [ 636.337685][T16036] ? __pfx_____sys_sendmsg+0x10/0x10 [ 636.337698][T16036] ? _parse_integer_limit+0x17f/0x1d0 [ 636.337721][T16036] ? _kstrtoull+0x13c/0x1f0 [ 636.337740][T16036] ? __pfx__kstrtoull+0x10/0x10 [ 636.337761][T16036] ___sys_sendmsg+0x190/0x1e0 [ 636.337778][T16036] ? __pfx____sys_sendmsg+0x10/0x10 [ 636.337794][T16036] ? __lock_acquire+0x4a5/0x2630 [ 636.337826][T16036] ? find_held_lock+0x2b/0x80 [ 636.337851][T16036] __sys_sendmmsg+0x2ff/0x430 [ 636.337874][T16036] ? __pfx___sys_sendmmsg+0x10/0x10 [ 636.337899][T16036] ? __fget_files+0x215/0x3d0 [ 636.337920][T16036] ? fput+0x79/0x100 [ 636.337936][T16036] ? ksys_write+0x1ac/0x250 [ 636.337948][T16036] ? __pfx_ksys_write+0x10/0x10 [ 636.337963][T16036] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 636.337983][T16036] ? lockdep_hardirqs_on+0x78/0x100 [ 636.338003][T16036] __do_fast_syscall_32+0xe3/0x8c0 [ 636.338026][T16036] do_fast_syscall_32+0x32/0x70 [ 636.338039][T16036] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 636.338056][T16036] RIP: 0023:0xf7fb3f6c [ 636.338068][T16036] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 636.338081][T16036] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 636.338094][T16036] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000300 [ 636.338102][T16036] RDX: 0000000000000002 RSI: 0000000000008040 RDI: 0000000000000000 [ 636.338110][T16036] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 636.338118][T16036] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 636.338125][T16036] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 636.338142][T16036] [ 636.551314][ T167] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 636.731136][T16046] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 636.792295][T16054] syzkaller0: entered promiscuous mode [ 636.794591][T16054] syzkaller0: entered allmulticast mode [ 637.044210][T16073] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2903'. [ 637.053401][T16075] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2903'. [ 637.138819][T16082] netlink: 'syz.3.2905': attribute type 1 has an invalid length. [ 637.141568][T16082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2905'. [ 637.144671][T16084] wg1 speed is unknown, defaulting to 1000 [ 637.147224][T16084] wg1 speed is unknown, defaulting to 1000 [ 637.153119][T16084] wg1 speed is unknown, defaulting to 1000 [ 637.174447][T16084] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 637.201493][T16084] wg1 speed is unknown, defaulting to 1000 [ 637.206045][T16084] wg1 speed is unknown, defaulting to 1000 [ 637.229488][T16084] wg1 speed is unknown, defaulting to 1000 [ 637.245834][T16084] wg1 speed is unknown, defaulting to 1000 [ 637.258855][T16084] wg1 speed is unknown, defaulting to 1000 [ 637.282191][T16084] wg1 speed is unknown, defaulting to 1000 [ 637.291097][T16084] wg1 speed is unknown, defaulting to 1000 [ 637.346519][T16090] xt_l2tp: missing protocol rule (udp|l2tpip) [ 637.480174][T16089] netlink: 'syz.4.2907': attribute type 5 has an invalid length. [ 637.482380][T16093] [U] V3Fپ"S/4:XTZWTLW= [ 637.486726][T16093] [U] J"E:" [ 637.556095][ T40] audit: type=1326 audit(1774522858.623:4284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16088 comm="syz.4.2907" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb3f6c code=0x0 [ 638.063276][T16097] syzkaller0: entered promiscuous mode [ 638.065451][T16097] syzkaller0: entered allmulticast mode [ 638.215742][T16101] overlayfs: failed to resolve './file0': -2 [ 638.473109][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 640.189919][T16130] xt_l2tp: missing protocol rule (udp|l2tpip) [ 640.299384][T16129] netlink: 'syz.4.2918': attribute type 5 has an invalid length. [ 640.312236][ T40] audit: type=1326 audit(1774522861.383:4285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16128 comm="syz.4.2918" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb3f6c code=0x0 [ 641.017666][T16142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2922'. [ 641.029300][T16142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2922'. [ 641.033684][T16142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2922'. [ 641.037272][T16142] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 641.531419][T16138] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 641.533606][T16138] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 641.536310][T16138] vhci_hcd vhci_hcd.0: Device attached [ 641.579445][T16152] vhci_hcd: connection closed [ 641.580795][ T12] vhci_hcd vhci_hcd.3: stop threads [ 641.584400][ T12] vhci_hcd vhci_hcd.3: release socket [ 641.586199][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 641.742076][T16160] [U] V3Fپ"S/4:XTZWTLW= [ 641.745837][T16160] [U] J"E:" [ 642.311132][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 642.782185][T16173] xt_l2tp: missing protocol rule (udp|l2tpip) [ 642.889964][T16172] netlink: 'syz.5.2930': attribute type 5 has an invalid length. [ 642.894387][ T40] audit: type=1326 audit(1774522863.963:4286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16171 comm="syz.5.2930" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f17f6c code=0x0 [ 643.797645][T16194] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 643.799846][T16194] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 643.810937][T16194] vhci_hcd vhci_hcd.0: Device attached [ 643.823169][T16194] FAULT_INJECTION: forcing a failure. [ 643.823169][T16194] name failslab, interval 1, probability 0, space 0, times 0 [ 643.827267][T16194] CPU: 1 UID: 0 PID: 16194 Comm: syz.3.2933 Tainted: G L syzkaller #0 PREEMPT(full) [ 643.827286][T16194] Tainted: [L]=SOFTLOCKUP [ 643.827290][T16194] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 643.827296][T16194] Call Trace: [ 643.827301][T16194] [ 643.827306][T16194] dump_stack_lvl+0x100/0x190 [ 643.827326][T16194] should_fail_ex.cold+0x5/0xa [ 643.827340][T16194] should_failslab+0xc2/0x120 [ 643.827352][T16194] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 643.827370][T16194] ? __alloc_skb+0x140/0x710 [ 643.827388][T16194] __alloc_skb+0x140/0x710 [ 643.827402][T16194] ? __alloc_skb+0x5b7/0x710 [ 643.827416][T16194] ? __pfx___alloc_skb+0x10/0x10 [ 643.827435][T16194] netlink_alloc_large_skb+0x69/0x150 [ 643.827455][T16194] netlink_sendmsg+0x680/0xda0 [ 643.827467][T16194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 643.827479][T16194] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 643.827499][T16194] ____sys_sendmsg+0x9e1/0xb70 [ 643.827510][T16194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 643.827521][T16194] ? __pfx_____sys_sendmsg+0x10/0x10 [ 643.827540][T16194] ___sys_sendmsg+0x190/0x1e0 [ 643.827553][T16194] ? __pfx____sys_sendmsg+0x10/0x10 [ 643.827599][T16194] __sys_sendmsg+0x170/0x220 [ 643.827619][T16194] ? __pfx___sys_sendmsg+0x10/0x10 [ 643.827640][T16194] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 643.827658][T16194] __do_fast_syscall_32+0xe3/0x8c0 [ 643.827677][T16194] do_fast_syscall_32+0x32/0x70 [ 643.827688][T16194] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 643.827702][T16194] RIP: 0023:0xf7f92f6c [ 643.827711][T16194] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 643.827721][T16194] RSP: 002b:00000000f541450c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 643.827733][T16194] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800003c0 [ 643.827740][T16194] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 643.827746][T16194] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 643.827752][T16194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.827758][T16194] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 643.827776][T16194] [ 644.070700][ T829] usb 43-1: new high-speed USB device number 3 using vhci_hcd [ 644.231688][ T167] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 644.317661][T16195] vhci_hcd: connection reset by peer [ 644.319624][ T189] vhci_hcd vhci_hcd.3: stop threads [ 644.321618][ T189] vhci_hcd vhci_hcd.3: release socket [ 644.323986][ T189] vhci_hcd vhci_hcd.3: disconnect device [ 644.420935][T16205] program syz.2.2939 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 644.471102][ T1113] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 644.474249][ T1113] ata1.00: irq_stat 0x40000000 [ 644.476314][ T1113] ata1.00: failed command: ZAC MANAGEMENT OUT [ 644.478365][ T1113] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 11 [ 644.478365][ T1113] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 644.484420][ T1113] ata1.00: status: { DRDY ERR } [ 644.486109][ T1113] ata1.00: error: { ABRT } [ 644.487643][ T1113] ata1.00: device reported invalid CHS sector 0 [ 644.491084][T16205] futex_wake_op: syz.2.2939 tries to shift op by 144; fix this program [ 644.670772][ T40] audit: type=1326 audit(1774522865.733:4287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16209 comm="syz.4.2941" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3f6c code=0x7ffc0000 [ 644.677905][ T40] audit: type=1326 audit(1774522865.743:4288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16209 comm="syz.4.2941" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3f6c code=0x7ffc0000 [ 644.685197][ T40] audit: type=1326 audit(1774522865.743:4289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16209 comm="syz.4.2941" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fb3f6c code=0x7ffc0000 [ 644.692281][T16214] xt_l2tp: missing protocol rule (udp|l2tpip) [ 644.695193][ T40] audit: type=1326 audit(1774522865.743:4290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16209 comm="syz.4.2941" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3f6c code=0x7ffc0000 [ 644.702820][ T40] audit: type=1326 audit(1774522865.743:4291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16209 comm="syz.4.2941" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3f6c code=0x7ffc0000 [ 644.710016][ T40] audit: type=1326 audit(1774522865.743:4292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16209 comm="syz.4.2941" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7fb3f6c code=0x7ffc0000 [ 644.717701][ T40] audit: type=1326 audit(1774522865.743:4293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16209 comm="syz.4.2941" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3f6c code=0x7ffc0000 [ 644.724757][ T40] audit: type=1326 audit(1774522865.743:4294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16209 comm="syz.4.2941" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7fb3f6c code=0x7ffc0000 [ 644.731534][ T40] audit: type=1326 audit(1774522865.743:4295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16209 comm="syz.4.2941" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3f6c code=0x7ffc0000 [ 644.737324][T16213] lo speed is unknown, defaulting to 1000 [ 644.798007][T16212] netlink: 'syz.2.2942': attribute type 5 has an invalid length. [ 644.864364][T16213] wg1 speed is unknown, defaulting to 1000 [ 645.008386][T16220] siw: device registration error -23 [ 645.040735][ T1023] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 645.213057][ T1023] usb 9-1: config 0 has no interfaces? [ 645.219549][ T1023] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 645.223046][ T1023] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.225758][ T1023] usb 9-1: Product: syz [ 645.227298][ T1023] usb 9-1: Manufacturer: syz [ 645.229075][ T1023] usb 9-1: SerialNumber: syz [ 645.238408][ T1023] usb 9-1: config 0 descriptor?? [ 645.253006][ C3] ata1: illegal qc_active transition (00000000->00080000) [ 645.572086][ T1113] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 645.578982][ T1113] ata1.00: configured for UDMA/100 [ 645.766990][T16232] dlm: no locking on control device [ 645.873409][T16239] overlayfs: failed to resolve './file1': -2 [ 646.040368][T16243] [U] V3Fپ"S/4:XTZWTLW= [ 646.043008][T16243] [U] J"E:" [ 646.248292][T16249] [U] V3Fپ"S/4:XTZWTLW= [ 646.964409][T16251] comedi comedi0: Minor 2 could not be opened [ 646.984879][T16246] [U] J"E:" [ 647.029797][T16256] syzkaller0: entered promiscuous mode [ 647.032208][T16256] syzkaller0: entered allmulticast mode [ 647.430791][ T60] usb 10-1: new full-speed USB device number 25 using dummy_hcd [ 647.560797][ T60] usb 10-1: device descriptor read/64, error -71 [ 647.580725][ T9] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 647.621395][ T6024] usb 9-1: USB disconnect, device number 16 [ 647.725595][T16274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2960'. [ 647.760964][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 647.765345][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 647.768951][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 647.772592][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 647.775947][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 647.780677][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 647.783530][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.800918][ T60] usb 10-1: new full-speed USB device number 26 using dummy_hcd [ 647.930759][ T60] usb 10-1: device descriptor read/64, error -71 [ 648.030755][ T939] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 648.032110][ T9] usb 7-1: GET_CAPABILITIES returned 0 [ 648.035262][ T9] usbtmc 7-1:16.0: can't read capabilities [ 648.050126][ T60] usb usb10-port1: attempt power cycle [ 648.068152][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 648.068163][ T40] audit: type=1326 audit(1774522869.133:4314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16283 comm="syz.3.2964" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92f6c code=0x7ffc0000 [ 648.077347][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 648.081641][ T40] audit: type=1326 audit(1774522869.143:4315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16283 comm="syz.3.2964" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f92f6c code=0x7ffc0000 [ 648.091972][ T40] audit: type=1326 audit(1774522869.143:4316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16283 comm="syz.3.2964" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92f6c code=0x7ffc0000 [ 648.098942][ T40] audit: type=1326 audit(1774522869.143:4317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16283 comm="syz.3.2964" exe="/syz-executor" sig=0 arch=40000003 syscall=369 compat=1 ip=0xf7f92f6c code=0x7ffc0000 [ 648.106438][ T40] audit: type=1326 audit(1774522869.143:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16283 comm="syz.3.2964" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92f6c code=0x7ffc0000 [ 648.117531][ T40] audit: type=1326 audit(1774522869.143:4319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16283 comm="syz.3.2964" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf7f92f6c code=0x7ffc0000 [ 648.124459][ T40] audit: type=1326 audit(1774522869.143:4320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16283 comm="syz.3.2964" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92f6c code=0x7ffc0000 [ 648.131239][ T40] audit: type=1326 audit(1774522869.143:4321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16283 comm="syz.3.2964" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f92f6c code=0x7ffc0000 [ 648.138087][ T40] audit: type=1326 audit(1774522869.143:4322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16283 comm="syz.3.2964" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92f6c code=0x7ffc0000 [ 648.144914][ T40] audit: type=1326 audit(1774522869.143:4323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16283 comm="syz.3.2964" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f92f6c code=0x7ffc0000 [ 648.180714][ T939] usb 9-1: Using ep0 maxpacket: 8 [ 648.183786][ T939] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 648.187371][ T939] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 648.190519][ T939] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 648.193757][ T939] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 648.197812][ T939] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 648.200784][ T939] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.237974][ T50] usb 7-1: USB disconnect, device number 28 [ 648.400886][ T60] usb 10-1: new full-speed USB device number 27 using dummy_hcd [ 648.410234][ T939] usb 9-1: GET_CAPABILITIES returned 0 [ 648.412178][ T939] usbtmc 9-1:16.0: can't read capabilities [ 648.421237][ T60] usb 10-1: device descriptor read/8, error -71 [ 648.613954][T16278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.618040][T16278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.623187][ C1] usbtmc 9-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 648.636521][T16278] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 648.645232][ T939] usb 9-1: USB disconnect, device number 17 [ 648.680784][ T60] usb 10-1: new full-speed USB device number 28 using dummy_hcd [ 648.701546][ T60] usb 10-1: device descriptor read/8, error -71 [ 648.820800][ T60] usb usb10-port1: unable to enumerate USB device [ 648.884990][T16295] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2966'. [ 649.031430][T16301] xt_l2tp: missing protocol rule (udp|l2tpip) [ 649.141924][T16308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2969'. [ 649.143109][T16299] netlink: 'syz.2.2967': attribute type 5 has an invalid length. [ 649.191039][ T829] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 649.354572][T16316] netlink: 'syz.4.2970': attribute type 1 has an invalid length. [ 649.357011][T16316] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2970'. [ 649.408495][T16316] bridge0: entered promiscuous mode [ 649.411246][T16316] macvlan2: entered promiscuous mode [ 649.530869][T16319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2973'. [ 649.585968][T16329] syzkaller0: entered promiscuous mode [ 649.588108][T16329] syzkaller0: entered allmulticast mode [ 649.992257][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 650.300809][ T9] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 650.450774][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 650.454871][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 650.459907][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 650.464621][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 650.468774][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 650.474141][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 650.478008][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.696532][ T9] usb 7-1: GET_CAPABILITIES returned 0 [ 650.700741][ T9] usbtmc 7-1:16.0: can't read capabilities [ 650.898654][T16342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.902251][T16342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.906478][ C2] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 650.922922][T16342] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 650.929611][ T829] usb 7-1: USB disconnect, device number 29 [ 651.140376][T16352] netlink: 'syz.5.2983': attribute type 1 has an invalid length. [ 651.146886][T16352] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2983'. [ 652.272807][T16355] macvlan2: entered promiscuous mode [ 652.275844][T16355] bridge0: entered promiscuous mode [ 652.380268][T16378] xt_l2tp: missing protocol rule (udp|l2tpip) [ 653.831569][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 654.229660][T16397] FAULT_INJECTION: forcing a failure. [ 654.229660][T16397] name failslab, interval 1, probability 0, space 0, times 0 [ 654.233993][T16397] CPU: 1 UID: 0 PID: 16397 Comm: syz.3.2991 Tainted: G L syzkaller #0 PREEMPT(full) [ 654.234031][T16397] Tainted: [L]=SOFTLOCKUP [ 654.234037][T16397] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 654.234047][T16397] Call Trace: [ 654.234053][T16397] [ 654.234061][T16397] dump_stack_lvl+0x100/0x190 [ 654.234089][T16397] should_fail_ex.cold+0x5/0xa [ 654.234109][T16397] should_failslab+0xc2/0x120 [ 654.234124][T16397] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 654.234142][T16397] ? __alloc_skb+0x140/0x710 [ 654.234160][T16397] __alloc_skb+0x140/0x710 [ 654.234175][T16397] ? __alloc_skb+0x5b7/0x710 [ 654.234189][T16397] ? __pfx___alloc_skb+0x10/0x10 [ 654.234209][T16397] netlink_alloc_large_skb+0x69/0x150 [ 654.234229][T16397] netlink_sendmsg+0x680/0xda0 [ 654.234242][T16397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 654.234254][T16397] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 654.234275][T16397] ____sys_sendmsg+0x9e1/0xb70 [ 654.234286][T16397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 654.234298][T16397] ? __pfx_____sys_sendmsg+0x10/0x10 [ 654.234317][T16397] ___sys_sendmsg+0x190/0x1e0 [ 654.234330][T16397] ? __pfx____sys_sendmsg+0x10/0x10 [ 654.234361][T16397] __sys_sendmsg+0x170/0x220 [ 654.234378][T16397] ? __pfx___sys_sendmsg+0x10/0x10 [ 654.234399][T16397] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 654.234417][T16397] __do_fast_syscall_32+0xe3/0x8c0 [ 654.234437][T16397] do_fast_syscall_32+0x32/0x70 [ 654.234447][T16397] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 654.234461][T16397] RIP: 0023:0xf7f92f6c [ 654.234471][T16397] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 654.234481][T16397] RSP: 002b:00000000f541450c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 654.234492][T16397] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000800003c0 [ 654.234499][T16397] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 654.234504][T16397] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 654.234510][T16397] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 654.234517][T16397] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 654.234531][T16397] [ 654.527392][T16391] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 654.530293][T16391] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 654.535037][T16391] vhci_hcd vhci_hcd.0: Device attached [ 654.537354][T16395] vhci_hcd: connection closed [ 654.537773][ T59] vhci_hcd vhci_hcd.3: stop threads [ 654.542191][ T59] vhci_hcd vhci_hcd.3: release socket [ 654.544848][ T59] vhci_hcd vhci_hcd.3: disconnect device [ 655.043236][T16405] syzkaller0: entered promiscuous mode [ 655.045059][T16405] syzkaller0: entered allmulticast mode [ 655.285597][T16412] loop9: detected capacity change from 0 to 7 [ 655.288465][T13614] buffer_io_error: 13 callbacks suppressed [ 655.288476][T13614] Buffer I/O error on dev loop9, logical block 0, async page read [ 655.293181][T13614] Buffer I/O error on dev loop9, logical block 0, async page read [ 655.295603][T13614] Buffer I/O error on dev loop9, logical block 0, async page read [ 655.297992][T13614] Buffer I/O error on dev loop9, logical block 0, async page read [ 655.300442][T13614] Buffer I/O error on dev loop9, logical block 0, async page read [ 655.303265][T13614] Buffer I/O error on dev loop9, logical block 0, async page read [ 655.305674][T13614] Buffer I/O error on dev loop9, logical block 0, async page read [ 655.308084][T13614] ldm_validate_partition_table(): Disk read failed. [ 655.310116][T13614] Buffer I/O error on dev loop9, logical block 0, async page read [ 655.320985][T13614] Buffer I/O error on dev loop9, logical block 0, async page read [ 655.323562][T13614] Buffer I/O error on dev loop9, logical block 0, async page read [ 655.326038][T13614] Dev loop9: unable to read RDB block 0 [ 655.327825][T13614] loop9: unable to read partition table [ 655.329745][T13614] loop9: partition table beyond EOD, truncated [ 655.752325][ T167] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 656.304482][T16422] xt_l2tp: missing protocol rule (udp|l2tpip) [ 656.307720][T16412] ldm_validate_partition_table(): Disk read failed. [ 656.310419][T16412] Dev loop9: unable to read RDB block 0 [ 656.372687][T16414] loop9: detected capacity change from 7 to 0 [ 656.378160][T16412] loop9: unable to read partition table [ 656.380682][T16412] loop9: partition table beyond EOD, truncated [ 656.383228][T16412] loop_reread_partitions: partition scan of loop9 ( DiXK׉j̔S{C(zU-1`\ uRtOүj) failed (rc=-5) [ 656.453019][T16420] netlink: 'syz.3.3001': attribute type 5 has an invalid length. [ 656.468480][T16428] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 656.471069][T16428] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 656.474499][T16428] vhci_hcd vhci_hcd.0: Device attached [ 656.508747][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 656.508762][ T40] audit: type=1326 audit(1774522877.573:4338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16419 comm="syz.3.3001" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f92f6c code=0x0 [ 656.528169][T16428] random: crng reseeded on system resumption [ 656.830747][T15001] usb 46-1: SetAddress Request (10) to port 0 [ 656.832745][T15001] usb 46-1: new SuperSpeed USB device number 10 using vhci_hcd [ 656.851620][T16442] /dev/sr0: Can't open blockdev [ 657.450793][T16429] vhci_hcd: connection reset by peer [ 657.501013][ T1222] vhci_hcd vhci_hcd.4: stop threads [ 657.503161][ T1222] vhci_hcd vhci_hcd.4: release socket [ 657.505726][ T1222] vhci_hcd vhci_hcd.4: disconnect device [ 657.905406][T16449] lo speed is unknown, defaulting to 1000 [ 658.007464][T16454] syzkaller0: entered promiscuous mode [ 658.009888][T16454] syzkaller0: entered allmulticast mode [ 658.161387][T16449] wg1 speed is unknown, defaulting to 1000 [ 658.342641][T16441] /dev/sr0: Can't open blockdev [ 658.363588][T16462] netlink: 'syz.2.3009': attribute type 8 has an invalid length. [ 658.780245][T16471] syzkaller0: entered promiscuous mode [ 658.784390][T16475] xt_l2tp: missing protocol rule (udp|l2tpip) [ 658.788110][T16471] syzkaller0: entered allmulticast mode [ 658.896155][T16474] netlink: 'syz.5.3013': attribute type 5 has an invalid length. [ 658.908792][ T40] audit: type=1326 audit(1774522879.973:4339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16473 comm="syz.5.3013" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f17f6c code=0x0 [ 659.595674][ T1222] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 660.801618][ T153] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 660.860720][T16485] syzkaller0: entered promiscuous mode [ 660.862758][T16485] syzkaller0: entered allmulticast mode [ 661.679375][T16513] [U] V3Fپ"S/4:XTZWTLW= [ 661.681979][T16513] [U] J"E:" [ 661.920814][T15001] usb 46-1: device descriptor read/8, error -110 [ 662.111491][T16515] binder: 16514:16515 ioctl c0306201 80000680 returned -14 [ 663.780063][T15001] usb usb46-port1: attempt power cycle [ 663.826123][T16529] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 663.828430][T16529] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 663.834796][T16529] vhci_hcd vhci_hcd.0: Device attached [ 663.857493][T16529] random: crng reseeded on system resumption [ 664.058449][ T6024] libceph: connect (1)[c::]:6789 error -101 [ 664.062578][ T6024] libceph: mon0 (1)[c::]:6789 connect error [ 664.153810][T16521] ceph: No mds server is up or the cluster is laggy [ 664.171145][ T939] usb 42-1: SetAddress Request (6) to port 0 [ 664.174525][ T939] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 664.192797][T16537] syzkaller0: entered promiscuous mode [ 664.194873][T16537] syzkaller0: entered allmulticast mode [ 664.299974][T16530] vhci_hcd: connection reset by peer [ 664.311862][ T59] vhci_hcd vhci_hcd.2: stop threads [ 664.313562][ T59] vhci_hcd vhci_hcd.2: release socket [ 664.321656][ T59] vhci_hcd vhci_hcd.2: disconnect device [ 664.373602][T15001] usb usb46-port1: unable to enumerate USB device [ 664.631122][ T153] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 665.800736][T16568] comedi comedi3: comedi_config --init_data is deprecated [ 666.296624][T16582] [U] V3Fپ"S/4:XTZWTLW= [ 666.300000][T16582] [U] J"E:" [ 667.055593][ T189] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 667.733640][T16588] usb usb7: usbfs: interface 0 claimed by hub while 'syz.4.3038' resets device [ 667.793413][T16588] sctp: [Deprecated]: syz.4.3038 (pid 16588) Use of struct sctp_assoc_value in delayed_ack socket option. [ 667.793413][T16588] Use struct sctp_sack_info instead [ 667.801439][T16588] tipc: Started in network mode [ 667.803165][T16588] tipc: Node identity , cluster identity 4711 [ 667.805675][T16588] tipc: Failed to obtain node identity [ 667.807886][T16588] tipc: Enabling of bearer rejected, failed to enable media [ 667.812728][T16588] netlink: 'syz.4.3038': attribute type 8 has an invalid length. [ 667.855354][T16588] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3038'. [ 667.913276][T16593] syzkaller0: entered promiscuous mode [ 667.915206][T16593] syzkaller0: entered allmulticast mode [ 667.986879][T16597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3040'. [ 667.989807][T16597] FAULT_INJECTION: forcing a failure. [ 667.989807][T16597] name failslab, interval 1, probability 0, space 0, times 0 [ 667.994858][T16597] CPU: 1 UID: 0 PID: 16597 Comm: syz.2.3040 Tainted: G L syzkaller #0 PREEMPT(full) [ 667.994876][T16597] Tainted: [L]=SOFTLOCKUP [ 667.994880][T16597] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 667.994887][T16597] Call Trace: [ 667.994891][T16597] [ 667.994895][T16597] dump_stack_lvl+0x100/0x190 [ 667.994918][T16597] should_fail_ex.cold+0x5/0xa [ 667.994938][T16597] should_failslab+0xc2/0x120 [ 667.994951][T16597] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 667.994968][T16597] ? skb_clone+0x190/0x400 [ 667.994983][T16597] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 667.995004][T16597] skb_clone+0x190/0x400 [ 667.995021][T16597] genlmsg_multicast_allns+0x1a0/0x590 [ 667.995036][T16597] l2tp_session_notify.constprop.0+0xfc/0x150 [ 667.995055][T16597] l2tp_nl_cmd_session_delete+0x39/0x190 [ 667.995071][T16597] genl_family_rcv_msg_doit+0x214/0x300 [ 667.995085][T16597] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 667.995097][T16597] ? genl_get_cmd+0x3ef/0x720 [ 667.995112][T16597] ? bpf_lsm_capable+0x9/0x10 [ 667.995124][T16597] ? security_capable+0x80/0x260 [ 667.995142][T16597] ? ns_capable+0xd2/0xf0 [ 667.995155][T16597] genl_rcv_msg+0x560/0x800 [ 667.995169][T16597] ? __pfx_genl_rcv_msg+0x10/0x10 [ 667.995181][T16597] ? __pfx_l2tp_nl_cmd_session_delete+0x10/0x10 [ 667.995200][T16597] ? __lock_acquire+0x4a5/0x2630 [ 667.995217][T16597] netlink_rcv_skb+0x159/0x420 [ 667.995227][T16597] ? __pfx_genl_rcv_msg+0x10/0x10 [ 667.995240][T16597] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 667.995257][T16597] ? netlink_deliver_tap+0x1ae/0xcc0 [ 667.995277][T16597] genl_rcv+0x28/0x40 [ 667.995292][T16597] netlink_unicast+0x5aa/0x870 [ 667.995319][T16597] ? __pfx_netlink_unicast+0x10/0x10 [ 667.995350][T16597] netlink_sendmsg+0x8b0/0xda0 [ 667.995367][T16597] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.995388][T16597] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 667.995418][T16597] ____sys_sendmsg+0x9e1/0xb70 [ 667.995457][T16597] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.995474][T16597] ? __pfx_____sys_sendmsg+0x10/0x10 [ 667.995501][T16597] ___sys_sendmsg+0x190/0x1e0 [ 667.995520][T16597] ? __pfx____sys_sendmsg+0x10/0x10 [ 667.995568][T16597] __sys_sendmsg+0x170/0x220 [ 667.995592][T16597] ? __pfx___sys_sendmsg+0x10/0x10 [ 667.995614][T16597] ? __pfx_ksys_write+0x10/0x10 [ 667.995629][T16597] __do_fast_syscall_32+0xe3/0x8c0 [ 667.995649][T16597] do_fast_syscall_32+0x32/0x70 [ 667.995659][T16597] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 667.995675][T16597] RIP: 0023:0xf6fdef6c [ 667.995685][T16597] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 667.995696][T16597] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 667.995706][T16597] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 667.995713][T16597] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 667.995720][T16597] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 667.995726][T16597] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 667.995732][T16597] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 667.995747][T16597] [ 668.058508][T16599] syzkaller0: entered promiscuous mode [ 668.107803][T16599] syzkaller0: entered allmulticast mode [ 668.132870][T16604] [U] V3Fپ"S/4:XTZWTLW= [ 668.419614][T16614] netlink: 'syz.4.3044': attribute type 1 has an invalid length. [ 668.423486][T16614] nbd: illegal input index -1495182229 [ 668.670999][T16623] [U] J"E:" [ 668.673177][T16623] [U] J"E:" [ 669.266275][T16633] syzkaller0: entered promiscuous mode [ 669.268241][T16633] syzkaller0: entered allmulticast mode [ 669.282875][ T939] usb 42-1: device descriptor read/8, error -110 [ 669.395961][T16635] syzkaller0: entered promiscuous mode [ 669.398193][T16635] syzkaller0: entered allmulticast mode [ 669.672351][ T939] usb usb42-port1: attempt power cycle [ 669.693779][T16647] binder: 16646:16647 ioctl 81e8943c 80000580 returned -22 [ 669.696944][T16647] binder: 16646:16647 ioctl 5000943f 80000980 returned -22 [ 669.841878][ T189] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 670.102753][T16661] [U] V3Fپ"S/4:XTZWTLW= [ 670.156475][T16662] random: crng reseeded on system resumption [ 670.195622][T16664] syzkaller0: entered promiscuous mode [ 670.197409][T16664] syzkaller0: entered allmulticast mode [ 670.241405][ T939] usb usb42-port1: unable to enumerate USB device [ 670.295791][T16668] syzkaller0: entered promiscuous mode [ 670.297563][T16668] syzkaller0: entered allmulticast mode [ 670.631766][T16674] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 670.636252][T16674] block device autoloading is deprecated and will be removed. [ 670.644042][T16670] kernel read not supported for file /file0 (pid: 16670 comm: syz.5.3066) [ 670.649374][ T40] audit: type=1800 audit(1774522891.713:4340): pid=16670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3066" name="file0" dev="mqueue" ino=63545 res=0 errno=0 [ 670.830023][T16654] [U] J"E:" [ 670.957739][T16684] Bluetooth: MGMT ver 1.23 [ 671.022446][T16688] FAULT_INJECTION: forcing a failure. [ 671.022446][T16688] name failslab, interval 1, probability 0, space 0, times 0 [ 671.027161][T16688] CPU: 2 UID: 0 PID: 16688 Comm: syz.4.3072 Tainted: G L syzkaller #0 PREEMPT(full) [ 671.027180][T16688] Tainted: [L]=SOFTLOCKUP [ 671.027184][T16688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 671.027191][T16688] Call Trace: [ 671.027196][T16688] [ 671.027200][T16688] dump_stack_lvl+0x100/0x190 [ 671.027221][T16688] should_fail_ex.cold+0x5/0xa [ 671.027235][T16688] ? __list_lru_init+0xd9/0x4b0 [ 671.027251][T16688] should_failslab+0xc2/0x120 [ 671.027264][T16688] __kmalloc_noprof+0xe0/0x850 [ 671.027281][T16688] ? lockdep_init_map_type+0x5c/0x250 [ 671.027298][T16688] __list_lru_init+0xd9/0x4b0 [ 671.027316][T16688] alloc_super+0x8d8/0xd20 [ 671.027334][T16688] ? __pfx_mqueue_fill_super+0x10/0x10 [ 671.027351][T16688] sget_fc+0x117/0xc70 [ 671.027368][T16688] ? __pfx_set_anon_super_fc+0x10/0x10 [ 671.027385][T16688] ? __pfx_mqueue_fill_super+0x10/0x10 [ 671.027401][T16688] get_tree_nodev+0x28/0x190 [ 671.027498][T16688] mqueue_get_tree+0xf1/0x130 [ 671.027515][T16688] vfs_get_tree+0x92/0x320 [ 671.027531][T16688] fc_mount_longterm+0x1a/0x270 [ 671.027549][T16688] mq_init_ns+0x482/0x820 [ 671.027562][T16688] copy_ipcs+0x3dd/0x7e0 [ 671.027575][T16688] create_new_namespaces+0x20a/0xac0 [ 671.027588][T16688] ? security_capable+0x80/0x260 [ 671.027610][T16688] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 671.027624][T16688] ksys_unshare+0x473/0xad0 [ 671.027639][T16688] ? __pfx_ksys_unshare+0x10/0x10 [ 671.027656][T16688] ? __pfx_ksys_write+0x10/0x10 [ 671.027669][T16688] __ia32_sys_unshare+0x30/0x40 [ 671.027683][T16688] __do_fast_syscall_32+0xe3/0x8c0 [ 671.027703][T16688] do_fast_syscall_32+0x32/0x70 [ 671.027714][T16688] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 671.027729][T16688] RIP: 0023:0xf7fb3f6c [ 671.027738][T16688] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 671.027749][T16688] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 671.027759][T16688] RAX: ffffffffffffffda RBX: 000000006a040000 RCX: 0000000000000000 [ 671.027766][T16688] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 671.027773][T16688] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 671.027778][T16688] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 671.027784][T16688] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 671.027800][T16688] [ 671.085122][T16690] [U] V3Fپ"S/4:XTZWTLW= [ 671.111590][T16690] [U] J"E:" [ 671.890994][T16705] lo speed is unknown, defaulting to 1000 [ 671.993093][T16705] wg1 speed is unknown, defaulting to 1000 [ 672.234595][T16720] syzkaller0: entered promiscuous mode [ 672.236574][T16720] syzkaller0: entered allmulticast mode [ 672.400972][ T189] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 672.472047][T16726] netlink: 'syz.2.3081': attribute type 7 has an invalid length. [ 672.505761][ T1222] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.509011][ T1222] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.512460][ T1222] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.516271][ T1222] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.719099][T16732] netfs: Couldn't get user pages (rc=-14) [ 672.768081][T16733] ------------[ cut here ]------------ [ 672.770168][T16733] kernel BUG at fs/netfs/iterator.c:248! [ 672.782724][T16733] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 672.784821][T16733] CPU: 2 UID: 0 PID: 16733 Comm: syz.3.3083 Tainted: G L syzkaller #0 PREEMPT(full) [ 672.788418][T16733] Tainted: [L]=SOFTLOCKUP [ 672.789792][T16733] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 672.793633][T16733] RIP: 0010:netfs_limit_iter+0x100d/0x1100 [ 672.796227][T16733] Code: ff e9 a4 f4 ff ff 48 89 de 48 c7 c7 80 b6 ab 8e e8 f8 e7 75 fe e9 59 f6 ff ff e8 4e 35 b2 ff e9 6f f6 ff ff e8 a4 9e 46 ff 90 <0f> 0b e8 ac 34 b2 ff e9 cd f9 ff ff 4c 89 f6 48 c7 c7 00 b7 ab 8e [ 672.804230][T16733] RSP: 0018:ffffc90006b8ece8 EFLAGS: 00010283 [ 672.806751][T16733] RAX: 00000000000096ad RBX: 0000000000000000 RCX: ffffc90028061000 [ 672.810035][T16733] RDX: 0000000000080000 RSI: ffffffff82c18e7c RDI: ffff888028e70000 [ 672.813357][T16733] RBP: 0000000000000003 R08: 0000000000000001 R09: 0000000000000005 [ 672.816721][T16733] R10: 0000000000000003 R11: 0000000000000000 R12: 000000007fffffff [ 672.820011][T16733] R13: 1ffff92000d71da3 R14: ffff8880715422e0 R15: ffff88802124f840 [ 672.823378][T16733] FS: 0000000000000000(0000) GS:ffff888097346000(0063) knlGS:00000000f5435b40 [ 672.827138][T16733] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 672.829921][T16733] CR2: 000055c25ce9d000 CR3: 0000000058027000 CR4: 0000000000352ef0 [ 672.833278][T16733] Call Trace: [ 672.834723][T16733] [ 672.836002][T16733] ? do_raw_spin_lock+0x128/0x260 [ 672.838131][T16733] ? find_held_lock+0x2b/0x80 [ 672.840152][T16733] ? __pfx_netfs_limit_iter+0x10/0x10 [ 672.842476][T16733] ? do_raw_spin_unlock+0x145/0x1e0 [ 672.844608][T16733] ? _raw_spin_unlock+0x28/0x50 [ 672.846596][T16733] ? netfs_prepare_write+0x486/0x7a0 [ 672.848743][T16733] netfs_unbuffered_write+0x25d/0x2080 [ 672.851009][T16733] netfs_unbuffered_write_iter_locked+0x801/0xab0 [ 672.853092][T16733] netfs_unbuffered_write_iter+0x40c/0x710 [ 672.854960][T16733] ? __pfx_v9fs_file_write_iter+0x10/0x10 [ 672.856865][T16733] v9fs_file_write_iter+0xbf/0x100 [ 672.858962][T16733] __kernel_write_iter+0x2ac/0x920 [ 672.861143][T16733] ? __pfx___kernel_write_iter+0x10/0x10 [ 672.863615][T16733] ? kasan_save_stack+0x3f/0x50 [ 672.865705][T16733] ? kasan_save_stack+0x30/0x50 [ 672.867798][T16733] ? exit_to_user_mode_loop+0x86/0x4a0 [ 672.870091][T16733] ? __do_fast_syscall_32+0x578/0x8c0 [ 672.872413][T16733] ? do_fast_syscall_32+0x32/0x70 [ 672.874550][T16733] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 672.877312][T16733] __kernel_write+0xf6/0x140 [ 672.879286][T16733] ? __pfx___kernel_write+0x10/0x10 [ 672.881519][T16733] dump_emit+0x21f/0x330 [ 672.883352][T16733] ? __pfx_dump_emit+0x10/0x10 [ 672.885405][T16733] elf_core_dump+0x24ab/0x42e0 [ 672.887462][T16733] ? __pfx_elf_core_dump+0x10/0x10 [ 672.889638][T16733] ? kasan_save_stack+0x30/0x50 [ 672.891731][T16733] ? __kasan_kmalloc+0xaa/0xb0 [ 672.893828][T16733] ? __kvmalloc_node_noprof+0x360/0xa00 [ 672.896193][T16733] ? vfs_coredump+0x2105/0x5570 [ 672.898276][T16733] ? arch_do_signal_or_restart+0x91/0x770 [ 672.900691][T16733] ? exit_to_user_mode_loop+0x86/0x4a0 [ 672.903068][T16733] ? __do_fast_syscall_32+0x578/0x8c0 [ 672.905411][T16733] ? vfs_coredump+0x27bc/0x5570 [ 672.907470][T16733] vfs_coredump+0x27bc/0x5570 [ 672.909492][T16733] ? __pfx_vfs_coredump+0x10/0x10 [ 672.911643][T16733] ? __lock_acquire+0x4a5/0x2630 [ 672.913780][T16733] ? lock_acquire+0x1cf/0x380 [ 672.915820][T16733] ? is_bpf_text_address+0x8a/0x1a0 [ 672.918032][T16733] ? bpf_ksym_find+0x124/0x1c0 [ 672.920084][T16733] ? __kernel_text_address+0xd/0x30 [ 672.922300][T16733] ? unwind_get_return_address+0x59/0xa0 [ 672.924671][T16733] ? arch_stack_walk+0xa6/0xf0 [ 672.926701][T16733] ? __sigqueue_free+0xbe/0x2a0 [ 672.928733][T16733] ? stack_trace_save+0x8e/0xc0 [ 672.930799][T16733] ? __pfx_stack_trace_save+0x10/0x10 [ 672.933070][T16733] ? stack_depot_save_flags+0x27/0x9d0 [ 672.935386][T16733] ? __lock_acquire+0x4a5/0x2630 [ 672.937527][T16733] ? do_fast_syscall_32+0x32/0x70 [ 672.939688][T16733] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 672.942448][T16733] ? proc_coredump_connector+0x2d3/0x4f0 [ 672.944824][T16733] ? __pfx_proc_coredump_connector+0x10/0x10 [ 672.947296][T16733] ? rcu_is_watching+0x12/0xc0 [ 672.949369][T16733] get_signal+0x1f2a/0x21e0 [ 672.951316][T16733] ? __pfx_get_signal+0x10/0x10 [ 672.953434][T16733] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 672.955869][T16733] ? force_sig_info_to_task+0x4d2/0x660 [ 672.958076][T16733] arch_do_signal_or_restart+0x91/0x770 [ 672.960426][T16733] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 672.963008][T16733] exit_to_user_mode_loop+0x86/0x4a0 [ 672.965232][T16733] __do_fast_syscall_32+0x578/0x8c0 [ 672.967455][T16733] do_fast_syscall_32+0x32/0x70 [ 672.969520][T16733] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 672.972189][T16733] RIP: 0023:0xf7f92f6c [ 672.973922][T16733] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 672.981897][T16733] RSP: 002b:00000000f54355cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 672.985389][T16733] RAX: ffffffffffffffda RBX: 00000000f7455024 RCX: 0000000000000081 [ 672.988662][T16733] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 672.991894][T16733] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 672.995102][T16733] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 672.998393][T16733] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 673.001710][T16733] [ 673.002993][T16733] Modules linked in: [ 673.005717][T16733] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 673.055448][T16733] RIP: 0010:netfs_limit_iter+0x100d/0x1100 [ 673.057604][T16733] Code: ff e9 a4 f4 ff ff 48 89 de 48 c7 c7 80 b6 ab 8e e8 f8 e7 75 fe e9 59 f6 ff ff e8 4e 35 b2 ff e9 6f f6 ff ff e8 a4 9e 46 ff 90 <0f> 0b e8 ac 34 b2 ff e9 cd f9 ff ff 4c 89 f6 48 c7 c7 00 b7 ab 8e [ 673.092004][T16733] RSP: 0018:ffffc90006b8ece8 EFLAGS: 00010283 [ 673.094277][T16733] RAX: 00000000000096ad RBX: 0000000000000000 RCX: ffffc90028061000 [ 673.097453][T16733] RDX: 0000000000080000 RSI: ffffffff82c18e7c RDI: ffff888028e70000 [ 673.100450][T16733] RBP: 0000000000000003 R08: 0000000000000001 R09: 0000000000000005 [ 673.103547][T16733] R10: 0000000000000003 R11: 0000000000000000 R12: 000000007fffffff [ 673.106659][T16733] R13: 1ffff92000d71da3 R14: ffff8880715422e0 R15: ffff88802124f840 [ 673.109611][T16733] FS: 0000000000000000(0000) GS:ffff888097346000(0063) knlGS:00000000f5435b40 [ 673.113335][T16733] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 673.115983][T16733] CR2: 000055c2248585fc CR3: 0000000058027000 CR4: 0000000000352ef0 [ 673.118599][T16733] Kernel panic - not syncing: Fatal exception [ 673.121129][T16733] Kernel Offset: disabled [ 673.122541][T16733] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:48:45 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000672 RBX=0000000000000002 RCX=0000000000000002 RDX=0000000000000002 RSI=ffff8880787e54d8 RDI=ffff8880787e4980 RBP=ffffc90006eef518 RSP=ffffc90006eef480 R8 =0000000000000001 R9 =0000000000000006 R10=0000000000000000 R11=0000000000000000 R12=ffff8880787e54d8 R13=ffff8880787e4980 R14=0000000000000004 R15=0000000000000005 RIP=ffffffff81e43f97 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097146000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555961bc8168 CR3=000000004f9e9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffff888068da1180 RCX=0000000000000000 RDX=0000000000000002 RSI=ffffffff8de80d8a RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc90006fff778 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff888068da18c0 R13=0000000000000202 R14=0000000000000001 R15=ffffffff81e1024d RIP=ffffffff81e10294 RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097246000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000800bd01c CR3=000000004f9e9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffff88807003aae0 RBX=ffffc9000404f2f8 RCX=0000000000000000 RDX=0000000000000002 RSI=ffff88807003a9d6 RDI=ffff88807003aae2 RBP=ffff88807003aae0 RSP=ffffc9000404f0f0 R8 =0000000000000001 R9 =ffffed100e00755c R10=ffff88807003aae1 R11=0000000000000000 R12=00000000000009d6 R13=0000000000000002 R14=00000000000009d4 R15=0000000000000000 RIP=ffffffff8b8dec2e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f9e2533e300 ffffffff 00c00000 GS =0000 ffff888097346000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055c25ce96000 CR3=000000004bed1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000c13 0000001400000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 08000480030c8008 0006080022080006 0073c21800000d3b 0000000b00000001 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ee6e8e15002fd63c 3d0000a94a000000 0910e4cf883483a5 786b4a0d574d25dc ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 006e628336271d63 0ef32581f9346bba f627f4b3b16411dd 3644edf19736ee27 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b55a000000000000 022d4174f65522a8 ffad930000000000 2b00954f5412a000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000300 000018299a0801ce 800301ce80040490 0306080004880302 ZMM24=fa37ebc6fa37ebc6 fa37ebc6fa37ebc6 fa37ebc6fa37ebc6 fa37ebc6fa37ebc6 fa37ebc6fa37ebc6 fa37ebc6fa37ebc6 fa37ebc6fa37ebc6 fa37ebc6fa37ebc6 ZMM25=a9688310a9688310 a9688310a9688310 a9688310a9688310 a9688310a9688310 a9688310a9688310 a9688310a9688310 a9688310a9688310 a9688310a9688310 ZMM26=e206013ee206013e e206013ee206013e e206013ee206013e e206013ee206013e e206013ee206013e e206013ee206013e e206013ee206013e e206013ee206013e ZMM27=b7ebadbbb7ebadbb b7ebadbbb7ebadbb b7ebadbbb7ebadbb b7ebadbbb7ebadbb b7ebadbbb7ebadbb b7ebadbbb7ebadbb b7ebadbbb7ebadbb b7ebadbbb7ebadbb ZMM28=000000400000003f 0000003e0000003d 0000003c0000003b 0000003a00000039 0000003800000037 0000003600000035 0000003400000033 0000003200000031 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=de130000de130000 de130000de130000 de130000de130000 de130000de130000 de130000de130000 de130000de130000 de130000de130000 de130000de130000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffea0001d78d80 RCX=ffffffff8248e58f RDX=ffff888040ec8000 RSI=0000000000000008 RDI=ffff888051dbd2a0 RBP=ffff888051dbd178 RSP=ffffc90002167168 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff888051dbd2a0 R13=0000000000000000 R14=ffffea0001d78d80 R15=0000000000000001 RIP=ffffffff8273c938 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097446000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000034e0fff8 CR3=000000005a9e7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003800000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000