last executing test programs: 15m16.836962919s ago: executing program 1 (id=1926): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002080)=@deltclass={0x112c, 0x29, 0x20, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0x4}, {0x9, 0x2}, {0xb}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x2}}, @tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x5f2094bd}}}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x64, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x80, 0x5}}, @TCA_HFSC_FSC={0x10, 0x2, {0x80, 0x2, 0x2}}, @TCA_HFSC_RSC={0x10, 0x1, {0xc, 0x1, 0xec6c}}, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x9, 0xc36}}, @TCA_HFSC_USC={0x10, 0x3, {0x9, 0x6, 0x3b167f7e}}, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x2000000, 0x9}}]}}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_htb={{0x8}, {0x1044, 0x2, [@TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RATE64={0xc, 0x6, 0x7f}, @TCA_HTB_RTAB={0x404, 0x4, [0x3, 0x23, 0x10000, 0x0, 0x5a, 0x2, 0x10000, 0x1, 0x33f, 0x5, 0x4, 0x6c, 0x7, 0x7, 0x80000000, 0xfffffff8, 0x80, 0x7fff, 0x5, 0x1, 0x6, 0x6, 0xf, 0x9, 0x3, 0x4, 0x54, 0x8001, 0xa519, 0x4, 0x7, 0x8, 0xffff, 0xfffeffff, 0x60000000, 0x3, 0xfffffffb, 0xfffffffe, 0x5, 0x5, 0x3, 0x3, 0x0, 0x6, 0x9, 0x7fff, 0x8, 0x9, 0x7, 0xffff, 0x8, 0x6f5, 0x9c0, 0x0, 0x0, 0x80, 0x1, 0x2, 0x7, 0x401, 0x8, 0x8000, 0x0, 0x8, 0x1, 0x81, 0x4d3f, 0x7ff, 0xfdd, 0x8000, 0x8, 0x1, 0x9, 0x9, 0x4, 0x5, 0x1000, 0x260, 0x2, 0x6, 0x7, 0xe, 0x7, 0x1, 0xd2, 0x4, 0xfffffffa, 0x8, 0x5, 0xd5, 0x81, 0x7, 0x3, 0x6, 0x1ff, 0x10001, 0xa2, 0x4, 0x6, 0xcc4, 0x44e, 0x7b8, 0x73337260, 0x7ff, 0x3, 0x4, 0x6cf8805f, 0x9, 0xbb, 0x21c, 0x8, 0x0, 0x3, 0x4, 0x4, 0x7, 0x0, 0x66d5, 0xfffffffc, 0x9, 0x357c036f, 0x0, 0x8, 0x6, 0x0, 0x5, 0x2, 0x2, 0x63, 0x9, 0x7, 0x5, 0x4, 0x10000000, 0x3, 0x0, 0x7ff, 0x2, 0x5b, 0x2, 0x20000, 0x6, 0x1824, 0x8000, 0x6, 0x9, 0x40, 0x873, 0x2, 0xfff, 0x9000000, 0xdcc5, 0x7, 0x4, 0x401, 0xb, 0x0, 0xcf, 0x0, 0x10000, 0x400, 0xa, 0x0, 0x632f, 0x8, 0x2, 0x6, 0x1, 0x5, 0x1, 0xfffffffb, 0x7, 0xc7, 0x4ff2643b, 0x6, 0x8001, 0x8001, 0x4, 0x0, 0xfffffffb, 0x4, 0x6dff0c45, 0x2, 0x1, 0x1, 0x6, 0x800, 0x5, 0x5, 0x4, 0x0, 0x0, 0xfffffffa, 0x42, 0xfff, 0x8, 0x5430, 0x5, 0xe, 0x8, 0xf67, 0x5, 0x9, 0x2e, 0x3e76, 0x2a, 0x6, 0xf35, 0x381c, 0x80000000, 0x0, 0xfff, 0x0, 0x2, 0xffffffff, 0xff, 0x3ff, 0x6, 0x10001, 0x5, 0x2, 0xfffff7ec, 0x7fff, 0x60, 0x3, 0x7, 0x6, 0x80000001, 0xc, 0xb61a24a, 0x9f86, 0x0, 0x6, 0xffffff7a, 0x4, 0x0, 0xfffffff9, 0x4dd, 0x6, 0xf, 0x721e, 0x1, 0x9, 0x69d6, 0x6, 0x3, 0x2, 0x1, 0x8, 0xefcc, 0x4, 0x400, 0xe75, 0x1730, 0x1, 0x23c00000]}, @TCA_HTB_RATE64={0xc, 0x6, 0x4}, @TCA_HTB_RTAB={0x404, 0x4, [0x1, 0x0, 0x80, 0x9, 0x3, 0x4, 0x8, 0xc, 0xfff, 0x39c, 0x6, 0x4, 0xa7f, 0x10001, 0x2, 0x3, 0x0, 0x200000, 0x2, 0x6, 0xbcf6, 0x1000, 0xfffeffff, 0x6, 0x7, 0x9, 0x6, 0x8, 0x7f, 0x8, 0x5, 0x9, 0x7, 0x1ff, 0x80000001, 0x8, 0xfffffff0, 0x1000, 0x1ff, 0x200, 0x1ce0, 0x371, 0x8, 0xcf0, 0x5, 0x45, 0xe, 0x4, 0x8, 0x945, 0x1, 0x7, 0x4, 0x5, 0xb, 0x4, 0xa, 0x10001, 0x1, 0x8, 0x3, 0x243, 0x75c0c570, 0x6, 0x1, 0x356a, 0x2f, 0x4, 0x5, 0x8, 0x2, 0xfffffff8, 0x4, 0x4, 0x4d, 0x6, 0x891, 0x8, 0x396, 0x57, 0xb36, 0x3, 0x8, 0x9, 0x100, 0x7f, 0x2, 0xff, 0x80, 0x8c6d, 0x8, 0x3, 0xe, 0x6, 0x800, 0x3, 0xff, 0x0, 0x80000001, 0x0, 0xc033, 0x5, 0x7fffffff, 0x5, 0x4, 0x7, 0x6, 0x39, 0x7, 0x5, 0x8ef2, 0x14e, 0x0, 0xfffffffe, 0x7, 0x7, 0x9, 0x9, 0xf, 0x5, 0x1, 0x2, 0x1, 0x0, 0x7, 0x4, 0x6, 0x4, 0x3, 0x0, 0xf, 0x1000, 0x81, 0x1, 0x6, 0x7, 0x6, 0x1000, 0x238, 0x0, 0x7, 0x1, 0x2, 0x4, 0x7, 0xd, 0xfffffff9, 0x10001, 0x10000, 0xfffffffc, 0x40000002, 0x4, 0x1600000, 0x100, 0x7, 0x0, 0x1000, 0xe, 0x80000001, 0x1, 0x5, 0x2, 0x10, 0x8001, 0x7f, 0x10, 0x0, 0x5, 0x1, 0x80000000, 0x5, 0x5, 0x0, 0x5, 0x9d7a, 0x0, 0x40, 0x8, 0x9, 0xf, 0x5, 0xde, 0x0, 0x7, 0x3, 0xfa0d, 0xfffffffa, 0x8, 0x200, 0x7fff, 0x10, 0x6, 0x2, 0x100, 0x8, 0xffffffff, 0x3, 0x1000, 0x3e7, 0x4, 0x5, 0x8, 0x6, 0x7, 0x9874, 0x7, 0xae, 0x7, 0x8, 0x7ff, 0x6, 0x6, 0x9, 0x1, 0x9, 0x8, 0x8, 0x6, 0x3800, 0xffffffff, 0x3, 0x8000, 0xb3, 0x9, 0xe5, 0x16e, 0xf8e, 0x8, 0x80000000, 0x1, 0x9, 0x1, 0x8, 0x8, 0x10, 0x5, 0xffffff8c, 0x9, 0x8, 0x50000000, 0x7, 0x6, 0x1000, 0x8, 0x1, 0xffffff3b, 0x8001, 0x30b9, 0x1, 0x8fe, 0x6, 0xff, 0x8, 0x3, 0x1, 0xfffffffa]}, @TCA_HTB_CEIL64={0xc, 0x7, 0xf}, @TCA_HTB_CTAB={0x404, 0x3, [0x7, 0x9, 0xffffff1e, 0xbf, 0x3, 0x800, 0x80000001, 0x200, 0x5, 0xfffffffd, 0x3, 0x0, 0x8000, 0xffffffcb, 0x2, 0xffff664f, 0x8, 0x9, 0x7, 0x6, 0x80, 0x1, 0xfffffffa, 0x97ab85c, 0x101, 0x1, 0x74cbb3f, 0xa, 0x4, 0x7, 0x9e98, 0x1b, 0x9, 0x12, 0x9a6, 0x40, 0x8, 0x3, 0x8, 0x1, 0xfffffc01, 0x401, 0x1ff, 0x0, 0x0, 0x7, 0x522, 0x9, 0x1, 0xe600, 0x3, 0x9, 0x5, 0x61, 0x522, 0x3, 0x8, 0x9, 0x4, 0x7, 0x7f, 0x9, 0x3, 0x0, 0x10, 0x160, 0xe, 0x6, 0x9, 0x7f, 0x1, 0xf, 0x80000000, 0xfffffe01, 0x10, 0xc2, 0x3, 0x4, 0x59, 0x5, 0x4, 0x8, 0x5, 0xd, 0x6, 0x1, 0x0, 0x6, 0x200, 0x7, 0x4, 0x1, 0x5, 0x4026, 0x0, 0xffffffff, 0x1, 0xa, 0xa88, 0x6, 0x6, 0xdc, 0xa, 0x5, 0xfffffff9, 0x4, 0x0, 0x3, 0x8001, 0x7, 0x2, 0x5, 0x101, 0x6, 0x40, 0x7f, 0x1, 0xc3, 0x8, 0x6, 0xf, 0xd2f6, 0x3, 0x101, 0x6, 0x200, 0x1, 0x3, 0x17, 0x9, 0x5, 0x4, 0x1, 0x2, 0x3bc80fe8, 0x1, 0x8000, 0xffffff7f, 0x10001, 0x9, 0x7ff, 0x7, 0x3, 0xfeb, 0x5, 0x40, 0x8001, 0x0, 0x101, 0xb2, 0xa7e, 0xe46, 0x6, 0x0, 0xffff7fff, 0xc63, 0x1000, 0xfff, 0x8, 0x2, 0x10001, 0x2, 0x0, 0xf, 0x7fff, 0x7, 0x401, 0x81, 0x7f800, 0x57, 0xffffff7f, 0x6, 0xc4c, 0xffffffff, 0x9, 0x2, 0x8001, 0xe, 0x80000001, 0x40000, 0x6, 0x3, 0x8000, 0x5, 0x4, 0x5, 0xc5, 0x6, 0xf, 0x3, 0x1, 0x3, 0x3, 0x4f, 0x1ff, 0x1, 0x5, 0x9, 0xfffffffa, 0x7fffffff, 0x1, 0x9, 0x361, 0xffff, 0xf, 0x2, 0x4, 0xe, 0x7, 0x1, 0x4, 0x5, 0xa5, 0x7, 0x6, 0x1, 0x425, 0x7ff, 0x0, 0x8, 0x3, 0x279, 0x3, 0x7, 0x9, 0x4, 0x0, 0x3, 0x2, 0xa, 0x8, 0x2, 0x3, 0xfffffff5, 0xfffffff0, 0x6, 0x4, 0x7, 0x9, 0x2, 0x4, 0x8001, 0x3, 0x0, 0x8f, 0x1, 0xffffffff, 0x8, 0x0, 0x2, 0x9, 0xd, 0x685, 0x38a182a4, 0x10001, 0x2]}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_CTAB={0x404, 0x3, [0x1, 0x54ac, 0x4, 0x5, 0x3, 0x3, 0xf, 0x9, 0xa, 0x4, 0x3, 0x6, 0x10000, 0x72, 0x0, 0x7, 0x1c8, 0x3, 0x0, 0x7, 0x6, 0xff, 0x8000, 0xae36, 0x9, 0x0, 0x0, 0x8, 0x8, 0x1, 0x5, 0x9, 0xa9, 0x8, 0x8, 0x80, 0x74157b32, 0x100, 0x7, 0x80000001, 0x7fffffff, 0x0, 0x1, 0x6, 0x60d, 0x0, 0x4, 0x2, 0x0, 0x40, 0x1, 0x7f, 0xfa, 0x4, 0x200, 0x4, 0x8, 0xff, 0x0, 0xc84e, 0xb, 0x4, 0x2, 0x401, 0xffff, 0x0, 0x1ff, 0x101, 0x80000000, 0x1000, 0x0, 0x8, 0x2, 0x9, 0x0, 0x6, 0x6e, 0x115a, 0x100, 0x8, 0x4, 0x5, 0xda, 0x6, 0x101, 0x2, 0xae, 0x1ff, 0x80, 0x4, 0x3ff, 0xbf, 0x8, 0x1, 0x7, 0xa07, 0x3, 0x5, 0x3, 0x1, 0x2, 0x5, 0xeb6f, 0x7, 0x5, 0x81, 0x5, 0x5, 0x8, 0x6, 0xfffffff8, 0x0, 0x800, 0x5a, 0x3, 0xffffffff, 0x5, 0x2, 0xff, 0x5, 0x6, 0xa, 0x200, 0x1, 0x4, 0x6, 0x81, 0x8, 0x1, 0x40, 0x5, 0x400, 0x7, 0x9, 0x1ff, 0x8, 0xfffff654, 0x4, 0x402, 0x5, 0x4, 0xffffffd7, 0xa6, 0x1, 0x3, 0x98, 0xca65, 0x1ff, 0x401, 0x3, 0x1, 0x6, 0x8, 0x5, 0x6, 0x9, 0x40, 0x7, 0x5, 0x1ff, 0x3, 0x0, 0x0, 0x7, 0x5, 0xc, 0x7, 0x325f, 0xa7eb, 0x5, 0x4, 0xd8e8, 0x7fff, 0x4, 0xff, 0x0, 0xfffffc01, 0x7, 0x7, 0x10000, 0x7f, 0x8, 0xfffffffb, 0xa2, 0x4, 0x20a, 0xcc, 0x7f, 0x4, 0x40, 0x5, 0x2151, 0x7, 0x3, 0x8, 0x3, 0x5, 0x0, 0xff, 0x7fff, 0x80, 0x0, 0x7, 0x0, 0x7, 0x0, 0x9, 0x0, 0x100, 0x8000, 0x800, 0x1, 0x1, 0x8, 0xffffffff, 0x10000, 0x60, 0x9, 0x79, 0x8, 0x10000, 0x200000, 0x7, 0x1ff, 0x9, 0x40, 0x7fff, 0x6, 0x101, 0x6acb, 0xe, 0xc, 0x10000, 0x9, 0x0, 0x2, 0x1923, 0x9, 0x101, 0x5, 0xf, 0x401, 0x9, 0xff, 0x4, 0xe, 0xd, 0x0, 0x1, 0x4, 0x9, 0x4, 0x0, 0x0, 0x7, 0xd51]}]}}]}, 0x112c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x2) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) open$dir(0x0, 0x1e9240, 0x180) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000020000180000001800000004000000020000000000000c020000000000000001fcffffffffffff00006700"], 0x0, 0x34}, 0x28) unshare(0x22020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"fce3ad0eed0d07f91b5e091887f70706d038e7ff7fc6e5539b0d3c0a8b089b3f383163030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b5b3c070d0773090acd3b78130daa61d8e8040000205802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70ed566f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f83483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590568ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac00000065d9008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cac61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008046196a44002bebc2430aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f783d1eb68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265cf30a35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d9376033e49f91488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d761f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbf3f1eacd9abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xfffffffffffffd59}}, 0x1006) clock_settime(0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x811) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) 15m16.588584095s ago: executing program 1 (id=1930): socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, 0x0, 0x60140, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x10001, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x50313134, 0x0, 0xa, [{}, {0x10}, {}, {0x0, 0xffffffff}, {0x6}]}}) memfd_create(&(0x7f0000000040)='\x00', 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x2, [{}, {}]}, 0x44) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x100, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x7, &(0x7f00000001c0)) syz_usbip_server_init(0x6) syz_open_dev$tty20(0xc, 0x4, 0x1) 15m14.529640684s ago: executing program 1 (id=1936): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 15m14.52783691s ago: executing program 1 (id=1937): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0xfffd, 0xfdff) 15m14.437760041s ago: executing program 1 (id=1938): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f00000001c0)='./bus\x00', 0x194) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000400)={[{@index_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x12a) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x2000, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x141) mount$nfs4(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="72647d614d54b177bda2c209c4f9e75abdc4c3e08f15885ae35faacd7ba51b045de2238cdedc0f91defe8d812307083a3339abdd381c3640c17b2cd110637d798e1fc16258432613ce5c3874edda9d9a6a8197e98428bbf3dc939c671138a2980a1e4ba1b1807fc6732e9d8639744ee87365cfff2b9744698ab704dd", @ANYRES32=r2]) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="28000000220001062abd70000000000015000000003795879080c9873426a8a0a910f1210f000000"], 0x28}], 0x1}, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'macsec0\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r4, 0x8949, &(0x7f0000000000)) openat$audio(0xffffff9c, 0x0, 0x101, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newtaction={0x44, 0x30, 0x103, 0x0, 0x2000000, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000014}, 0x40c0) r6 = syz_open_procfs$userns(0x0, &(0x7f0000000240)) ioctl$AUTOFS_IOC_EXPIRE(r6, 0x810c9365, 0x0) 15m14.289686296s ago: executing program 1 (id=1941): socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) socket(0x2b, 0x1, 0x1) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6(0xa, 0x3, 0xff) socket$key(0xf, 0x3, 0x2) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x8, 0x3, 0x3c2}, 0x0, 0x0) socket(0x2b, 0x1, 0x1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="06010000246837f73199aee6fd1c291b3091ec1a06000000975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdf", 0x80}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) 15m14.249910741s ago: executing program 32 (id=1941): socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) socket(0x2b, 0x1, 0x1) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6(0xa, 0x3, 0xff) socket$key(0xf, 0x3, 0x2) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x8, 0x3, 0x3c2}, 0x0, 0x0) socket(0x2b, 0x1, 0x1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="06010000246837f73199aee6fd1c291b3091ec1a06000000975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdf", 0x80}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 7.695904613s ago: executing program 2 (id=7311): openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x101881, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = getpid() prlimit64(r1, 0x9, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000000)='attr/keycreate\x00') close(0x3) 7.299041175s ago: executing program 2 (id=7313): ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @bcast, @netrom={'nr', 0x0}, 0x62d, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4, 0x7, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null]}) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000000c0)="561aa1c7b0876aa7fc001ea39ea7460a", 0x10) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000100)=@l={0x92, 0x0, 0xe0}) 7.221368914s ago: executing program 2 (id=7314): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x1, [{{0x2, 0x4e22, @empty}}]}, 0x10c) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x104) syz_usbip_server_init(0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x400, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=bind:7-N:', @ANYRESDEC]) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r7 = dup3(r6, r5, 0x0) recvmmsg(r7, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000014c0)=""/150, 0x96}], 0x1}, 0x7}, {{&(0x7f0000001600)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000001880)=""/156, 0x9c}], 0x1}, 0x9}], 0x2, 0x40000001, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000400002400128009000100626f6e64000000001400028004001f"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4004090) 6.023865203s ago: executing program 4 (id=7315): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 5.78095566s ago: executing program 4 (id=7318): openat$binderfs(0xffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000001040)=ANY=[@ANYBLOB="aaaaaaaaaaaa86082b9827c186dd60cb653e00383a00fc020000000000000000000500000000ff02000000000000000004009078000000006097436700002f00fe880000000000000000000000000001ee8000000000000000000000000000aa3c00000000000000000000000000ea50c4d1c297abf07b520b89816d627e6c158426cd906c7682ceca5068383b85d6792dd736694ed8b34f05675949bf3d1f7397c721acdad4f75db3f2c5cab8b42452eb32c44d9535f1be28223817a2cc7a216549f7a90f0584a82f872d19f1150f0bf7b34c02db64df09ef0357064fbe72f48b78b4320d5fbaec5ba026b4e5d5d7bc606570"], 0x0) mmap(&(0x7f0000121000/0x1000)=nil, 0x1000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x401, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x80002, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e51326bd7000ffffffff07000000", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="01030300ff"], 0x38}}, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 5.271038337s ago: executing program 3 (id=7319): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xfffe, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_INFO={0x4}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xcc}}, 0x0) (fail_nth: 6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)={0x800042, 0xf8, 0x1}, 0x10) 5.111306473s ago: executing program 3 (id=7320): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f00000005c0)={0xfc2, 0x8}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x2b423, 0x0, 0x5, 0x199}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="180200008677000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000c0000008500000006000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0xe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f00000004c0)="0000000000000081d5c7f80c857d", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r3, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r4, 0x3516, 0x3e44, 0x8, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x11, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r9, 0x35, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000014c0)=ANY=[@ANYRES32=r10, @ANYRES32, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=r11], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0b000000000000006f1d6928988cfc05157a3c06069d2efa87a269e7402d0ecba7ebceacb9dee0ba823eaeab1fb09d6b07c45d23b12d614d49bd7b6cf34663c75bd1339fe8be5259c24d615a9aaaef88446095716ca8179e9e6ac3bf42e50c9baafae4ef69e823dca4e8f9dc07eb274545994ce1140f1c1511ec617e49dc", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=r11], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@ifindex, 0xffffffffffffffff, 0x19, 0x10, 0x0, @void, @value, @void, @void, r11}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32=r8, @ANYBLOB="0d00000018000000", @ANYBLOB="84f2f6772866a8106b934ffd020062deb0f7", @ANYRES32=r8, @ANYBLOB, @ANYRES64=r11], 0x20) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./bus\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=r12, @ANYRES32, @ANYBLOB="30f600030000000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=r11], 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x9, @val=@netkit={@void, @value=r8, @void, @void, r11}}, 0x1c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r13, @ANYRES32=r2, @ANYBLOB='#\x00\x00\x00\f\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="3b3bd7fb77bad6dd12fc6a4c05e51654d1065a852c67e1c48cc714b59e6ac71a588a244c8d4e8dd0d0128ad7a2ea42acbae6de4e63fc24cd8d268128af502f81af8d63963a96722405dfa81ed6efc2200e2d04724f6475d6bab5f2fd3dfa08e52d7d83037c94c379317ea1efd3616b78749291f11586495a48ab956b2ba05944153f09f39a89637542c0a3c3ed0f89190d6db64090cfa8beda1e8c60314f3f8b8ecd4c042c848e2f9579462118bec8e292e3291e70696668cbca85674fac77da8d", @ANYRES32=r7, @ANYBLOB, @ANYRES64=r11], 0x20) 4.95312922s ago: executing program 2 (id=7321): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5, 0x8000000000000003}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000280)=@raw=[@map_fd={0x18, 0x6}, @generic={0x3, 0x5, 0x8, 0x8, 0x4}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x80000001}], &(0x7f0000000300)='syzkaller\x00', 0x869, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0xa, 0xffff8518, 0x7f}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000440)=[{0x4, 0x5, 0x5, 0x5}, {0x5, 0x5, 0x1}, {0x1, 0x4, 0x6, 0x5}, {0x0, 0x5, 0x1, 0x5}], 0x10, 0x8000}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x4000, 0x0) pipe2(&(0x7f0000000000), 0x0) ioctl$CDROMREADAUDIO(r6, 0x2284, &(0x7f0000000100)={@msf={0xc, 0x0, 0x7}, 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000680)={&(0x7f00000001c0), 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xa4, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xa4}]}, @ETHTOOL_A_FEATURES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 4.885026365s ago: executing program 4 (id=7322): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x3, 0x0) sendmmsg(r0, &(0x7f0000001fc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100e2f288a8d2", 0x13}, {&(0x7f0000002c00)="659900c3f7c8e544e1abc41796cae4c9908368acb3abdb908ada84b1c98b91c34352f80ed64e4606a25bcbab94869ac816a7fb9c29a8c768fbffb21ad7f6013ff676da589c2e0865cfd321543070c3dd36bf94deb1d137c220d9c559dd61fb2c8732b6ce023b635b5901ebe508133aeadc8f8f93a2198784aab8ae715ee249968c0429cc80bc8c85c985f4f5f04e3acb0ef2a012f59c82dca7d69dcecf011b0a44b1889cfdfa123ccc8c0cb6469c806560c7681f0c3cae69aeabd2fc80d666e8dd7962495507461967b881a6a840a22962f95d55a722cb40221b16e6a6482bab54591aec3770e27a80974d3e41795c35f7300c2ba523e8486dbf6d7988e56396d13f0c079d856946c3ef2a3aaa0dd0bce7389bfd2c112bed2c5e1ae45ae2be5624016a96be54a1e876acd47e6f3ea1e11f919a12c0db1885930d03ce0d622b1e8ed1bbef406bab5f09a6066b2c1fbc9ba713bf76930cf84520fbd9e3f550b8ea4473b30de57de284951111b723ec7c55d5b9b57022411357766680c60cb193ab17c680e44ebc39a149aba5d5c5d26b021e8275523e832018584a067c1a49a3ea9937d90ce4f04bdcacbe1e3c2dbed7aeed1d85714c7d29c7cbe8fccc9cc9d3bfa4dc80954c69ec3e5abc686ce1735726ef792fe7ffe003fedd7b9a478162e5a33a40014f2dd3a97231df13aa79463896dc0754336e79bd98afad2a36e6efbb4803d543d347cd5b80e4c0fd5333724465f6eddbddb6a176c522347195d64238aa7c6b373d172161f97d267f90fab6a941ddc7670061da257fd46a29919668c492f991e1a16be25638e41c7453d1a40b92a75b07f330a6e07b4b0850989f343998022c5cdb7d7473de1f67ce2ec2ddf0ff6e945dab94bed1abdb959995098a4ad8ca467208febec562fe7c06a8cec88cbe6847b6b24212144da679aa521263aa8c152535a0fbc67dccc7116278f8da118147e9efeb799f37ecde26d9aa2e158bde1bb36bb67218fc9d29eb5ee1a4eb87adb0d9a2c8b6cd04e0d6b3b04f347022afd3ee96f6092dc74e2a09e42a1846afa48c65cd83d2718b95bb2df495da53f6ecafaf5149cfade2ac94517c4765a4522e81b58924bc6471d266541b0f6cf44f0ff636092cb6bd7d2a995b21df583630e4fdbbde7da4da19d6786b9ba3d9c1df5fe2618414940d25d82561fd9bf7b39f704355a51621a86b0bf39dbcc305bd87c4542ac3f852962fc5dee1da8fa4a6d1bf0149f04c06b81f81aedb4f07c9bf0a022a5cc0bcc57819b46931b99b00a0489e79b2bc1edc7d2d0404e09c9742e08867d7eedbc3b511207678c5087c0e01a41538742fdca667f39d8962b876386f6d1d798d09eac55c9587a4c86b4d5e3cfb08c0a0487cc7293ce91a7ec11896140ec8c0074f09497dd9b67382ca77d019bedfe97437429bdff299ba2d27669f6a8533c4a4be188a4e8cd439a6c72b6fe737e7388c5b10680bdba183433e99ccd6f0cf584980712088013aa625f9f78f0141b9fc3491c594229ef182c04a9b0e403511e8fb985918eb5c7bbc1ca5dca429efb209559363283f866c10bb3e05ef2a21182edc045341578e5ac63ba19206d804541fd40e84f5a6c9a20a44d8c76a815c7336c66c24bd9c8e61b95857ba3f06d72b6324d9e63c5672cf5dab0e8002000123c3f98626486e1396c897d92e79e34c6abd10d3f86a968c6b7ec95da7b04799a6419550ad511a45120457907a54296edbb1d7389da99608701c3e5e74d7a814c54e33a8473a8c8c3a6520268fe022d2771076ba921b5dca80301ed5ddda7aa5d3051e15330819abb9ab1da62041b1ebcd1cb38f37b7c13b6afa1351f541fac5539aa442ce2864a9048ce224e2855483a1a8fa12373f2568d7ee56752e67b2b115a7922a9af25c71c9fb67ea62e2bde4c176b57f6bcaa38117a9b0b2802f9b169e615a9e62100aeb1bbd8d03a3a94258a3ceb800c0b7b22af4afe24b0d8656e8fb8b2800c54173d063fd2c2330fe9b66592e144410ffd77207cd55fc317c1e66b98de7396ef3622f98305a460533a17145786910a7cfb3790734855adfeb01a8a0948108258e9a5b6a4d5958024d82079bf032e15666709cf4ed535f5a3a5f2b99377294fe16c24a72a1d6d95e151f478e770b5284c46890901b02b8696f688aa965ec3a70a33bd44346389ae3de7e8fdd4834fabc9afbb6341c6493de8faecf655a259e55944c48e0336660af313d0286f3e221092c0e4dc3834efabbf6931c44a8f8045bb418dbdc5ab9cd454726919a8aded5c679e5f62cf622ce8acd67f0a86634ce09b95677babe70dc216767824e2bbd6b066eebab6e5efc26d07a9a11b0ec4f2a2049b8edd01aa9dada0fc70fe52f1cee95e8df64532348c7317033ac4f54c76e5dfc5b532e237231a15b6bd0700f214a61ad7ace3f546e5f363055ba9f217cbc51ff5d0e4042d51761b8f055c775a305fdcb583c66ae2520c384aaf63d625c569ef2f4d2554d440e9e61118b8fbe1159d0558992a71db056dc5f16430b87fd329af2d7fe5928f430324dbbd247b938e4a4062fa7530da3e04a2b7824d17298e24bd7df0eba8caddfe808fe8a813c93c348eb9cbd651e92da3757450251ba9b2a5c96839fb3e3aadddbddc90a2dbb638b1fb87f990cfa2f96a8bfedf997b89f12dddf259fa1499c430f3cb8340c5cf66c85caf5c172cd0f651d1c2dba1cf26d8b936b17f0385183dfab24fd3bbaabfe866946b290dc278fd8418dc0ddb7785ab7e0f259a85fba0eabaaee55f52305d33339007e73fcded5f2613c710a32caad845b6c99958ccd5712097889f98858223d74042952bd238ee39eb7a1ebe0f0766946709cbb3a92d1551e5feb042452a76c557665fc9fab49768abcc7cb1977f7804d328421c30264b68a7ed05cbb7497a5014e6cdf32df82d41b33f55c67c9c15e723f629af4ac66a62ecc3214140354ef48bc73d3fb0eeb0719473498c2f3d192da0b360e5f3bf8f1ef579ed37a5d0c20eec42714bab59c134d4468736f19f5d32f5b8dc3df45941275264fca42ccb35cacd9965abb06dd7bd3bd0b1d8f32fb4b00d213d5f5d82ebf975b1fb4aeff137783f8b8da73864c3ed63f4142e4b3af5a3b82228eeb95f5d51f671f5b67964d2131c5e8869f8289997811dffe5b58d3dded907839316dbbf75ac8bebf35f036b4f2471808f389f3288ca48a3ae5d78343872df2fa6c67fd69f366c7861bfdde0b5126d5efdf825a03c6520b3a59ecc00469b0c9941f12ddead1f58d37da3ac1582ec701c47532629ae7e038707e3831e9a45f5cad2108f6e48c0c89bdd10bcebf29cb7cc84819cc292ad9c26f767159f2e13d8fc920401c8a682ad3c356d44ca1e7639ddd2c0f92d450069aaa5b778fa713c6c3813cafe6cf610916b02da8fd9ada5e02e0d08326df3dee4b203ddaaeff338be751e769e5c583d1488c5a22f644369d9079f387b36516dd5d706e4a29700d07986cbe1d64271ca0496ffd483fcf12ba1c2e891a2c9d940c61b61406a82a0157648acf3bc598d53046ec5a51c459a8e251ea0641d3d9148883dbb2a27cca1f0937505977689f4c89e045e6e45eec8939bece21fc3f3ff6b3437efe76b4bffdabcf34aaee2d04f21b482e3f2d20f904e723c572f5053e2642ffbf0287be1dc5c75c8e91cd446b1370d9c1c8a076a5eeceb11ad0b0ec959c2df769ae47751530c587b65b1a6feb8915dde7c11ddeaf6947392f746ab6a74630f5ec3a4d5499d46b8561e091c61c522063561ef31d91f680a5f660bf84020257657e79ef0670d93cf9f78c362954ac6f02602492c9f6bca75fe35fd371fe0db76a0a802bb5d04f6cacefb4ec79a3bdb5b0d7ce7b6b1734351b52225a31b16b8414b988f31c6e2aa07efc741e2ca1c3e4d7a382c863540497b12090acb69956e14ed51e569dc52bbbb747c335006a34333c32dac619ffc2d7e3abd7a5b53fde8eccc4f8963e996fabc8a96416d15fa7150faa154b97e685e6316fb73387a616d11aa486120a0d897c2055332eed5f07e50234b0383cb164ddd0501785f5d0109dabbf994be4fdd3e0c81e82cd19dffb63b312678d53c63c05b46739b61e363d944f36d48222476032db59415254879cd368d027fca68361d630fa93422badfc8b91e18e4fdcc2f0532dc7ff57a4100e8b15368a47af303c550542105860542d6fdf78d17e85ab334b7080237c5dd928e07ac0dfcdcd9c34ed4ad8ff47c0c9aa585f0c4f5d227eddf8b65802082a93bb82344162868df6cd2d804e7f9afd6a900f04157e30c796e0ece9998975723a6a9e6ea9f8159ad362bc35abcf779a174791a4aa7c043627075a44a1c93ccdd1df28fdc90d376551548bda51c390b4666c08cc23b1bd76993de97001aa7ccb5dd75dbd74f64b6bb2efdb672797060701e78bc1b5d72c025bba9c2d29c78024425af0e291a3f7386d375f342e9f25a03edb63db91aee91bc20d0f933ee2b2881c4c51720b3a5f5567ba105286c38f64f47b262f83f84e4f46907bca9c936b57e5196b4bbd64c1c8d7ae3e1ed64c598204f5cb90a26efd77ebec403e06f5c37eff5ddff5c30c615d8044e96a0b57a196af2deef36d7be5eada24a40a1eccb50e3466a208b94e2b69c66413ea0dae7eff6cef18fe83ee1717860b2cea2001ad3168f76733c6240c84a9eea9da926f29a74827843d40cf486dfb737ff1d4a9eed5ade6ea400eabea97481a58cdf8697225e71c6b5d22ad66fcfbee3955f3e186bc29a690f1d2874e70f032774a43ac4eec14117a31ef0a00ad6115223e2532dcca9310976ea7222a5c97703b3424bd9c7cf12bc5339d4705cf7dbf03d126b4da27e291a719ff3b1300ed21b425a2e8f7fd2002d137a47af192dd0dd1e26c2a49a16e0204a34fd92b7c3ca69861cdd143a494977e481b0e7c46bea8bedbc995e5a56702c9ab59c0f0cb90cae7a4f2185d50d1c699e4aa2a45177bb6827eb9422b23b8f78d20cec6bc373f62c07872eef3b1b4b7c77838b4e26e9573609f7bef3dcedc2fdf6c2c4aee6ebb9719b8ff578cf5e09933bc39083565e4fe1c18b90b40a72cf45bcfaec0f2c5cad49c606c9588bba24a1ad78be7ab315811c4b02c04b8d04866fa64147bb06f268ea9bc8a35440c4a1f73bd712107e86d5ac2864f592b7fb3aef2661a889475209c80c1adcf2bf165667253a452f1a2f7afb8cdd9ce3aa0b2193220773f11429d4e9f2bcef0c2128d34e632f351fea3b4538dbdf1c699b573b93fbba7a5256e5e3ae42e9fe120940d21f1e00b777031833e8d232283a86fa7ef511a7645d6fc6b0102aebe5b39ddddd4395a5a43dcb2d8a05d2587a4a1799d2239a51e097fadd28b09084148a6209edf2611181c1503c8bb2c5d0bde46d9cb200285ddfa7cb91cd49237ebd57241c3a7bf81da2ac1d95bfcd61faec3d58b52c08ef6c99a65b5a9ce6827705ba1f0d51ae7c84b93abcce96fdfbb2d21a3bc224552d326b65171956cfbd25faa0425bf61647d522b93367a5379c9bd3766ac03b15339e17ea5b0d7173455f6780073a637e8323563f58fe99f8d556a9ba4d8d84fa781ff8eea39bc4f7cb1364bf422bc1e7755cedd3c0c30d6a4930d54adebb81d26b9ba41c1eed62c9ed16a3fb2adc7eeeb2ec6a753878480790a617cacb3a5a590990236d308a2be73b1e1beff9a9b6c22ef627c1453bc6fd2296399821c6f85ed38966d43c9d48dc5000e7fa2c27b6e59", 0xfdd}], 0x2}}], 0x1, 0x24044015) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r4, r4, 0xc, 0x1, &(0x7f00000009c0)="16", 0x9, 0x1, 0x4c4a, 0x5505, 0x8b, 0x1, 0x9, 'syz0\x00'}) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r2, 0xe503, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) syz_fuse_handle_req(r2, &(0x7f0000004100)="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", 0x2000, &(0x7f0000000e40)={&(0x7f0000000100)={0x50, 0x0, 0x7, {0x7, 0x2b, 0x6, 0x48a2040, 0x1, 0xff47, 0x8, 0x5, 0x0, 0x0, 0x80, 0x39bf}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = fcntl$dupfd(r4, 0x0, r2) ioctl$PPPIOCATTACH(r7, 0x4004743d, &(0x7f0000000000)=0x1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x2}, 0x8) close(r8) recvfrom(r8, &(0x7f0000000480)=""/143, 0x8f, 0x42, &(0x7f0000000080)=@un=@abs={0x0, 0x0, 0x4e20}, 0x80) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000002c0)={'filter\x00', 0x0, 0x0, 0x0, [0x7, 0x7, 0x4, 0x6, 0x2, 0x7]}, &(0x7f0000000200)=0x50) 4.739873328s ago: executing program 0 (id=7323): symlink(&(0x7f0000000040)='.\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) tkill(r4, 0xb) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2200) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031, 0x60}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) 3.991102257s ago: executing program 3 (id=7324): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$binderfs_ctrl(0xffffff9c, &(0x7f0000000300)='./binderfs/binder-control\x00', 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="cae77f0556bd7e3ad6255f04374c31863b", 0x11, 0x20000045, &(0x7f00000000c0)={0xa, 0x2, 0xffff, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x5) shutdown(r0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x1a, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x3, 0x3, 0xfffffffffffffffb, 0x432c, 0x3, 0x1, {0xffffffffffffffff, 0x6, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3ba, 0x7fffffff, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x3ff}}, {0x0, 0xa}}}, 0xa0) ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0x2, 0x5003) sendfile(r2, r2, &(0x7f0000000080), 0x7f04) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 3.628957673s ago: executing program 0 (id=7325): memfd_create(&(0x7f0000000080)='/dev/input/event#\x00', 0x3) openat$ipvs(0xffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000000100)) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000000280)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r3, 0x0, 0xa002a0}, 0x38) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa4000000060a0b0400000000000000000200000078000480740001800a0001006d617463680000006400028008000240000000000c00010072617465657374004c0003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddaf0200000000000000d2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870b81e92a630900010073797a30000000000900020073797a32"], 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x28, 0x35, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 3.400896767s ago: executing program 4 (id=7326): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r0, r1, 0x0, 0x5, &(0x7f00000001c0)=':.#\'\x00'}, 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x30, 0xffffffffffffffff, 0x10a89000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea11004a35f4667d41", 0x29}], 0x1) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0x8008330e, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) unshare(0x400) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @random}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x26) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1, 0x6, 0x7}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @restrict, @func_proto]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28) 2.746490929s ago: executing program 2 (id=7327): memfd_create(&(0x7f0000000080)='/dev/input/event#\x00', 0x3) openat$ipvs(0xffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000000100)) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa4000000060a0b0400000000000000000200000078000480740001800a0001006d617463680000006400028008000240000000000c00010072617465657374004c0003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddaf0200000000000000d2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870b81e92a630900010073797a30000000000900020073797a32"], 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x28, 0x35, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2.710673371s ago: executing program 3 (id=7328): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000001, &(0x7f0000000a00)=[{0x0}, {&(0x7f0000000580)=""/152, 0x98}, {0x0}, {&(0x7f00000009c0)=""/44, 0x2c}], 0x4, 0x12}) inotify_init1(0x80000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x4, 0x0, 0xb7, 0x2, 0xffffff7e}}, 0xe4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 2.61063275s ago: executing program 0 (id=7329): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$binderfs_ctrl(0xffffff9c, &(0x7f0000000300)='./binderfs/binder-control\x00', 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="cae77f0556bd7e3ad6255f04374c31863b", 0x11, 0x20000045, &(0x7f00000000c0)={0xa, 0x2, 0xffff, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x5) shutdown(r0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) socket(0x1a, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0x2, 0x5003) sendfile(r2, r2, &(0x7f0000000080), 0x7f04) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 1.968610764s ago: executing program 4 (id=7330): openat$binderfs(0xffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000001040)=ANY=[@ANYBLOB="aaaaaaaaaaaa86082b9827c186dd60cb653e00383a00fc020000000000000000000500000000ff02000000000000000004009078000000006097436700002f00fe880000000000000000000000000001ee8000000000000000000000000000aa3c00000000000000000000000000ea50c4d1c297abf07b520b89816d627e6c158426cd906c7682ceca5068383b85d6792dd736694ed8b34f05675949bf3d1f7397c721acdad4f75db3f2c5cab8b42452eb32c44d9535f1be28223817a2cc7a216549f7a90f0584a82f872d19f1150f0bf7b34c02db64df09ef0357064fbe72f48b78b4320d5fbaec5ba026b4e5d5d7bc606570"], 0x0) mmap(&(0x7f0000121000/0x1000)=nil, 0x1000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x401, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x80002, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e51326bd7000ffffffff07000000", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="01030300ff"], 0x38}}, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 1.804757361s ago: executing program 0 (id=7331): r0 = socket(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) pread64(r2, &(0x7f0000000140)=""/198, 0xc6, 0x5b3) r3 = socket(0x2, 0x80802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r6 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r6, &(0x7f0000000480)=ANY=[], 0x125) ioctl$SG_GET_PACK_ID(r6, 0x227c, &(0x7f0000000040)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r7) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="34060000", @ANYRES16=r8, @ANYBLOB="010000000000000000002a0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="31040000000000f032001600000018000180140002006e657464657673696d3000000000000005000200010000000500020003000000050003"], 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) getpeername$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) getpeername$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) lseek(r4, 0x139, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0x158, r5, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x54, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x94, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) 1.291581527s ago: executing program 3 (id=7332): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$binderfs_ctrl(0xffffff9c, &(0x7f0000000300)='./binderfs/binder-control\x00', 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="cae77f0556bd7e3ad6255f04374c31863b", 0x11, 0x20000045, &(0x7f00000000c0)={0xa, 0x2, 0xffff, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x5) shutdown(r0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x1a, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x3, 0x3, 0xfffffffffffffffb, 0x432c, 0x3, 0x1, {0xffffffffffffffff, 0x6, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3ba, 0x7fffffff, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x3ff}}, {0x0, 0xa}}}, 0xa0) ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0x2, 0x5003) sendfile(r2, r2, &(0x7f0000000080), 0x7f04) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 1.281572578s ago: executing program 2 (id=7333): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$binderfs_ctrl(0xffffff9c, &(0x7f0000000300)='./binderfs/binder-control\x00', 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="cae77f0556bd7e3ad6255f04374c31863b", 0x11, 0x20000045, &(0x7f00000000c0)={0xa, 0x2, 0xffff, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x5) shutdown(r0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x1a, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x3, 0x3, 0xfffffffffffffffb, 0x432c, 0x3, 0x1, {0xffffffffffffffff, 0x6, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3ba, 0x7fffffff, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x3ff}}, {0x0, 0xa}}}, 0xa0) ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0x2, 0x5003) sendfile(r2, r2, &(0x7f0000000080), 0x7f04) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 1.020203279s ago: executing program 4 (id=7334): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newtaction={0x19c, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x188, 0x1, [@m_simple={0x10c, 0x12, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xd0, 0x7, 0x1, 0x5, 0x1ff}}, @TCA_DEF_DATA={0x13, 0x3, '/dev/dri/card#\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'ife\x00'}]}, {0xac, 0x6, "60be0b5b716cd700b73318eaadc56a719b8419d1f8603d868f490c7582e6a27a93f5838a880bf494801fd25fdef9e52fea99ff38b35eeba46466c20279e16f3469d9b45413794cb421eec4cf03d758f2c580484e5a8c43671f13d46be7b2bb610a45b9215896e2f015d4d47016f3fb34520e196041d6fb6c33ec476bf7c302bc41ed083d4ee4aef27ec86ae0f4bac5bfb1d215938cbc8355d713114ff7cef84cf903e64faf9f91f6"}, {0xc}, {0xc, 0x8, {0x6, 0x1}}}}, @m_ife={0x78, 0x1, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x81}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffff9, 0xffffffff, 0x8, 0x5, 0x1}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x958, 0x8, 0x4, 0x9}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000280)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4fe", 0xf}, {&(0x7f0000000580)="fa21bd2b5c40cc420740358ffc7f9f4b6e68fc8d1aa2597e7b484f301f11e35f22", 0x21}], 0x2) r5 = socket$rxrpc(0x21, 0x2, 0xa) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xffffffffffffff2b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=r3, @ANYRES64=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800", @ANYBLOB="96f0ba0c", @ANYRES32=r5], 0x74}}, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000000c0)={0x20000001, 0x6, 0xa}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x13, r7, 0x100300) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 720.599399ms ago: executing program 0 (id=7335): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0xfffd, 0xff0f) 718.508753ms ago: executing program 0 (id=7336): memfd_create(&(0x7f0000000080)='/dev/input/event#\x00', 0x3) openat$ipvs(0xffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000000100)) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000000280)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000400), 0x401, r3, 0x0, 0xa002a0}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa4000000060a0b0400000000000000000200000078000480740001800a0001006d617463680000006400028008000240000000000c00010072617465657374004c0003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddaf0200000000000000d2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870b81e92a630900010073797a30000000000900020073797a32"], 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x28, 0x35, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 0s ago: executing program 3 (id=7337): memfd_create(&(0x7f0000000080)='/dev/input/event#\x00', 0x3) openat$ipvs(0xffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000000100)) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000000280)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r3, 0x0, 0xa002a0}, 0x38) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa4000000060a0b0400000000000000000200000078000480740001800a0001006d617463680000006400028008000240000000000c00010072617465657374004c0003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddaf0200000000000000d2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870b81e92a630900010073797a30000000000900020073797a32"], 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x28, 0x35, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) kernel console output (not intermixed with test programs): _pfx_ksys_write+0x10/0x10 [ 1400.603734][T30516] ? rcu_is_watching+0x12/0xc0 [ 1400.603753][T30516] __do_fast_syscall_32+0xe8/0x680 [ 1400.603766][T30516] do_fast_syscall_32+0x32/0x80 [ 1400.603776][T30516] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1400.603790][T30516] RIP: 0023:0xf7fb1579 [ 1400.603805][T30516] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1400.603818][T30516] RSP: 002b:00000000f546455c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 1400.603829][T30516] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800001c0 [ 1400.603836][T30516] RDX: 00000000ffffffd9 RSI: 0000000000000000 RDI: 0000000000000000 [ 1400.603842][T30516] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1400.603847][T30516] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1400.603854][T30516] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1400.603869][T30516] [ 1402.419435][T30521] random: crng reseeded on system resumption [ 1402.435061][T10954] usb 9-1: USB disconnect, device number 100 [ 1402.440800][T30521] overlayfs: missing 'lowerdir' [ 1402.614757][T30532] siw: device registration error -23 [ 1402.784252][ T6106] usb 46-1: device descriptor read/8, error -110 [ 1402.909656][T30536] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1402.937995][T30538] input: syz1 as /devices/virtual/input/input50 [ 1403.016644][T30536] netlink: 'syz.4.6947': attribute type 1 has an invalid length. [ 1403.188836][ T6106] usb usb46-port1: attempt power cycle [ 1403.328385][T26142] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 1403.529761][T26142] usb 8-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 1403.533197][T26142] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 1403.536521][T26142] usb 8-1: Product: syz [ 1403.538160][T26142] usb 8-1: Manufacturer: syz [ 1403.540118][T26142] usb 8-1: SerialNumber: syz [ 1403.543183][T26142] usb 8-1: config 0 descriptor?? [ 1403.547943][T26142] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 1403.550645][T26142] dvb-usb: bulk message failed: -22 (2/0) [ 1403.554590][T26142] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1403.558768][T26142] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 1403.561124][T26142] usb 8-1: media controller created [ 1403.569278][T26142] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1403.751534][T30545] dvb-usb: bulk message failed: -22 (4/0) [ 1403.753733][T30545] cxusb: i2c read failed [ 1403.755917][T26142] cxusb: set interface failed [ 1403.759185][ T6106] usb usb46-port1: unable to enumerate USB device [ 1403.763371][T26142] dvb-usb: bulk message failed: -22 (1/0) [ 1403.788193][T26142] DVB: Unable to find symbol mt352_attach() [ 1403.790372][T26142] dvb-usb: bulk message failed: -22 (5/0) [ 1403.792071][T26142] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1403.794537][T26142] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 1403.838357][T26142] rc_core: IR keymap rc-dvico-mce not found [ 1403.840200][T26142] Registered IR keymap rc-empty [ 1403.842429][T26142] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 1403.846019][T26142] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input51 [ 1403.850257][T26142] dvb-usb: schedule remote query interval to 100 msecs. [ 1403.852280][T26142] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 1403.856267][T26142] usb 8-1: USB disconnect, device number 56 [ 1403.912744][T26142] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 1404.208664][ T24] usb 42-1: device descriptor read/8, error -110 [ 1404.447226][T30563] random: crng reseeded on system resumption [ 1404.487397][T30564] 9pnet_virtio: no channels available for device syz [ 1404.538900][T30564] 9pnet_virtio: no channels available for device syz [ 1404.548953][T30563] overlayfs: missing 'lowerdir' [ 1404.560490][T30553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1404.599302][ T24] usb usb42-port1: attempt power cycle [ 1405.160330][ T24] usb usb42-port1: unable to enumerate USB device [ 1405.269133][T30571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6959'. [ 1405.461505][T30579] siw: device registration error -23 [ 1405.465389][T30578] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1405.632858][ T10] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 1405.766744][T30578] netlink: 'syz.2.6957': attribute type 1 has an invalid length. [ 1405.835498][ T10] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1405.838645][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.841373][ T10] usb 8-1: Product: syz [ 1405.842865][ T10] usb 8-1: Manufacturer: syz [ 1405.844428][ T10] usb 8-1: SerialNumber: syz [ 1405.855745][ T10] usb 8-1: config 0 descriptor?? [ 1406.074231][T30577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1406.087741][T30577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1406.096710][ T10] usb-storage 8-1:0.0: USB Mass Storage device detected [ 1406.185395][ T10] usb 8-1: USB disconnect, device number 57 [ 1406.759085][T30598] input: syz0 as /devices/virtual/input/input52 [ 1406.841197][T11523] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1407.195542][T30603] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.6966'. [ 1407.678880][T30609] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1407.706856][T30609] netlink: 'syz.4.6967': attribute type 1 has an invalid length. [ 1408.599438][T30614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1408.848399][T30626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6972'. [ 1408.884225][T30619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6971'. [ 1408.888106][T30619] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6971'. [ 1409.008914][T30626] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.401736][T30619] geneve2: entered promiscuous mode [ 1409.479257][T30634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6974'. [ 1409.561857][T30619] geneve2: entered allmulticast mode [ 1409.573996][T30633] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 1409.578720][T30633] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1409.986594][T30651] random: crng reseeded on system resumption [ 1410.000109][T30651] overlayfs: missing 'lowerdir' [ 1410.039608][T10954] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 1410.139724][ T6638] usb 9-1: new high-speed USB device number 101 using dummy_hcd [ 1410.201548][T10954] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1410.205738][T10954] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1410.211019][T10954] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1410.214830][T10954] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1410.218359][T10954] usb 7-1: Product: syz [ 1410.220267][T10954] usb 7-1: Manufacturer: syz [ 1410.222384][T10954] usb 7-1: SerialNumber: syz [ 1410.227775][T10954] usb 7-1: config 0 descriptor?? [ 1410.235694][T10954] usb 7-1: selecting invalid altsetting 0 [ 1410.236746][T30653] netlink: 'syz.0.6980': attribute type 1 has an invalid length. [ 1410.279748][T30653] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1410.302868][T30653] bond12: (slave veth1): Enslaving as an active interface with a down link [ 1410.306541][ T6638] usb 9-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 1410.310233][T30653] bond12: (slave veth0_to_bond): making interface the new active one [ 1410.310452][ T6638] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 1410.313702][T30653] veth0_to_bond: entered promiscuous mode [ 1410.315555][ T6638] usb 9-1: Product: syz [ 1410.317523][T30653] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1410.318564][ T6638] usb 9-1: Manufacturer: syz [ 1410.323599][ T6638] usb 9-1: SerialNumber: syz [ 1410.328304][ T6638] usb 9-1: config 0 descriptor?? [ 1410.333303][ T6638] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 1410.335933][ T6638] dvb-usb: bulk message failed: -22 (2/0) [ 1410.338998][ T6638] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1410.343003][ T6638] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 1410.345463][ T6638] usb 9-1: media controller created [ 1410.352854][ T6638] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1410.442497][T10954] usb 7-1: USB disconnect, device number 23 [ 1410.540223][T30648] dvb-usb: bulk message failed: -22 (4/0) [ 1410.542328][T30648] cxusb: i2c read failed [ 1410.547583][ T6638] cxusb: set interface failed [ 1410.552895][ T6638] dvb-usb: bulk message failed: -22 (1/0) [ 1410.572893][ T6638] DVB: Unable to find symbol mt352_attach() [ 1410.575265][ T6638] dvb-usb: bulk message failed: -22 (5/0) [ 1410.577612][ T6638] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1410.581799][ T6638] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 1410.639860][ T6638] rc_core: IR keymap rc-dvico-mce not found [ 1410.642319][ T6638] Registered IR keymap rc-empty [ 1410.647112][ T6638] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 1410.656110][ T6638] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input53 [ 1410.669637][ T6638] dvb-usb: schedule remote query interval to 100 msecs. [ 1410.675988][ T6638] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 1410.690141][ T6638] usb 9-1: USB disconnect, device number 101 [ 1410.732879][T30663] siw: device registration error -23 [ 1410.752257][ T6638] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 1411.177076][T30673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6986'. [ 1411.182898][T30673] hsr_slave_0: left promiscuous mode [ 1411.185648][T30673] hsr_slave_1: left promiscuous mode [ 1411.250185][ T6031] page_pool_release_retry() stalled pool shutdown: id 221, 1 inflight 242 sec [ 1411.253337][ T6031] page_pool_release_retry() stalled pool shutdown: id 224, 1 inflight 242 sec [ 1411.256328][ T6031] page_pool_release_retry() stalled pool shutdown: id 226, 1 inflight 242 sec [ 1411.456428][T30677] syzkaller0: left promiscuous mode [ 1411.458189][T30677] syzkaller0: left allmulticast mode [ 1411.463144][T30677] tipc: Started in network mode [ 1411.464860][T30677] tipc: Node identity , cluster identity 4711 [ 1411.466981][T30677] tipc: Failed to obtain node identity [ 1411.468908][T30677] tipc: Enabling of bearer rejected, failed to enable media [ 1411.617709][T30679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6988'. [ 1411.906300][T30691] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(16) [ 1411.908534][T30691] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1411.911241][T30691] vhci_hcd vhci_hcd.0: Device attached [ 1411.916074][T30691] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(18) [ 1411.918214][T30691] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1411.921986][T30691] vhci_hcd vhci_hcd.0: Device attached [ 1411.925442][T30691] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(20) [ 1411.927626][T30691] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1411.934310][T30691] vhci_hcd vhci_hcd.0: Device attached [ 1411.942630][T30691] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1411.953656][T30691] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(24) [ 1411.955807][T30691] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1411.962665][T30691] vhci_hcd vhci_hcd.0: Device attached [ 1411.970753][T30691] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(26) [ 1411.973294][T30691] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1411.977393][T30691] vhci_hcd vhci_hcd.0: Device attached [ 1411.996540][T30691] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1412.004511][T30691] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(30) [ 1412.006701][T30691] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1412.009697][T30691] vhci_hcd vhci_hcd.0: Device attached [ 1412.018713][T30691] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1412.041152][T30700] vhci_hcd: connection closed [ 1412.041322][ T1140] vhci_hcd vhci_hcd.4: stop threads [ 1412.044659][ T1140] vhci_hcd vhci_hcd.4: release socket [ 1412.046923][ T1140] vhci_hcd vhci_hcd.4: disconnect device [ 1412.049743][T30698] vhci_hcd: connection closed [ 1412.050321][T30696] vhci_hcd: connection closed [ 1412.050690][T30694] vhci_hcd: connection closed [ 1412.060279][T30692] vhci_hcd: connection closed [ 1412.066703][ T1140] vhci_hcd vhci_hcd.4: stop threads [ 1412.084975][ T1140] vhci_hcd vhci_hcd.4: release socket [ 1412.093566][ T1140] vhci_hcd vhci_hcd.4: disconnect device [ 1412.103943][ T1140] vhci_hcd vhci_hcd.4: stop threads [ 1412.118409][ T1140] vhci_hcd vhci_hcd.4: release socket [ 1412.125534][ T1140] vhci_hcd vhci_hcd.4: disconnect device [ 1412.136951][ T1140] vhci_hcd vhci_hcd.4: stop threads [ 1412.145266][ T1140] vhci_hcd vhci_hcd.4: release socket [ 1412.153011][ T1140] vhci_hcd vhci_hcd.4: disconnect device [ 1412.160091][ T10] usb 45-1: new low-speed USB device number 3 using vhci_hcd [ 1412.162370][ T10] usb 45-1: enqueue for inactive port 0 [ 1412.162752][ T1140] vhci_hcd vhci_hcd.4: stop threads [ 1412.178403][ T1140] vhci_hcd vhci_hcd.4: release socket [ 1412.189511][ T1140] vhci_hcd vhci_hcd.4: disconnect device [ 1412.240103][ T10] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1412.292587][ T6031] page_pool_release_retry() stalled pool shutdown: id 220, 1 inflight 243 sec [ 1412.571487][T30704] vhci_hcd: connection closed [ 1412.571861][T30637] vhci_hcd vhci_hcd.4: stop threads [ 1412.576247][T30637] vhci_hcd vhci_hcd.4: release socket [ 1412.578800][T30637] vhci_hcd vhci_hcd.4: disconnect device [ 1412.612712][T30715] binder: 30714:30715 ioctl c0306201 0 returned -14 [ 1413.018717][T30720] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1413.021010][T30720] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1413.025153][T30720] vhci_hcd vhci_hcd.0: Device attached [ 1413.072328][T30720] AppArmor: change_hat: Invalid input '0x000000000000/001^' [ 1413.400708][ T6031] usb 38-1: SetAddress Request (6) to port 0 [ 1413.407043][ T6031] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1413.522353][T30730] FAULT_INJECTION: forcing a failure. [ 1413.522353][T30730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1413.526665][T30730] CPU: 3 UID: 0 PID: 30730 Comm: syz.2.6998 Tainted: G L syzkaller #0 PREEMPT(full) [ 1413.526683][T30730] Tainted: [L]=SOFTLOCKUP [ 1413.526686][T30730] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1413.526693][T30730] Call Trace: [ 1413.526698][T30730] [ 1413.526703][T30730] dump_stack_lvl+0x16c/0x1f0 [ 1413.526724][T30730] should_fail_ex+0x512/0x640 [ 1413.526739][T30730] _copy_to_user+0x32/0xd0 [ 1413.526753][T30730] simple_read_from_buffer+0xcb/0x170 [ 1413.526769][T30730] proc_fail_nth_read+0x197/0x240 [ 1413.526788][T30730] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1413.526806][T30730] ? rw_verify_area+0xcf/0x6c0 [ 1413.526819][T30730] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1413.526836][T30730] vfs_read+0x1e4/0xcf0 [ 1413.526852][T30730] ? __pfx___mutex_lock+0x10/0x10 [ 1413.526863][T30730] ? __pfx_vfs_read+0x10/0x10 [ 1413.526876][T30730] ? find_held_lock+0x2b/0x80 [ 1413.526895][T30730] ? __fget_files+0x20e/0x3c0 [ 1413.526913][T30730] ksys_read+0x12a/0x250 [ 1413.526928][T30730] ? __pfx_ksys_read+0x10/0x10 [ 1413.526943][T30730] ? do_user_addr_fault+0x843/0x1370 [ 1413.526959][T30730] __do_fast_syscall_32+0xe8/0x680 [ 1413.526970][T30730] do_fast_syscall_32+0x32/0x80 [ 1413.526981][T30730] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1413.526994][T30730] RIP: 0023:0xf7fb1579 [ 1413.527003][T30730] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1413.527013][T30730] RSP: 002b:00000000f54a6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1413.527024][T30730] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54a6620 [ 1413.527030][T30730] RDX: 000000000000000f RSI: 00000000f7446ff4 RDI: 0000000000000000 [ 1413.527036][T30730] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1413.527042][T30730] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1413.527048][T30730] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1413.527063][T30730] [ 1413.644611][T30721] vhci_hcd: connection reset by peer [ 1413.646796][T26492] vhci_hcd vhci_hcd.0: stop threads [ 1413.649127][T26492] vhci_hcd vhci_hcd.0: release socket [ 1413.669100][T26492] vhci_hcd vhci_hcd.0: disconnect device [ 1413.877525][T30747] siw: device registration error -23 [ 1414.695524][T30758] random: crng reseeded on system resumption [ 1414.705758][T30758] overlayfs: missing 'workdir' [ 1414.839888][T30760] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1414.842511][T30760] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1414.846988][T30760] vhci_hcd vhci_hcd.0: Device attached [ 1414.858136][T30760] tmpfs: Bad value for 'mpol' [ 1414.873721][T30765] syzkaller0: left promiscuous mode [ 1414.875746][T30765] syzkaller0: left allmulticast mode [ 1414.880996][T30765] tipc: Started in network mode [ 1414.882813][T30765] tipc: Node identity , cluster identity 4711 [ 1414.885154][T30765] tipc: Failed to obtain node identity [ 1414.887276][T30765] tipc: Enabling of bearer rejected, failed to enable media [ 1414.927986][T30767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7009'. [ 1414.932126][T30767] FAULT_INJECTION: forcing a failure. [ 1414.932126][T30767] name failslab, interval 1, probability 0, space 0, times 0 [ 1414.933724][T30768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7005'. [ 1414.937820][T30767] CPU: 2 UID: 0 PID: 30767 Comm: syz.3.7009 Tainted: G L syzkaller #0 PREEMPT(full) [ 1414.937847][T30767] Tainted: [L]=SOFTLOCKUP [ 1414.937853][T30767] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1414.937864][T30767] Call Trace: [ 1414.937871][T30767] [ 1414.937879][T30767] dump_stack_lvl+0x16c/0x1f0 [ 1414.937911][T30767] should_fail_ex+0x512/0x640 [ 1414.937935][T30767] should_failslab+0xc2/0x120 [ 1414.937962][T30767] kmem_cache_alloc_noprof+0x83/0x770 [ 1414.937983][T30767] ? skb_clone+0x190/0x3f0 [ 1414.938036][T30767] ? skb_clone+0x190/0x3f0 [ 1414.938057][T30767] skb_clone+0x190/0x3f0 [ 1414.938080][T30767] netlink_deliver_tap+0xabd/0xd30 [ 1414.938111][T30767] netlink_unicast+0x71f/0x870 [ 1414.938140][T30767] ? __pfx_netlink_unicast+0x10/0x10 [ 1414.938177][T30767] xfrm_alloc_userspi+0x874/0xc30 [ 1414.938203][T30767] ? __pfx_xfrm_alloc_userspi+0x10/0x10 [ 1414.938223][T30767] ? __nla_parse+0x40/0x60 [ 1414.938247][T30767] ? __pfx_xfrm_alloc_userspi+0x10/0x10 [ 1414.938267][T30767] xfrm_user_rcv_msg+0x4fe/0xb60 [ 1414.938290][T30767] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1414.938306][T30767] ? kfree_skbmem+0x1a4/0x1f0 [ 1414.938327][T30767] ? kfree_skbmem+0x1a4/0x1f0 [ 1414.938344][T30767] ? consume_skb+0xcc/0x100 [ 1414.938370][T30767] ? find_held_lock+0x2b/0x80 [ 1414.938419][T30767] ? rcu_is_watching+0x12/0xc0 [ 1414.938443][T30767] ? trace_contention_end+0xdd/0x110 [ 1414.938462][T30767] ? __mutex_lock+0x27b/0x1ca0 [ 1414.938484][T30767] netlink_rcv_skb+0x158/0x420 [ 1414.938509][T30767] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1414.938528][T30767] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1414.938572][T30767] xfrm_netlink_rcv+0x71/0x90 [ 1414.938598][T30767] netlink_unicast+0x5aa/0x870 [ 1414.938627][T30767] ? __pfx_netlink_unicast+0x10/0x10 [ 1414.938664][T30767] netlink_sendmsg+0x8c8/0xdd0 [ 1414.938694][T30767] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1414.938723][T30767] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1414.938755][T30767] ____sys_sendmsg+0xa5d/0xc30 [ 1414.938776][T30767] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1414.938792][T30767] ? get_compat_msghdr+0x11a/0x170 [ 1414.938827][T30767] ___sys_sendmsg+0x134/0x1d0 [ 1414.938852][T30767] ? __pfx____sys_sendmsg+0x10/0x10 [ 1414.938889][T30767] ? find_held_lock+0x2b/0x80 [ 1414.938929][T30767] __sys_sendmsg+0x16d/0x220 [ 1414.938953][T30767] ? __pfx___sys_sendmsg+0x10/0x10 [ 1414.938987][T30767] ? do_user_addr_fault+0x843/0x1370 [ 1414.939013][T30767] __do_fast_syscall_32+0xe8/0x680 [ 1414.939033][T30767] do_fast_syscall_32+0x32/0x80 [ 1414.939051][T30767] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1414.939071][T30767] RIP: 0023:0xf7ff4579 [ 1414.939085][T30767] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1414.939101][T30767] RSP: 002b:00000000f54e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1414.939118][T30767] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 1414.939130][T30767] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 1414.939140][T30767] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1414.939150][T30767] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1414.939159][T30767] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1414.939186][T30767] [ 1414.981051][T30770] syzkaller0: entered promiscuous mode [ 1415.062553][T30770] syzkaller0: entered allmulticast mode [ 1415.140765][ T7393] usb 42-1: SetAddress Request (103) to port 0 [ 1415.143449][ T7393] usb 42-1: new SuperSpeed USB device number 103 using vhci_hcd [ 1415.199957][T30775] tipc: Started in network mode [ 1415.202402][T30775] tipc: Node identity , cluster identity 4711 [ 1415.205168][T30775] tipc: Failed to obtain node identity [ 1415.208066][T30775] tipc: Enabling of bearer rejected, failed to enable media [ 1415.276647][T30761] vhci_hcd: connection reset by peer [ 1415.279230][T26492] vhci_hcd vhci_hcd.2: stop threads [ 1415.281449][T26492] vhci_hcd vhci_hcd.2: release socket [ 1415.283877][T26492] vhci_hcd vhci_hcd.2: disconnect device [ 1416.985616][T30788] netlink: 'syz.2.7013': attribute type 1 has an invalid length. [ 1417.028846][T30789] netlink: 'syz.0.7012': attribute type 1 has an invalid length. [ 1417.536514][T30796] siw: device registration error -23 [ 1417.621582][T30787] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1418.363112][T30810] siw: device registration error -23 [ 1418.377278][T30813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7019'. [ 1418.384851][T30814] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7020'. [ 1418.397433][T30814] FAULT_INJECTION: forcing a failure. [ 1418.397433][T30814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1418.406765][T30814] CPU: 0 UID: 0 PID: 30814 Comm: syz.4.7020 Tainted: G L syzkaller #0 PREEMPT(full) [ 1418.406795][T30814] Tainted: [L]=SOFTLOCKUP [ 1418.406801][T30814] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1418.406818][T30814] Call Trace: [ 1418.406822][T30814] [ 1418.406827][T30814] dump_stack_lvl+0x16c/0x1f0 [ 1418.406849][T30814] should_fail_ex+0x512/0x640 [ 1418.406864][T30814] _copy_to_user+0x32/0xd0 [ 1418.406878][T30814] simple_read_from_buffer+0xcb/0x170 [ 1418.406895][T30814] proc_fail_nth_read+0x197/0x240 [ 1418.406914][T30814] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1418.406932][T30814] ? rw_verify_area+0xcf/0x6c0 [ 1418.406946][T30814] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1418.406967][T30814] vfs_read+0x1e4/0xcf0 [ 1418.406983][T30814] ? __pfx___mutex_lock+0x10/0x10 [ 1418.406994][T30814] ? __pfx_vfs_read+0x10/0x10 [ 1418.407007][T30814] ? find_held_lock+0x2b/0x80 [ 1418.407025][T30814] ? __fget_files+0x20e/0x3c0 [ 1418.407044][T30814] ksys_read+0x12a/0x250 [ 1418.407059][T30814] ? __pfx_ksys_read+0x10/0x10 [ 1418.407077][T30814] __do_fast_syscall_32+0xe8/0x680 [ 1418.407089][T30814] do_fast_syscall_32+0x32/0x80 [ 1418.407099][T30814] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1418.407113][T30814] RIP: 0023:0xf7f73579 [ 1418.407122][T30814] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1418.407132][T30814] RSP: 002b:00000000f5466590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1418.407142][T30814] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5466620 [ 1418.407149][T30814] RDX: 000000000000000f RSI: 00000000f7406ff4 RDI: 0000000000000000 [ 1418.407155][T30814] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1418.407161][T30814] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1418.407167][T30814] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1418.407183][T30814] [ 1418.451395][ T6031] usb 38-1: device descriptor read/8, error -110 [ 1418.550223][ T6028] page_pool_release_retry() stalled pool shutdown: id 247, 2 inflight 242 sec [ 1418.558870][ T6028] page_pool_release_retry() stalled pool shutdown: id 246, 1 inflight 242 sec [ 1418.568066][ T6028] page_pool_release_retry() stalled pool shutdown: id 243, 1 inflight 242 sec [ 1418.923162][ T6031] usb usb38-port1: attempt power cycle [ 1419.278613][T30827] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1419.281356][T30827] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1419.297599][T30827] vhci_hcd vhci_hcd.0: Device attached [ 1419.315319][T30827] tmpfs: Bad value for 'mpol' [ 1419.393305][T30831] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7022'. [ 1419.503266][ T6031] usb usb38-port1: unable to enumerate USB device [ 1419.607636][T30837] netlink: 'syz.3.7024': attribute type 1 has an invalid length. [ 1420.082571][ T6031] usb usb38-port2: attempt power cycle [ 1420.211903][T30830] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1420.221759][ T5283] vhci_hcd vhci_hcd.2: stop threads [ 1420.224555][ T5283] vhci_hcd vhci_hcd.2: release socket [ 1420.227109][ T7393] usb 42-1: device descriptor read/8, error -110 [ 1420.230148][ T5283] vhci_hcd vhci_hcd.2: disconnect device [ 1420.618113][T30844] siw: device registration error -23 [ 1420.623633][ T7393] usb usb42-port1: attempt power cycle [ 1420.652659][ T6031] usb usb38-port2: unable to enumerate USB device [ 1420.752788][T30847] netlink: 268 bytes leftover after parsing attributes in process `syz.0.7027'. [ 1420.800692][T30848] FAULT_INJECTION: forcing a failure. [ 1420.800692][T30848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1420.806171][T30848] CPU: 1 UID: 0 PID: 30848 Comm: syz.3.7028 Tainted: G L syzkaller #0 PREEMPT(full) [ 1420.806212][T30848] Tainted: [L]=SOFTLOCKUP [ 1420.806218][T30848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1420.806228][T30848] Call Trace: [ 1420.806235][T30848] [ 1420.806242][T30848] dump_stack_lvl+0x16c/0x1f0 [ 1420.806270][T30848] should_fail_ex+0x512/0x640 [ 1420.806297][T30848] _copy_from_user+0x2e/0xd0 [ 1420.806316][T30848] snd_pcm_oss_write2+0x1c2/0x410 [ 1420.806336][T30848] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 1420.806351][T30848] ? snd_pcm_kernel_ioctl+0x267/0x2e0 [ 1420.806372][T30848] ? snd_pcm_oss_prepare+0x11e/0x240 [ 1420.806401][T30848] snd_pcm_oss_write+0x710/0xa10 [ 1420.806420][T30848] ? security_file_permission+0x71/0x210 [ 1420.806445][T30848] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 1420.806460][T30848] vfs_write+0x2a0/0x11d0 [ 1420.806488][T30848] ? __pfx_vfs_write+0x10/0x10 [ 1420.806505][T30848] ? find_held_lock+0x2b/0x80 [ 1420.806520][T30848] ? __fget_files+0x204/0x3c0 [ 1420.806537][T30848] ? __fget_files+0x20e/0x3c0 [ 1420.806555][T30848] ksys_write+0x12a/0x250 [ 1420.806570][T30848] ? __pfx_ksys_write+0x10/0x10 [ 1420.806584][T30848] ? rcu_is_watching+0x12/0xc0 [ 1420.806603][T30848] __do_fast_syscall_32+0xe8/0x680 [ 1420.806615][T30848] do_fast_syscall_32+0x32/0x80 [ 1420.806626][T30848] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1420.806639][T30848] RIP: 0023:0xf7ff4579 [ 1420.806648][T30848] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1420.806659][T30848] RSP: 002b:00000000f54a455c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 1420.806669][T30848] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800001c0 [ 1420.806675][T30848] RDX: 00000000ffffffd9 RSI: 0000000000000000 RDI: 0000000000000000 [ 1420.806681][T30848] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1420.806687][T30848] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1420.806693][T30848] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1420.806708][T30848] [ 1420.857544][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 1420.857559][ T40] audit: type=1804 audit(1768451425.855:11067): pid=30850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.7029" name="file0" dev="hugetlbfs" ino=124672 res=1 errno=0 [ 1421.202778][ T7393] usb usb42-port1: unable to enumerate USB device [ 1421.451899][T26142] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1421.529335][T30856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7032'. [ 1421.628977][T26142] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 1421.633014][T26142] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 1421.636358][T26142] usb 5-1: Product: syz [ 1421.637875][T26142] usb 5-1: Manufacturer: syz [ 1421.639524][T26142] usb 5-1: SerialNumber: syz [ 1421.644319][T26142] usb 5-1: config 0 descriptor?? [ 1421.649188][T26142] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 1421.652950][T26142] dvb-usb: bulk message failed: -22 (2/0) [ 1421.659657][T26142] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1421.664786][T26142] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 1421.668129][T26142] usb 5-1: media controller created [ 1421.678281][T26142] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1421.685054][ T6108] page_pool_release_retry() stalled pool shutdown: id 207, 1 inflight 302 sec [ 1421.856118][T30852] dvb-usb: bulk message failed: -22 (4/0) [ 1421.858024][T30852] cxusb: i2c read failed [ 1421.860396][T26142] cxusb: set interface failed [ 1421.863407][T26142] dvb-usb: bulk message failed: -22 (1/0) [ 1421.884337][T26142] DVB: Unable to find symbol mt352_attach() [ 1421.886543][T26142] dvb-usb: bulk message failed: -22 (5/0) [ 1421.888599][T26142] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1421.891257][T26142] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 1421.942198][T26142] rc_core: IR keymap rc-dvico-mce not found [ 1421.944631][T26142] Registered IR keymap rc-empty [ 1421.947790][T26142] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 1421.952799][T26142] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input54 [ 1421.959346][T26142] dvb-usb: schedule remote query interval to 100 msecs. [ 1421.962271][T26142] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 1421.967513][T26142] usb 5-1: USB disconnect, device number 50 [ 1422.050853][T26142] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 1422.443585][T30873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7037'. [ 1422.743674][T30882] siw: device registration error -23 [ 1422.754515][T30675] veth0_to_bond: left promiscuous mode [ 1423.906457][T30916] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1423.908630][T30916] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1423.911847][T30916] vhci_hcd vhci_hcd.0: Device attached [ 1423.930800][T30916] tmpfs: Bad value for 'mpol' [ 1424.022541][ T6028] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 1424.034138][T30919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7048'. [ 1424.125739][T30922] FAULT_INJECTION: forcing a failure. [ 1424.125739][T30922] name failslab, interval 1, probability 0, space 0, times 0 [ 1424.130071][T30922] CPU: 2 UID: 0 PID: 30922 Comm: syz.2.7053 Tainted: G L syzkaller #0 PREEMPT(full) [ 1424.130094][T30922] Tainted: [L]=SOFTLOCKUP [ 1424.130098][T30922] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1424.130105][T30922] Call Trace: [ 1424.130111][T30922] [ 1424.130118][T30922] dump_stack_lvl+0x16c/0x1f0 [ 1424.130140][T30922] should_fail_ex+0x512/0x640 [ 1424.130153][T30922] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1424.130169][T30922] should_failslab+0xc2/0x120 [ 1424.130187][T30922] kmem_cache_alloc_noprof+0x83/0x770 [ 1424.130202][T30922] ? skb_clone+0x190/0x3f0 [ 1424.130221][T30922] ? skb_clone+0x190/0x3f0 [ 1424.130235][T30922] skb_clone+0x190/0x3f0 [ 1424.130250][T30922] netlink_deliver_tap+0xabd/0xd30 [ 1424.130271][T30922] netlink_unicast+0x64c/0x870 [ 1424.130289][T30922] ? __pfx_netlink_unicast+0x10/0x10 [ 1424.130312][T30922] netlink_sendmsg+0x8c8/0xdd0 [ 1424.130331][T30922] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1424.130349][T30922] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1424.130371][T30922] ____sys_sendmsg+0xa5d/0xc30 [ 1424.130384][T30922] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1424.130394][T30922] ? get_compat_msghdr+0x11a/0x170 [ 1424.130417][T30922] ___sys_sendmsg+0x134/0x1d0 [ 1424.130433][T30922] ? __pfx____sys_sendmsg+0x10/0x10 [ 1424.130455][T30922] ? find_held_lock+0x2b/0x80 [ 1424.130480][T30922] __sys_sendmsg+0x16d/0x220 [ 1424.130495][T30922] ? __pfx___sys_sendmsg+0x10/0x10 [ 1424.130519][T30922] __do_fast_syscall_32+0xe8/0x680 [ 1424.130532][T30922] do_fast_syscall_32+0x32/0x80 [ 1424.130543][T30922] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1424.130557][T30922] RIP: 0023:0xf7fb1579 [ 1424.130567][T30922] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1424.130578][T30922] RSP: 002b:00000000f54a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1424.130589][T30922] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 1424.130596][T30922] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1424.130602][T30922] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1424.130608][T30922] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1424.130615][T30922] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1424.130630][T30922] [ 1424.152392][ T6028] usb 8-1: device descriptor read/64, error -71 [ 1424.212597][T26142] usb 46-1: SetAddress Request (18) to port 0 [ 1424.217762][T26142] usb 46-1: new SuperSpeed USB device number 18 using vhci_hcd [ 1424.339969][T30917] vhci_hcd: connection reset by peer [ 1424.342679][ T61] vhci_hcd vhci_hcd.4: stop threads [ 1424.344724][ T61] vhci_hcd vhci_hcd.4: release socket [ 1424.346846][ T61] vhci_hcd vhci_hcd.4: disconnect device [ 1424.802750][ T6028] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 1424.932965][ T6028] usb 8-1: device descriptor read/64, error -71 [ 1425.043492][ T6028] usb usb8-port1: attempt power cycle [ 1425.084882][T30929] 9pnet_virtio: no channels available for device syz [ 1425.792984][ T6028] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 1425.823357][ T6028] usb 8-1: device descriptor read/8, error -71 [ 1425.939068][T30943] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7060'. [ 1426.072904][ T6028] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 1426.093768][ T6028] usb 8-1: device descriptor read/8, error -71 [ 1426.122804][ T6638] usb 9-1: new high-speed USB device number 102 using dummy_hcd [ 1426.203323][ T6028] usb usb8-port1: unable to enumerate USB device [ 1426.272777][ T6638] usb 9-1: Using ep0 maxpacket: 32 [ 1426.276380][ T6638] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1426.280787][ T6638] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1426.284768][ T6638] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1426.288528][ T6638] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.294014][ T6638] usb 9-1: config 0 descriptor?? [ 1426.843178][ T6638] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 1426.932692][T30940] pim6reg: entered allmulticast mode [ 1426.938824][T30940] pim6reg: left allmulticast mode [ 1427.120829][ T6106] usb 9-1: USB disconnect, device number 102 [ 1427.977848][T30965] netlink: 'syz.0.7066': attribute type 1 has an invalid length. [ 1428.066674][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.109985][T30971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7069'. [ 1428.198062][T30978] FAULT_INJECTION: forcing a failure. [ 1428.198062][T30978] name failslab, interval 1, probability 0, space 0, times 0 [ 1428.201949][T30978] CPU: 1 UID: 0 PID: 30978 Comm: syz.2.7071 Tainted: G L syzkaller #0 PREEMPT(full) [ 1428.201967][T30978] Tainted: [L]=SOFTLOCKUP [ 1428.201970][T30978] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1428.201977][T30978] Call Trace: [ 1428.201982][T30978] [ 1428.201987][T30978] dump_stack_lvl+0x16c/0x1f0 [ 1428.202008][T30978] should_fail_ex+0x512/0x640 [ 1428.202021][T30978] ? fs_reclaim_acquire+0xae/0x150 [ 1428.202039][T30978] should_failslab+0xc2/0x120 [ 1428.202056][T30978] __kmalloc_noprof+0xeb/0x910 [ 1428.202069][T30978] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1428.202087][T30978] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1428.202101][T30978] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1428.202119][T30978] ? tomoyo_profile+0x47/0x60 [ 1428.202137][T30978] tomoyo_path_number_perm+0x245/0x580 [ 1428.202148][T30978] ? tomoyo_path_number_perm+0x237/0x580 [ 1428.202162][T30978] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1428.202190][T30978] ? find_held_lock+0x2b/0x80 [ 1428.202204][T30978] ? hook_file_ioctl_common+0x144/0x410 [ 1428.202221][T30978] ? __fget_files+0x20e/0x3c0 [ 1428.202235][T30978] ? fput+0x70/0xf0 [ 1428.202247][T30978] security_file_ioctl_compat+0x9b/0x240 [ 1428.202262][T30978] __ia32_compat_sys_ioctl+0xc3/0x370 [ 1428.202277][T30978] __do_fast_syscall_32+0xe8/0x680 [ 1428.202290][T30978] do_fast_syscall_32+0x32/0x80 [ 1428.202300][T30978] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1428.202313][T30978] RIP: 0023:0xf7fb1579 [ 1428.202322][T30978] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1428.202332][T30978] RSP: 002b:00000000f54a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1428.202343][T30978] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000802c550a [ 1428.202350][T30978] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 1428.202355][T30978] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1428.202361][T30978] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1428.202367][T30978] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1428.202381][T30978] [ 1428.202385][T30978] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1428.264987][T30982] dlm: no local IP address has been set [ 1428.269913][T30978] usb usb8: usbfs: process 30978 (syz.2.7071) did not claim interface 0 before use [ 1428.273888][T30982] dlm: cannot start dlm midcomms -107 [ 1428.348173][T30984] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1428.351226][T30984] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1428.461391][T30984] vhci_hcd vhci_hcd.0: Device attached [ 1428.490812][T30984] tmpfs: Bad value for 'mpol' [ 1428.534658][T30992] siw: device registration error -23 [ 1428.567634][T30991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7067'. [ 1428.766212][T30985] vhci_hcd: connection closed [ 1428.766575][ T6803] vhci_hcd vhci_hcd.4: stop threads [ 1428.770398][ T6803] vhci_hcd vhci_hcd.4: release socket [ 1428.773524][ T6803] vhci_hcd vhci_hcd.4: disconnect device [ 1429.256252][T26142] usb 46-1: device descriptor read/8, error -110 [ 1429.664334][T26142] usb usb46-port1: attempt power cycle [ 1430.150118][T31013] netlink: 9 bytes leftover after parsing attributes in process `syz.4.7079'. [ 1430.155927][T31013] netlink: 9 bytes leftover after parsing attributes in process `syz.4.7079'. [ 1430.244485][T26142] usb usb46-port1: unable to enumerate USB device [ 1430.417999][T31029] siw: device registration error -23 [ 1430.552781][T31036] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7082'. [ 1430.707178][T31037] netlink: 'syz.0.7081': attribute type 1 has an invalid length. [ 1431.027279][T31041] FAULT_INJECTION: forcing a failure. [ 1431.027279][T31041] name failslab, interval 1, probability 0, space 0, times 0 [ 1431.041218][T31041] CPU: 0 UID: 0 PID: 31041 Comm: syz.3.7086 Tainted: G L syzkaller #0 PREEMPT(full) [ 1431.041237][T31041] Tainted: [L]=SOFTLOCKUP [ 1431.041242][T31041] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1431.041248][T31041] Call Trace: [ 1431.041253][T31041] [ 1431.041259][T31041] dump_stack_lvl+0x16c/0x1f0 [ 1431.041281][T31041] should_fail_ex+0x512/0x640 [ 1431.041294][T31041] ? fs_reclaim_acquire+0xae/0x150 [ 1431.041312][T31041] should_failslab+0xc2/0x120 [ 1431.041330][T31041] __kmalloc_noprof+0xeb/0x910 [ 1431.041342][T31041] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1431.041361][T31041] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1431.041375][T31041] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1431.041391][T31041] ? tomoyo_profile+0x47/0x60 [ 1431.041409][T31041] tomoyo_path_number_perm+0x245/0x580 [ 1431.041420][T31041] ? tomoyo_path_number_perm+0x237/0x580 [ 1431.041434][T31041] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1431.041461][T31041] ? find_held_lock+0x2b/0x80 [ 1431.041475][T31041] ? hook_file_ioctl_common+0x144/0x410 [ 1431.041491][T31041] ? __fget_files+0x20e/0x3c0 [ 1431.041506][T31041] ? fput+0x70/0xf0 [ 1431.041518][T31041] security_file_ioctl_compat+0x9b/0x240 [ 1431.041533][T31041] __ia32_compat_sys_ioctl+0xc3/0x370 [ 1431.041548][T31041] __do_fast_syscall_32+0xe8/0x680 [ 1431.041561][T31041] do_fast_syscall_32+0x32/0x80 [ 1431.041571][T31041] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1431.041585][T31041] RIP: 0023:0xf7ff4579 [ 1431.041594][T31041] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1431.041605][T31041] RSP: 002b:00000000f54a455c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1431.041615][T31041] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000005001 [ 1431.041622][T31041] RDX: 00000000f2ffffff RSI: 0000000000000000 RDI: 0000000000000000 [ 1431.041632][T31041] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1431.041640][T31041] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1431.041648][T31041] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1431.041672][T31041] [ 1431.041680][T31041] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1431.552652][T31051] netlink: 'syz.2.7089': attribute type 1 has an invalid length. [ 1431.567581][T31051] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1431.583498][T31051] bond14: (slave gretap1): making interface the new active one [ 1431.587106][T31051] bond14: (slave gretap1): Enslaving as an active interface with an up link [ 1433.174420][ T6638] page_pool_release_retry() stalled pool shutdown: id 277, 2 inflight 241 sec [ 1433.216672][ T6638] page_pool_release_retry() stalled pool shutdown: id 276, 1 inflight 241 sec [ 1433.219873][ T6638] page_pool_release_retry() stalled pool shutdown: id 273, 1 inflight 241 sec [ 1433.374223][T31072] netlink: 'syz.3.7095': attribute type 1 has an invalid length. [ 1434.085596][T31084] netlink: 'syz.3.7099': attribute type 3 has an invalid length. [ 1434.088391][T31084] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7099'. [ 1434.092674][T31084] netlink: 348 bytes leftover after parsing attributes in process `syz.3.7099'. [ 1434.139547][ T6638] page_pool_release_retry() stalled pool shutdown: id 278, 1 inflight 242 sec [ 1434.278873][T31091] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7100'. [ 1434.614876][T31095] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1434.616892][T31095] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1434.620018][T31095] vhci_hcd vhci_hcd.0: Device attached [ 1434.627130][T31095] random: crng reseeded on system resumption [ 1434.644710][T31095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7101'. [ 1434.904671][ T6031] usb 38-1: SetAddress Request (14) to port 0 [ 1434.907369][ T6031] usb 38-1: new SuperSpeed USB device number 14 using vhci_hcd [ 1435.727439][T31096] vhci_hcd: connection reset by peer [ 1435.729445][T25873] vhci_hcd vhci_hcd.0: stop threads [ 1435.731282][T25873] vhci_hcd vhci_hcd.0: release socket [ 1435.733056][T25873] vhci_hcd vhci_hcd.0: disconnect device [ 1436.083077][T31115] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1436.146267][T31115] netlink: 'syz.2.7107': attribute type 1 has an invalid length. [ 1436.529077][T31123] siw: device registration error -23 [ 1437.017761][T31130] fuse: Bad value for 'fd' [ 1437.311121][T31138] xt_CT: No such helper "snmp" [ 1437.745155][T30028] Bluetooth: hci1: command 0x0406 tx timeout [ 1437.877758][T31152] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1437.910241][T31152] netlink: 'syz.2.7119': attribute type 1 has an invalid length. [ 1438.205194][ T7393] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1438.310411][T31160] netlink: 'syz.4.7120': attribute type 1 has an invalid length. [ 1438.345977][T31160] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1438.371671][ T7393] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 1438.374606][ T7393] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 1438.385156][ T7393] usb 5-1: Product: syz [ 1438.386759][ T7393] usb 5-1: Manufacturer: syz [ 1438.388434][ T7393] usb 5-1: SerialNumber: syz [ 1438.409213][ T7393] usb 5-1: config 0 descriptor?? [ 1438.416740][ T7393] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 1438.419579][ T7393] dvb-usb: bulk message failed: -22 (2/0) [ 1438.427122][ T7393] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1438.431085][T31166] siw: device registration error -23 [ 1438.437450][ T7393] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 1438.439971][ T7393] usb 5-1: media controller created [ 1438.470797][ T7393] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1438.481478][T31168] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1438.497979][T31168] overlayfs: overlapping lowerdir path [ 1438.592615][T31169] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 1438.594984][T31169] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1438.620412][T31169] vhci_hcd vhci_hcd.0: Device attached [ 1438.627584][T31168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7126'. [ 1438.638475][T31155] dvb-usb: bulk message failed: -22 (4/0) [ 1438.640881][T31155] cxusb: i2c read failed [ 1438.646287][ T7393] cxusb: set interface failed [ 1438.648670][ T7393] dvb-usb: bulk message failed: -22 (1/0) [ 1438.668297][ T7393] DVB: Unable to find symbol mt352_attach() [ 1438.670756][ T7393] dvb-usb: bulk message failed: -22 (5/0) [ 1438.672776][ T7393] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1438.675335][ T7393] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 1438.725320][ T7393] rc_core: IR keymap rc-dvico-mce not found [ 1438.730736][ T7393] Registered IR keymap rc-empty [ 1438.735971][ T7393] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 1438.746405][ T7393] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input55 [ 1438.761010][ T7393] dvb-usb: schedule remote query interval to 100 msecs. [ 1438.766904][ T7393] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 1438.787296][ T7393] usb 5-1: USB disconnect, device number 51 [ 1438.797740][T29422] udevd[29422]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 1438.802638][T29422] udevd[29422]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1438.827244][ T7393] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 1438.845501][T28066] usb 41-1: new low-speed USB device number 19 using vhci_hcd [ 1439.055334][T31182] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7129'. [ 1439.299248][T31170] vhci_hcd: connection reset by peer [ 1439.305569][ T6803] vhci_hcd vhci_hcd.2: stop threads [ 1439.307571][ T6803] vhci_hcd vhci_hcd.2: release socket [ 1439.309343][ T6803] vhci_hcd vhci_hcd.2: disconnect device [ 1439.503914][T31189] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1439.508757][T31189] overlayfs: overlapping lowerdir path [ 1439.607566][T31192] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1439.609824][T31192] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1439.613024][T31192] vhci_hcd vhci_hcd.0: Device attached [ 1439.618942][T31192] tmpfs: Bad value for 'mpol' [ 1439.624427][T31192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7131'. [ 1439.906161][ T6028] usb 44-1: SetAddress Request (13) to port 0 [ 1439.915238][ T6028] usb 44-1: new SuperSpeed USB device number 13 using vhci_hcd [ 1439.975566][ T6031] usb 38-1: device descriptor read/8, error -110 [ 1440.164613][T31193] vhci_hcd: connection reset by peer [ 1440.167284][T30637] vhci_hcd vhci_hcd.3: stop threads [ 1440.169019][T30637] vhci_hcd vhci_hcd.3: release socket [ 1440.171246][T30637] vhci_hcd vhci_hcd.3: disconnect device [ 1440.205592][ T7393] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1440.219575][T31199] netlink: 'syz.0.7134': attribute type 1 has an invalid length. [ 1440.366205][ T7393] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1440.370469][ T7393] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1440.376601][ T6031] usb usb38-port1: attempt power cycle [ 1440.384223][ T7393] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1440.388658][ T7393] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.395633][ T7393] usb 7-1: config 0 descriptor?? [ 1440.400919][ T7393] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1440.956581][ T6031] usb usb38-port1: unable to enumerate USB device [ 1441.433728][T31222] siw: device registration error -23 [ 1441.455774][ T10] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1441.517576][ T6031] usb usb38-port2: attempt power cycle [ 1441.646333][ T10] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 1441.649303][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 1441.652127][ T10] usb 5-1: Product: syz [ 1441.961869][ T10] usb 5-1: Manufacturer: syz [ 1442.077222][ T6031] usb usb38-port2: unable to enumerate USB device [ 1442.227321][ T10] usb 5-1: SerialNumber: syz [ 1442.230876][ T10] usb 5-1: config 0 descriptor?? [ 1442.234910][ T10] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 1442.244483][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 1442.247960][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1442.255259][ T10] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 1442.257879][ T10] usb 5-1: media controller created [ 1442.264590][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1442.274234][T31233] FAULT_INJECTION: forcing a failure. [ 1442.274234][T31233] name failslab, interval 1, probability 0, space 0, times 0 [ 1442.283119][T31233] CPU: 1 UID: 0 PID: 31233 Comm: syz.3.7143 Tainted: G L syzkaller #0 PREEMPT(full) [ 1442.283148][T31233] Tainted: [L]=SOFTLOCKUP [ 1442.283154][T31233] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1442.283165][T31233] Call Trace: [ 1442.283172][T31233] [ 1442.283179][T31233] dump_stack_lvl+0x16c/0x1f0 [ 1442.283210][T31233] should_fail_ex+0x512/0x640 [ 1442.283230][T31233] ? fs_reclaim_acquire+0xae/0x150 [ 1442.283260][T31233] should_failslab+0xc2/0x120 [ 1442.283286][T31233] __kmalloc_noprof+0xeb/0x910 [ 1442.283305][T31233] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1442.283335][T31233] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1442.283357][T31233] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1442.283383][T31233] ? tomoyo_profile+0x47/0x60 [ 1442.283412][T31233] tomoyo_path_number_perm+0x245/0x580 [ 1442.283431][T31233] ? tomoyo_path_number_perm+0x237/0x580 [ 1442.283453][T31233] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1442.283500][T31233] ? find_held_lock+0x2b/0x80 [ 1442.283523][T31233] ? hook_file_ioctl_common+0x144/0x410 [ 1442.283550][T31233] ? __fget_files+0x20e/0x3c0 [ 1442.283573][T31233] ? fput+0x70/0xf0 [ 1442.283595][T31233] security_file_ioctl_compat+0x9b/0x240 [ 1442.283620][T31233] __ia32_compat_sys_ioctl+0xc3/0x370 [ 1442.283647][T31233] __do_fast_syscall_32+0xe8/0x680 [ 1442.283669][T31233] do_fast_syscall_32+0x32/0x80 [ 1442.283686][T31233] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1442.283708][T31233] RIP: 0023:0xf7ff4579 [ 1442.283723][T31233] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1442.283739][T31233] RSP: 002b:00000000f54e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1442.283757][T31233] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000802c550a [ 1442.283774][T31233] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1442.283785][T31233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1442.283795][T31233] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1442.283804][T31233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1442.283831][T31233] [ 1442.283839][T31233] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1442.449954][T31212] dvb-usb: bulk message failed: -22 (4/0) [ 1442.451939][T31212] cxusb: i2c read failed [ 1442.537048][ T10] cxusb: set interface failed [ 1442.538731][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1442.572838][ T10] DVB: Unable to find symbol mt352_attach() [ 1442.575559][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 1442.577537][ T10] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1442.580258][ T10] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 1442.646239][ T10] rc_core: IR keymap rc-dvico-mce not found [ 1442.648643][ T10] Registered IR keymap rc-empty [ 1442.656922][ T10] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 1442.668144][ T10] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input56 [ 1442.677114][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 1442.683374][ T10] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 1442.697794][ T10] usb 5-1: USB disconnect, device number 52 [ 1442.788415][ T10] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 1442.890523][T31246] netlink: 'syz.3.7146': attribute type 1 has an invalid length. [ 1442.967801][ T6031] usb 7-1: USB disconnect, device number 24 [ 1443.444812][T31252] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1443.446864][T31252] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1443.465453][T31252] vhci_hcd vhci_hcd.0: Device attached [ 1443.475704][T31252] tmpfs: Bad value for 'mpol' [ 1443.491131][T31252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7148'. [ 1443.726993][ T6106] usb 38-1: SetAddress Request (22) to port 0 [ 1443.729541][ T6106] usb 38-1: new SuperSpeed USB device number 22 using vhci_hcd [ 1444.066432][T28066] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1444.216294][T31253] vhci_hcd: connection reset by peer [ 1444.222509][T30675] vhci_hcd vhci_hcd.0: stop threads [ 1444.225719][T30675] vhci_hcd vhci_hcd.0: release socket [ 1444.235594][T30675] vhci_hcd vhci_hcd.0: disconnect device [ 1444.601198][T31271] sctp: [Deprecated]: syz.4.7153 (pid 31271) Use of int in maxseg socket option. [ 1444.601198][T31271] Use struct sctp_assoc_value instead [ 1444.722070][T31276] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1444.936437][ T6031] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1445.016491][ T6028] usb 44-1: device descriptor read/8, error -110 [ 1445.527468][ T6028] usb usb44-port1: attempt power cycle [ 1445.858892][T31290] netlink: 'syz.4.7159': attribute type 1 has an invalid length. [ 1446.180636][ T6031] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 1446.184444][ T6031] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 1446.317278][ T6028] usb usb44-port1: unable to enumerate USB device [ 1446.386711][ T6031] usb 7-1: Product: syz [ 1446.388383][ T6031] usb 7-1: Manufacturer: syz [ 1446.390244][ T6031] usb 7-1: SerialNumber: syz [ 1446.395135][ T6031] usb 7-1: config 0 descriptor?? [ 1446.403282][ T6031] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 1446.407030][ T6031] dvb-usb: bulk message failed: -22 (2/0) [ 1446.412294][ T6031] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1446.416779][ T6031] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 1446.420210][ T6031] usb 7-1: media controller created [ 1446.431253][ T6031] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1446.611788][T31274] dvb-usb: bulk message failed: -22 (4/0) [ 1446.613700][T31274] cxusb: i2c read failed [ 1446.615892][ T6031] cxusb: set interface failed [ 1446.620614][ T6031] dvb-usb: bulk message failed: -22 (1/0) [ 1446.638334][ T6031] DVB: Unable to find symbol mt352_attach() [ 1446.640289][ T6031] dvb-usb: bulk message failed: -22 (5/0) [ 1446.642315][ T6031] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1446.644648][ T6031] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 1446.686811][ T6031] rc_core: IR keymap rc-dvico-mce not found [ 1446.689136][ T6031] Registered IR keymap rc-empty [ 1446.692617][ T6031] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 1446.702051][ T6031] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input57 [ 1446.706317][ T6031] dvb-usb: schedule remote query interval to 100 msecs. [ 1446.708476][ T6031] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 1446.717827][ T6031] usb 7-1: USB disconnect, device number 25 [ 1446.743637][ T6031] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 1446.967340][T31309] siw: device registration error -23 [ 1447.240100][T31316] siw: device registration error -23 [ 1447.252852][T31315] FAULT_INJECTION: forcing a failure. [ 1447.252852][T31315] name failslab, interval 1, probability 0, space 0, times 0 [ 1447.265634][T31315] CPU: 1 UID: 0 PID: 31315 Comm: syz.2.7165 Tainted: G L syzkaller #0 PREEMPT(full) [ 1447.265662][T31315] Tainted: [L]=SOFTLOCKUP [ 1447.265668][T31315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1447.265678][T31315] Call Trace: [ 1447.265686][T31315] [ 1447.265693][T31315] dump_stack_lvl+0x16c/0x1f0 [ 1447.265753][T31315] should_fail_ex+0x512/0x640 [ 1447.265772][T31315] ? __kmalloc_noprof+0xca/0x910 [ 1447.265791][T31315] should_failslab+0xc2/0x120 [ 1447.265815][T31315] __kmalloc_noprof+0xeb/0x910 [ 1447.265830][T31315] ? do_raw_spin_lock+0x12c/0x2b0 [ 1447.265848][T31315] ? sock_kmalloc+0x111/0x170 [ 1447.265875][T31315] ? sock_kmalloc+0x111/0x170 [ 1447.265896][T31315] sock_kmalloc+0x111/0x170 [ 1447.265921][T31315] hash_alloc_result+0xd7/0x150 [ 1447.265944][T31315] hash_recvmsg+0x198/0x960 [ 1447.265972][T31315] ? iovec_from_user+0xbb/0x140 [ 1447.265992][T31315] ____sys_recvmsg+0x5f9/0x6b0 [ 1447.266012][T31315] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1447.266025][T31315] ? import_iovec+0x86/0xb0 [ 1447.266051][T31315] ? __lock_acquire+0x436/0x2890 [ 1447.266086][T31315] ___sys_recvmsg+0x114/0x1a0 [ 1447.266107][T31315] ? __pfx____sys_recvmsg+0x10/0x10 [ 1447.266129][T31315] ? find_held_lock+0x2b/0x80 [ 1447.266158][T31315] ? __pfx___might_resched+0x10/0x10 [ 1447.266185][T31315] do_recvmmsg+0x55d/0x750 [ 1447.266210][T31315] ? __pfx_do_recvmmsg+0x10/0x10 [ 1447.266248][T31315] ? __fget_files+0x20e/0x3c0 [ 1447.266273][T31315] __sys_recvmmsg+0x21c/0x280 [ 1447.266295][T31315] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1447.266317][T31315] ? __pfx_ksys_write+0x10/0x10 [ 1447.266343][T31315] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 1447.266367][T31315] ? __do_fast_syscall_32+0x9a/0x680 [ 1447.266383][T31315] ? lockdep_hardirqs_on+0x7c/0x110 [ 1447.266406][T31315] __do_fast_syscall_32+0xe8/0x680 [ 1447.266424][T31315] do_fast_syscall_32+0x32/0x80 [ 1447.266439][T31315] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1447.266458][T31315] RIP: 0023:0xf7fb1579 [ 1447.266471][T31315] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1447.266486][T31315] RSP: 002b:00000000f54a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1447.266502][T31315] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800047c0 [ 1447.266513][T31315] RDX: 0000000000003aa0 RSI: 0000000060002000 RDI: 0000000000000000 [ 1447.266522][T31315] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1447.266531][T31315] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1447.266540][T31315] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1447.266563][T31315] [ 1447.363589][T31317] sctp: [Deprecated]: syz.2.7165 (pid 31317) Use of int in maxseg socket option. [ 1447.363589][T31317] Use struct sctp_assoc_value instead [ 1447.641367][T31324] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7167'. [ 1447.649501][T31324] netlink: 'syz.4.7167': attribute type 4 has an invalid length. [ 1447.669355][T31324] netlink: 'syz.4.7167': attribute type 4 has an invalid length. [ 1447.927784][T31329] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1447.991682][T31332] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1447.994168][T31332] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1448.001700][T31332] vhci_hcd vhci_hcd.0: Device attached [ 1448.026739][T31332] tmpfs: Bad value for 'mpol' [ 1448.046707][T31332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7169'. [ 1448.185249][T31338] netlink: 'syz.0.7171': attribute type 1 has an invalid length. [ 1448.208801][T31338] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1448.221447][T31338] bond12: (slave veth0_to_bond): Releasing active interface [ 1448.267301][ T24] usb 44-1: SetAddress Request (17) to port 0 [ 1448.270040][ T24] usb 44-1: new SuperSpeed USB device number 17 using vhci_hcd [ 1448.547791][T31333] vhci_hcd: connection reset by peer [ 1448.557695][ T5283] vhci_hcd vhci_hcd.3: stop threads [ 1448.559860][ T5283] vhci_hcd vhci_hcd.3: release socket [ 1448.573196][ T5283] vhci_hcd vhci_hcd.3: disconnect device [ 1448.726957][T31347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7175'. [ 1448.746401][T31347] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1448.752378][T31347] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7175'. [ 1448.756234][T31347] bond4: entered promiscuous mode [ 1448.758484][T31347] bond4: entered allmulticast mode [ 1448.761917][T31347] FAULT_INJECTION: forcing a failure. [ 1448.761917][T31347] name failslab, interval 1, probability 0, space 0, times 0 [ 1448.767117][T31347] CPU: 0 UID: 0 PID: 31347 Comm: syz.4.7175 Tainted: G L syzkaller #0 PREEMPT(full) [ 1448.767146][T31347] Tainted: [L]=SOFTLOCKUP [ 1448.767152][T31347] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1448.767163][T31347] Call Trace: [ 1448.767170][T31347] [ 1448.767178][T31347] dump_stack_lvl+0x16c/0x1f0 [ 1448.767209][T31347] should_fail_ex+0x512/0x640 [ 1448.767227][T31347] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1448.767249][T31347] should_failslab+0xc2/0x120 [ 1448.767270][T31347] kmem_cache_alloc_noprof+0x83/0x770 [ 1448.767289][T31347] ? skb_clone+0x190/0x3f0 [ 1448.767314][T31347] ? skb_clone+0x190/0x3f0 [ 1448.767334][T31347] skb_clone+0x190/0x3f0 [ 1448.767357][T31347] netlink_deliver_tap+0xabd/0xd30 [ 1448.767386][T31347] netlink_unicast+0x64c/0x870 [ 1448.767414][T31347] ? __pfx_netlink_unicast+0x10/0x10 [ 1448.767458][T31347] netlink_sendmsg+0x8c8/0xdd0 [ 1448.767490][T31347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1448.767517][T31347] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1448.767550][T31347] ____sys_sendmsg+0xa5d/0xc30 [ 1448.767571][T31347] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1448.767587][T31347] ? get_compat_msghdr+0x11a/0x170 [ 1448.767621][T31347] ___sys_sendmsg+0x134/0x1d0 [ 1448.767645][T31347] ? __pfx____sys_sendmsg+0x10/0x10 [ 1448.767680][T31347] ? find_held_lock+0x2b/0x80 [ 1448.767720][T31347] __sys_sendmsg+0x16d/0x220 [ 1448.767745][T31347] ? __pfx___sys_sendmsg+0x10/0x10 [ 1448.767786][T31347] __do_fast_syscall_32+0xe8/0x680 [ 1448.767806][T31347] do_fast_syscall_32+0x32/0x80 [ 1448.767823][T31347] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1448.767846][T31347] RIP: 0023:0xf7f73579 [ 1448.767860][T31347] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1448.767875][T31347] RSP: 002b:00000000f546655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1448.767892][T31347] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000280 [ 1448.767903][T31347] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1448.767912][T31347] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1448.767922][T31347] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1448.767932][T31347] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1448.767958][T31347] [ 1448.777487][ T6106] usb 38-1: device descriptor read/8, error -110 [ 1448.783215][T31347] dummy0: entered promiscuous mode [ 1448.797181][ T6031] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1448.798040][T31347] dummy0: entered allmulticast mode [ 1448.867403][T31347] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 1448.963996][ T6031] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 1448.968543][ T6031] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 1448.972155][ T6031] usb 7-1: Product: syz [ 1448.974254][ T6031] usb 7-1: Manufacturer: syz [ 1448.976563][ T6031] usb 7-1: SerialNumber: syz [ 1448.981872][ T6031] usb 7-1: config 0 descriptor?? [ 1448.987243][ T6031] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 1448.990492][ T6031] dvb-usb: bulk message failed: -22 (2/0) [ 1448.995840][ T6031] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1449.002885][ T6031] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 1449.006466][ T6031] usb 7-1: media controller created [ 1449.017878][ T6031] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1449.200348][T31343] dvb-usb: bulk message failed: -22 (4/0) [ 1449.201803][ T6106] usb usb38-port1: attempt power cycle [ 1449.202632][T31343] cxusb: i2c read failed [ 1449.209165][ T6031] cxusb: set interface failed [ 1449.218441][ T6031] dvb-usb: bulk message failed: -22 (1/0) [ 1449.251295][ T6031] DVB: Unable to find symbol mt352_attach() [ 1449.254310][ T6031] dvb-usb: bulk message failed: -22 (5/0) [ 1449.265007][ T6031] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1449.268526][ T6031] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 1449.311301][T31363] siw: device registration error -23 [ 1449.347302][ T6031] rc_core: IR keymap rc-dvico-mce not found [ 1449.351608][ T6031] Registered IR keymap rc-empty [ 1449.359645][ T6031] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 1449.370763][ T6031] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input58 [ 1449.384694][ T6031] dvb-usb: schedule remote query interval to 100 msecs. [ 1449.392996][ T6031] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 1449.409306][ T6031] usb 7-1: USB disconnect, device number 26 [ 1449.484756][ T6031] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 1449.769470][ T6106] usb usb38-port1: unable to enumerate USB device [ 1450.280616][ T40] audit: type=1326 audit(1768451455.279:11068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31375 comm="syz.3.7186" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 1450.289603][ T40] audit: type=1326 audit(1768451455.279:11069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31375 comm="syz.3.7186" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 1450.298569][ T40] audit: type=1326 audit(1768451455.279:11070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31375 comm="syz.3.7186" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 1450.307608][ T40] audit: type=1326 audit(1768451455.279:11071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31375 comm="syz.3.7186" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 1450.316591][ T40] audit: type=1326 audit(1768451455.279:11072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31375 comm="syz.3.7186" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 1450.325818][ T40] audit: type=1326 audit(1768451455.279:11073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31375 comm="syz.3.7186" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 1450.348268][ T6106] usb usb38-port2: attempt power cycle [ 1450.546421][ T40] audit: type=1326 audit(1768451455.539:11074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31375 comm="syz.3.7186" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 1450.555621][ T40] audit: type=1326 audit(1768451455.539:11075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31375 comm="syz.3.7186" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 1450.918404][ T6106] usb usb38-port2: unable to enumerate USB device [ 1451.210040][T31407] FAULT_INJECTION: forcing a failure. [ 1451.210040][T31407] name failslab, interval 1, probability 0, space 0, times 0 [ 1451.215140][T31407] CPU: 0 UID: 0 PID: 31407 Comm: syz.2.7196 Tainted: G L syzkaller #0 PREEMPT(full) [ 1451.215160][T31407] Tainted: [L]=SOFTLOCKUP [ 1451.215163][T31407] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1451.215170][T31407] Call Trace: [ 1451.215174][T31407] [ 1451.215180][T31407] dump_stack_lvl+0x16c/0x1f0 [ 1451.215200][T31407] should_fail_ex+0x512/0x640 [ 1451.215213][T31407] ? fs_reclaim_acquire+0xae/0x150 [ 1451.215231][T31407] should_failslab+0xc2/0x120 [ 1451.215248][T31407] kmem_cache_alloc_noprof+0x83/0x770 [ 1451.215260][T31407] ? __pfx_map_id_range_down+0x10/0x10 [ 1451.215276][T31407] ? security_inode_alloc+0x3b/0x2b0 [ 1451.215290][T31407] ? security_inode_alloc+0x3b/0x2b0 [ 1451.215301][T31407] security_inode_alloc+0x3b/0x2b0 [ 1451.215312][T31407] inode_init_always_gfp+0xced/0x1040 [ 1451.215330][T31407] alloc_inode+0x86/0x240 [ 1451.215343][T31407] new_inode+0x22/0x1c0 [ 1451.215355][T31407] ovl_new_inode+0x1d/0x50 [ 1451.215369][T31407] ovl_create_object+0x17a/0x3b0 [ 1451.215385][T31407] ? __pfx_ovl_create_object+0x10/0x10 [ 1451.215401][T31407] ? bpf_lsm_inode_permission+0x9/0x10 [ 1451.215412][T31407] ? security_inode_permission+0xbf/0x260 [ 1451.215425][T31407] ? inode_permission+0x37b/0x640 [ 1451.215437][T31407] ? __pfx_ovl_create+0x10/0x10 [ 1451.215452][T31407] lookup_open.isra.0+0x12dc/0x1780 [ 1451.215469][T31407] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1451.215485][T31407] ? find_held_lock+0x2b/0x80 [ 1451.215503][T31407] ? __pfx_down_write+0x10/0x10 [ 1451.215518][T31407] path_openat+0xa95/0x3140 [ 1451.215538][T31407] ? __pfx_path_openat+0x10/0x10 [ 1451.215556][T31407] ? __lock_acquire+0x436/0x2890 [ 1451.215568][T31407] do_filp_open+0x20b/0x470 [ 1451.215584][T31407] ? __pfx_do_filp_open+0x10/0x10 [ 1451.215610][T31407] ? _raw_spin_unlock+0x28/0x50 [ 1451.215624][T31407] ? alloc_fd+0x471/0x7d0 [ 1451.215644][T31407] do_sys_openat2+0x121/0x290 [ 1451.215656][T31407] ? __pfx_do_sys_openat2+0x10/0x10 [ 1451.215674][T31407] __do_sys_openat2+0x1c0/0x2d0 [ 1451.215686][T31407] ? __pfx___do_sys_openat2+0x10/0x10 [ 1451.215697][T31407] ? ksys_write+0x1ac/0x250 [ 1451.215713][T31407] ? do_user_addr_fault+0x843/0x1370 [ 1451.215729][T31407] __do_fast_syscall_32+0xe8/0x680 [ 1451.215741][T31407] do_fast_syscall_32+0x32/0x80 [ 1451.215756][T31407] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1451.215770][T31407] RIP: 0023:0xf7fb1579 [ 1451.215779][T31407] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1451.215789][T31407] RSP: 002b:00000000f54a655c EFLAGS: 00000296 ORIG_RAX: 00000000000001b5 [ 1451.215800][T31407] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800000c0 [ 1451.215807][T31407] RDX: 0000000080000140 RSI: 0000000000000018 RDI: 0000000000000000 [ 1451.215813][T31407] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1451.215819][T31407] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1451.215825][T31407] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1451.215838][T31407] [ 1451.320927][ T6106] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1451.420081][T31410] netlink: 'syz.3.7197': attribute type 21 has an invalid length. [ 1451.438898][T31413] FAULT_INJECTION: forcing a failure. [ 1451.438898][T31413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1451.457759][T31413] CPU: 2 UID: 0 PID: 31413 Comm: syz.2.7198 Tainted: G L syzkaller #0 PREEMPT(full) [ 1451.457783][T31413] Tainted: [L]=SOFTLOCKUP [ 1451.457788][T31413] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1451.457796][T31413] Call Trace: [ 1451.457802][T31413] [ 1451.457807][T31413] dump_stack_lvl+0x16c/0x1f0 [ 1451.457830][T31413] should_fail_ex+0x512/0x640 [ 1451.457846][T31413] _copy_to_user+0x32/0xd0 [ 1451.457860][T31413] bpf_test_finish.isra.0+0x48d/0x6b0 [ 1451.457879][T31413] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 1451.457898][T31413] ? bpf_dispatcher_xdp+0x800/0x1000 [ 1451.457909][T31413] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 1451.457929][T31413] bpf_prog_test_run_xdp+0xafd/0x1660 [ 1451.457962][T31413] ? __fget_files+0x204/0x3c0 [ 1451.457982][T31413] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1451.457999][T31413] ? __pfx___might_fault+0x10/0x10 [ 1451.458015][T31413] ? fput+0x70/0xf0 [ 1451.458027][T31413] ? __bpf_prog_get+0x97/0x2a0 [ 1451.458041][T31413] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1451.458057][T31413] __sys_bpf+0x1035/0x4980 [ 1451.458070][T31413] ? __pfx___sys_bpf+0x10/0x10 [ 1451.458080][T31413] ? find_held_lock+0x2b/0x80 [ 1451.458098][T31413] ? find_held_lock+0x2b/0x80 [ 1451.458116][T31413] ? __mutex_unlock_slowpath+0x161/0x790 [ 1451.458137][T31413] ? fput+0x70/0xf0 [ 1451.458147][T31413] ? ksys_write+0x1ac/0x250 [ 1451.458162][T31413] ? __pfx_ksys_write+0x10/0x10 [ 1451.458180][T31413] __ia32_sys_bpf+0x76/0xe0 [ 1451.458190][T31413] ? lockdep_hardirqs_on+0x7c/0x110 [ 1451.458207][T31413] __do_fast_syscall_32+0xe8/0x680 [ 1451.458219][T31413] do_fast_syscall_32+0x32/0x80 [ 1451.458230][T31413] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1451.458245][T31413] RIP: 0023:0xf7fb1579 [ 1451.458254][T31413] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1451.458265][T31413] RSP: 002b:00000000f54a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1451.458276][T31413] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000600 [ 1451.458283][T31413] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 1451.458289][T31413] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1451.458295][T31413] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1451.458302][T31413] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1451.458316][T31413] [ 1452.333655][T31434] FAULT_INJECTION: forcing a failure. [ 1452.333655][T31434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1452.341049][T31434] CPU: 2 UID: 0 PID: 31434 Comm: syz.2.7203 Tainted: G L syzkaller #0 PREEMPT(full) [ 1452.341077][T31434] Tainted: [L]=SOFTLOCKUP [ 1452.341083][T31434] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1452.341093][T31434] Call Trace: [ 1452.341100][T31434] [ 1452.341107][T31434] dump_stack_lvl+0x16c/0x1f0 [ 1452.341136][T31434] should_fail_ex+0x512/0x640 [ 1452.341158][T31434] copy_fpstate_to_sigframe+0x827/0xad0 [ 1452.341192][T31434] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 1452.341214][T31434] ? posixtimer_deliver_signal+0x105/0x6b0 [ 1452.341240][T31434] ? posixtimer_deliver_signal+0x1c7/0x6b0 [ 1452.341259][T31434] ? x86_task_fpu+0x5f/0x90 [ 1452.341284][T31434] get_sigframe+0x4a8/0x9c0 [ 1452.341317][T31434] ? __pfx_get_sigframe+0x10/0x10 [ 1452.341342][T31434] ? _raw_spin_unlock_irq+0x23/0x50 [ 1452.341366][T31434] ? siginfo_layout+0x177/0x290 [ 1452.341391][T31434] ia32_setup_rt_frame+0xe4/0xb30 [ 1452.341412][T31434] ? find_held_lock+0x2b/0x80 [ 1452.341434][T31434] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 1452.341459][T31434] arch_do_signal_or_restart+0x475/0x7a0 [ 1452.341480][T31434] ? kvm_sched_clock_read+0x11/0x20 [ 1452.341503][T31434] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1452.341523][T31434] ? sched_clock_cpu+0x6c/0x530 [ 1452.341561][T31434] irqentry_exit+0x38a/0x8c0 [ 1452.341580][T31434] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1452.341599][T31434] RIP: 0023:0xf7fb1577 [ 1452.341613][T31434] Code: 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 [ 1452.341630][T31434] RSP: 002b:00000000f54a655c EFLAGS: 00000296 [ 1452.341646][T31434] RAX: 0000000000000003 RBX: 0000000000000003 RCX: 0000000080000100 [ 1452.341657][T31434] RDX: 000000000000007d RSI: 0000000000000000 RDI: 0000000000000000 [ 1452.341668][T31434] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1452.341704][T31434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1452.341715][T31434] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1452.341740][T31434] [ 1452.676921][T31452] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1452.679275][T31452] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1452.685082][T31454] FAULT_INJECTION: forcing a failure. [ 1452.685082][T31454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1452.694044][T31452] vhci_hcd vhci_hcd.0: Device attached [ 1452.698336][T31454] CPU: 1 UID: 0 PID: 31454 Comm: syz.2.7205 Tainted: G L syzkaller #0 PREEMPT(full) [ 1452.698365][T31454] Tainted: [L]=SOFTLOCKUP [ 1452.698369][T31454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1452.698376][T31454] Call Trace: [ 1452.698380][T31454] [ 1452.698386][T31454] dump_stack_lvl+0x16c/0x1f0 [ 1452.698407][T31454] should_fail_ex+0x512/0x640 [ 1452.698422][T31454] _copy_to_user+0x32/0xd0 [ 1452.698435][T31454] io_query+0x31f/0x6f0 [ 1452.698448][T31454] ? __pfx_io_query+0x10/0x10 [ 1452.698462][T31454] ? ksys_write+0x190/0x250 [ 1452.698481][T31454] __do_sys_io_uring_register+0x982/0x2620 [ 1452.698498][T31454] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1452.698511][T31454] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 1452.698527][T31454] ? __fget_files+0x20e/0x3c0 [ 1452.698544][T31454] ? fput+0x70/0xf0 [ 1452.698554][T31454] ? ksys_write+0x1ac/0x250 [ 1452.698568][T31454] ? __pfx_ksys_write+0x10/0x10 [ 1452.698584][T31454] ? do_user_addr_fault+0x843/0x1370 [ 1452.698601][T31454] __do_fast_syscall_32+0xe8/0x680 [ 1452.698614][T31454] do_fast_syscall_32+0x32/0x80 [ 1452.698624][T31454] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1452.698639][T31454] RIP: 0023:0xf7fb1579 [ 1452.698648][T31454] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1452.698659][T31454] RSP: 002b:00000000f546455c EFLAGS: 00000296 ORIG_RAX: 00000000000001ab [ 1452.698669][T31454] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 0000000000000023 [ 1452.698676][T31454] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1452.698682][T31454] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1452.698687][T31454] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1452.698698][T31454] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1452.698713][T31454] [ 1452.781740][T31452] fuse: Unknown parameter 'groŒp_id' [ 1452.967943][ T6106] usb 46-1: SetAddress Request (22) to port 0 [ 1452.970667][ T6106] usb 46-1: new SuperSpeed USB device number 22 using vhci_hcd [ 1453.204346][T31453] vhci_hcd: connection reset by peer [ 1453.207572][ T1011] vhci_hcd vhci_hcd.4: stop threads [ 1453.217889][ T1011] vhci_hcd vhci_hcd.4: release socket [ 1453.221612][ T1011] vhci_hcd vhci_hcd.4: disconnect device [ 1453.340983][ T24] usb 44-1: device descriptor read/8, error -110 [ 1453.738703][ T24] usb usb44-port1: attempt power cycle [ 1453.937370][T31471] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1453.984400][T31477] netlink: 'syz.2.7209': attribute type 1 has an invalid length. [ 1454.314863][ T24] usb usb44-port1: unable to enumerate USB device [ 1454.502214][T31487] netlink: 'syz.4.7214': attribute type 1 has an invalid length. [ 1455.010682][T31498] siw: device registration error -23 [ 1456.283267][T31520] FAULT_INJECTION: forcing a failure. [ 1456.283267][T31520] name failslab, interval 1, probability 0, space 0, times 0 [ 1456.287934][T31520] CPU: 3 UID: 0 PID: 31520 Comm: syz.3.7225 Tainted: G L syzkaller #0 PREEMPT(full) [ 1456.287954][T31520] Tainted: [L]=SOFTLOCKUP [ 1456.287958][T31520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1456.287965][T31520] Call Trace: [ 1456.287970][T31520] [ 1456.287977][T31520] dump_stack_lvl+0x16c/0x1f0 [ 1456.288001][T31520] should_fail_ex+0x512/0x640 [ 1456.288015][T31520] ? __kmalloc_noprof+0xca/0x910 [ 1456.288029][T31520] should_failslab+0xc2/0x120 [ 1456.288046][T31520] __kmalloc_noprof+0xeb/0x910 [ 1456.288058][T31520] ? bpf_ctx_init+0xf8/0x1e0 [ 1456.288075][T31520] ? bpf_ctx_init+0xf8/0x1e0 [ 1456.288088][T31520] bpf_ctx_init+0xf8/0x1e0 [ 1456.288100][T31520] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1456.288116][T31520] bpf_prog_test_run_skb+0x2b2/0x31a0 [ 1456.288135][T31520] ? find_held_lock+0x2b/0x80 [ 1456.288155][T31520] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1456.288172][T31520] ? fput+0x70/0xf0 [ 1456.288185][T31520] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1456.288200][T31520] __sys_bpf+0x1035/0x4980 [ 1456.288214][T31520] ? __pfx___sys_bpf+0x10/0x10 [ 1456.288224][T31520] ? find_held_lock+0x2b/0x80 [ 1456.288239][T31520] ? find_held_lock+0x2b/0x80 [ 1456.288256][T31520] ? __mutex_unlock_slowpath+0x161/0x790 [ 1456.288276][T31520] ? fput+0x70/0xf0 [ 1456.288285][T31520] ? ksys_write+0x1ac/0x250 [ 1456.288300][T31520] ? __pfx_ksys_write+0x10/0x10 [ 1456.288317][T31520] __ia32_sys_bpf+0x76/0xe0 [ 1456.288327][T31520] ? lockdep_hardirqs_on+0x7c/0x110 [ 1456.288345][T31520] __do_fast_syscall_32+0xe8/0x680 [ 1456.288358][T31520] do_fast_syscall_32+0x32/0x80 [ 1456.288368][T31520] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1456.288399][T31520] RIP: 0023:0xf7ff4579 [ 1456.288409][T31520] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1456.288420][T31520] RSP: 002b:00000000f54e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1456.288435][T31520] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000180 [ 1456.288442][T31520] RDX: 000000000000004c RSI: 0000000000000000 RDI: 0000000000000000 [ 1456.288451][T31520] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1456.288457][T31520] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1456.288464][T31520] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1456.288479][T31520] [ 1456.411220][T31524] trusted_key: encrypted_key: keylen parameter is missing [ 1456.620501][T31527] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1456.658826][T31526] netlink: 'syz.4.7223': attribute type 1 has an invalid length. [ 1457.009201][T30028] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1457.015567][T30028] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1457.019640][T30028] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1457.025231][T30028] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1457.028942][T30028] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1457.070027][T31531] lo speed is unknown, defaulting to 1000 [ 1457.225434][T31531] chnl_net:caif_netlink_parms(): no params data found [ 1457.273049][T31531] bridge0: port 1(bridge_slave_0) entered blocking state [ 1457.275451][T31531] bridge0: port 1(bridge_slave_0) entered disabled state [ 1457.277864][T31531] bridge_slave_0: entered allmulticast mode [ 1457.281042][T31531] bridge_slave_0: entered promiscuous mode [ 1457.284408][T31531] bridge0: port 2(bridge_slave_1) entered blocking state [ 1457.286756][T31531] bridge0: port 2(bridge_slave_1) entered disabled state [ 1457.289223][T31531] bridge_slave_1: entered allmulticast mode [ 1457.291907][T31531] bridge_slave_1: entered promiscuous mode [ 1457.307174][T31531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1457.312078][T31531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1457.331540][T31531] team0: Port device team_slave_0 added [ 1457.334780][T31531] team0: Port device team_slave_1 added [ 1457.349864][T31531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1457.352510][T31531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1457.360597][T31531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1457.391556][T31547] FAULT_INJECTION: forcing a failure. [ 1457.391556][T31547] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1457.395650][T31547] CPU: 2 UID: 0 PID: 31547 Comm: syz.3.7231 Tainted: G L syzkaller #0 PREEMPT(full) [ 1457.395669][T31547] Tainted: [L]=SOFTLOCKUP [ 1457.395673][T31547] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1457.395680][T31547] Call Trace: [ 1457.395684][T31547] [ 1457.395690][T31547] dump_stack_lvl+0x16c/0x1f0 [ 1457.395716][T31547] should_fail_ex+0x512/0x640 [ 1457.395731][T31547] get_futex_key+0x1d0/0x15f0 [ 1457.395744][T31547] ? __lock_acquire+0x436/0x2890 [ 1457.395755][T31547] ? __pfx_get_futex_key+0x10/0x10 [ 1457.395766][T31547] ? __lock_acquire+0x436/0x2890 [ 1457.395774][T31547] ? _parse_integer_limit+0x17f/0x1d0 [ 1457.395794][T31547] futex_wait_setup+0x9d/0x570 [ 1457.395812][T31547] __futex_wait+0x193/0x2f0 [ 1457.395827][T31547] ? __pfx___futex_wait+0x10/0x10 [ 1457.395843][T31547] ? __pfx_futex_wake_mark+0x10/0x10 [ 1457.395859][T31547] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1457.395872][T31547] ? __hrtimer_setup+0x176/0x280 [ 1457.395886][T31547] ? ktime_add_safe+0x60/0x70 [ 1457.395900][T31547] futex_wait+0xe8/0x380 [ 1457.395914][T31547] ? __pfx_futex_wait+0x10/0x10 [ 1457.395927][T31547] ? __lock_acquire+0x436/0x2890 [ 1457.395938][T31547] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1457.395956][T31547] do_futex+0x229/0x350 [ 1457.395968][T31547] ? __pfx_do_futex+0x10/0x10 [ 1457.395978][T31547] ? rcu_is_watching+0x12/0xc0 [ 1457.395993][T31547] ? ktime_get+0x200/0x310 [ 1457.396002][T31547] ? lockdep_hardirqs_on+0x7c/0x110 [ 1457.396019][T31547] ? read_tsc+0x9/0x20 [ 1457.396035][T31547] __ia32_sys_futex_time32+0x1d9/0x460 [ 1457.396050][T31547] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 1457.396063][T31547] ? ksys_write+0x1ac/0x250 [ 1457.396078][T31547] ? __pfx_ksys_write+0x10/0x10 [ 1457.396093][T31547] ? do_user_addr_fault+0x843/0x1370 [ 1457.396109][T31547] __do_fast_syscall_32+0xe8/0x680 [ 1457.396120][T31547] do_fast_syscall_32+0x32/0x80 [ 1457.396130][T31547] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1457.396144][T31547] RIP: 0023:0xf7ff4579 [ 1457.396153][T31547] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1457.396163][T31547] RSP: 002b:00000000f54e655c EFLAGS: 00000296 ORIG_RAX: 00000000000000f0 [ 1457.396174][T31547] RAX: ffffffffffffffda RBX: 000000008000cffc RCX: 0000000000000000 [ 1457.396180][T31547] RDX: 0000000000000004 RSI: 0000000080edfff0 RDI: 0000000000000000 [ 1457.396186][T31547] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1457.396192][T31547] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1457.396198][T31547] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1457.396212][T31547] [ 1457.487257][T31531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1457.491030][T31531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1457.518704][T31531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1457.535947][T31548] sch_tbf: burst 19360 is lower than device lo mtu (11337746) ! [ 1457.657931][ T5184] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.726043][T31531] hsr_slave_0: entered promiscuous mode [ 1457.728602][T31531] hsr_slave_1: entered promiscuous mode [ 1457.731682][T31531] debugfs: 'hsr0' already exists in 'hsr' [ 1457.733683][T31531] Cannot create hsr debugfs directory [ 1457.738003][T31551] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1457.740101][T31551] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1457.748234][T31551] vhci_hcd vhci_hcd.0: Device attached [ 1457.763525][T31551] tmpfs: Bad value for 'mpol' [ 1457.769539][T31551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7228'. [ 1457.800757][ T5184] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.907030][ T5184] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.984849][ T5184] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.009555][ T7393] usb 42-1: SetAddress Request (107) to port 0 [ 1458.011954][ T7393] usb 42-1: new SuperSpeed USB device number 107 using vhci_hcd [ 1458.058985][ T6106] usb 46-1: device descriptor read/8, error -110 [ 1458.094879][T31559] vhci_hcd: connection reset by peer [ 1458.096895][ T1187] vhci_hcd vhci_hcd.2: stop threads [ 1458.098777][ T1187] vhci_hcd vhci_hcd.2: release socket [ 1458.100806][ T1187] vhci_hcd vhci_hcd.2: disconnect device [ 1458.132365][ T5184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1458.136176][ T5184] bridge_slave_0: left allmulticast mode [ 1458.138033][ T5184] bridge_slave_0: left promiscuous mode [ 1458.141337][ T5184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1458.169700][T13410] usb 9-1: new high-speed USB device number 103 using dummy_hcd [ 1458.319043][T13410] usb 9-1: Using ep0 maxpacket: 8 [ 1458.324441][T13410] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1458.328048][T13410] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1458.332426][T13410] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1458.336816][T13410] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1458.341740][T13410] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1458.347799][T13410] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1458.351845][T13410] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.459431][ T6106] usb usb46-port1: attempt power cycle [ 1458.565846][T13410] usb 9-1: GET_CAPABILITIES returned 0 [ 1458.567783][T13410] usbtmc 9-1:16.0: can't read capabilities [ 1458.702047][ T5184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1458.707517][ T5184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1458.721061][ T5184] bond0 (unregistering): Released all slaves [ 1458.959258][T31576] netlink: 'syz.3.7236': attribute type 1 has an invalid length. [ 1459.054421][ T6106] usb usb46-port1: unable to enumerate USB device [ 1459.082302][ T5184] bond1 (unregistering): Released all slaves [ 1459.102509][T30028] Bluetooth: hci3: command tx timeout [ 1459.107932][T31579] usbtmc 9-1:16.0: usb_control_msg returned -71 [ 1459.223082][ T10] usb 9-1: USB disconnect, device number 103 [ 1459.270671][ T5184] bond2 (unregistering): Released all slaves [ 1459.525290][ T5184] bond3 (unregistering): Released all slaves [ 1459.669518][ T5184] bond4 (unregistering): Released all slaves [ 1459.788599][ T5184] bond5 (unregistering): Released all slaves [ 1459.897138][ T5184] bond6 (unregistering): Released all slaves [ 1460.006774][ T5184] bond7 (unregistering): Released all slaves [ 1460.128281][ T5184] bond8 (unregistering): Released all slaves [ 1460.240381][ T5184] bond9 (unregistering): Released all slaves [ 1460.354370][ T5184] bond10 (unregistering): Released all slaves [ 1460.361073][ T5184] bond11 (unregistering): Released all slaves [ 1460.485450][ T5184] bond12 (unregistering): (slave veth1): Releasing active interface [ 1460.490009][ T5184] bond12 (unregistering): Released all slaves [ 1460.496625][ T5184] bond13 (unregistering): Released all slaves [ 1460.612794][ T5184] bond14 (unregistering): Released all slaves [ 1461.179462][T30028] Bluetooth: hci3: command tx timeout [ 1461.445494][ T5184] hsr_slave_0: left promiscuous mode [ 1461.485983][ T5184] hsr_slave_1: left promiscuous mode [ 1461.502341][ T5184] veth1_macvtap: left promiscuous mode [ 1461.504250][ T5184] veth0_macvtap: left promiscuous mode [ 1461.506109][ T5184] veth1_vlan: left promiscuous mode [ 1461.507779][ T5184] veth0_vlan: left promiscuous mode [ 1462.150076][ T5184] team0 (unregistering): Port device team_slave_1 removed [ 1462.188441][ T5184] team0 (unregistering): Port device team_slave_0 removed [ 1462.188845][T31621] netlink: 'syz.3.7247': attribute type 1 has an invalid length. [ 1462.738151][T31531] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1462.782348][T31531] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1462.815673][T31531] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1462.855205][T31531] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1462.915728][T31633] lo speed is unknown, defaulting to 1000 [ 1462.929498][T31638] FAULT_INJECTION: forcing a failure. [ 1462.929498][T31638] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1462.940881][T31638] CPU: 2 UID: 0 PID: 31638 Comm: syz.4.7250 Tainted: G L syzkaller #0 PREEMPT(full) [ 1462.940902][T31638] Tainted: [L]=SOFTLOCKUP [ 1462.940906][T31638] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1462.940913][T31638] Call Trace: [ 1462.940917][T31638] [ 1462.940922][T31638] dump_stack_lvl+0x16c/0x1f0 [ 1462.940944][T31638] should_fail_ex+0x512/0x640 [ 1462.940961][T31638] should_fail_alloc_page+0xe7/0x130 [ 1462.940980][T31638] prepare_alloc_pages+0x401/0x670 [ 1462.941001][T31638] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 1462.941018][T31638] ? __lock_acquire+0x436/0x2890 [ 1462.941032][T31638] ? __lock_acquire+0x436/0x2890 [ 1462.941042][T31638] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1462.941063][T31638] ? find_held_lock+0x2b/0x80 [ 1462.941078][T31638] ? is_bpf_text_address+0x8a/0x1a0 [ 1462.941094][T31638] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1462.941112][T31638] ? policy_nodemask+0xea/0x4e0 [ 1462.941130][T31638] alloc_pages_mpol+0x1fb/0x550 [ 1462.941148][T31638] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1462.941169][T31638] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1462.941196][T31638] shmem_alloc_folio+0x135/0x160 [ 1462.941215][T31638] shmem_alloc_and_add_folio+0x494/0xc20 [ 1462.941233][T31638] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1462.941246][T31638] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 1462.941263][T31638] shmem_get_folio_gfp+0x67f/0x1610 [ 1462.941278][T31638] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1462.941290][T31638] ? filemap_map_pages+0x12dd/0x1e00 [ 1462.941305][T31638] shmem_fault+0x1fe/0xa00 [ 1462.941318][T31638] ? __pfx_shmem_fault+0x10/0x10 [ 1462.941332][T31638] ? __pfx_filemap_map_pages+0x10/0x10 [ 1462.941348][T31638] ? __pfx_filemap_map_pages+0x10/0x10 [ 1462.941358][T31638] __do_fault+0x10d/0x490 [ 1462.941372][T31638] ? __pfx_filemap_map_pages+0x10/0x10 [ 1462.941383][T31638] do_fault+0xae4/0x1ad0 [ 1462.941398][T31638] ? __pfx_filemap_map_pages+0x10/0x10 [ 1462.941409][T31638] ? __pmd_alloc+0x6aa/0x9c0 [ 1462.941426][T31638] __handle_mm_fault+0x1919/0x2bb0 [ 1462.941441][T31638] ? __pfx___handle_mm_fault+0x10/0x10 [ 1462.941465][T31638] handle_mm_fault+0x3fe/0xad0 [ 1462.941478][T31638] __get_user_pages+0x54e/0x3590 [ 1462.941500][T31638] ? __pfx___get_user_pages+0x10/0x10 [ 1462.941520][T31638] populate_vma_page_range+0x267/0x3f0 [ 1462.941537][T31638] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1462.941553][T31638] ? __pfx_find_vma_intersection+0x10/0x10 [ 1462.941569][T31638] ? do_mmap+0x69c/0x1210 [ 1462.941618][T31638] __mm_populate+0x1d8/0x380 [ 1462.941642][T31638] ? __pfx___mm_populate+0x10/0x10 [ 1462.941661][T31638] ? up_write+0x282/0x4e0 [ 1462.941673][T31638] vm_mmap_pgoff+0x37f/0x470 [ 1462.941690][T31638] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1462.941708][T31638] ? fput+0x70/0xf0 [ 1462.941719][T31638] ? ksys_write+0x1ac/0x250 [ 1462.941735][T31638] ksys_mmap_pgoff+0x7d/0x5c0 [ 1462.941751][T31638] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1462.941767][T31638] __do_fast_syscall_32+0xe8/0x680 [ 1462.941779][T31638] do_fast_syscall_32+0x32/0x80 [ 1462.941789][T31638] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1462.941803][T31638] RIP: 0023:0xf7f73579 [ 1462.941813][T31638] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1462.941823][T31638] RSP: 002b:00000000f544555c EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1462.941833][T31638] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000b36000 [ 1462.941840][T31638] RDX: 0000000000000003 RSI: 0000000000008031 RDI: 00000000ffffffff [ 1462.941846][T31638] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1462.941853][T31638] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1462.941860][T31638] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1462.941875][T31638] [ 1463.100588][ T7393] usb 42-1: device descriptor read/8, error -110 [ 1463.176390][T31531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1463.184558][T31531] 8021q: adding VLAN 0 to HW filter on device team0 [ 1463.195964][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 1463.198870][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1463.223446][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 1463.226017][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1463.271496][T30028] Bluetooth: hci3: command tx timeout [ 1463.324522][T31647] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1463.326828][T31647] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1463.501358][ T5184] IPVS: stop unused estimator thread 0... [ 1463.549881][ T7393] usb 42-1: SetAddress Request (108) to port 0 [ 1463.553311][ T7393] usb 42-1: new SuperSpeed USB device number 108 using vhci_hcd [ 1463.560722][T31647] vhci_hcd vhci_hcd.0: Device attached [ 1463.576655][T31631] tmpfs: Bad value for 'mpol' [ 1463.602618][T31531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1463.630839][T31531] veth0_vlan: entered promiscuous mode [ 1463.636275][T31531] veth1_vlan: entered promiscuous mode [ 1463.650206][T31647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7248'. [ 1463.652795][T31531] veth0_macvtap: entered promiscuous mode [ 1463.756728][T31531] veth1_macvtap: entered promiscuous mode [ 1463.775848][T31531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1463.787976][T31531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1463.797055][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.802575][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.808961][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.815314][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.897475][T31648] vhci_hcd: connection reset by peer [ 1463.908446][T27949] vhci_hcd vhci_hcd.2: stop threads [ 1463.910669][T27949] vhci_hcd vhci_hcd.2: release socket [ 1463.912704][T27949] vhci_hcd vhci_hcd.2: disconnect device [ 1464.024397][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1464.027690][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1464.054524][T27949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1464.057987][T27949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1464.209302][T31664] lo speed is unknown, defaulting to 1000 [ 1464.217830][T31674] FAULT_INJECTION: forcing a failure. [ 1464.217830][T31674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1464.223422][T31674] CPU: 0 UID: 0 PID: 31674 Comm: syz.3.7257 Tainted: G L syzkaller #0 PREEMPT(full) [ 1464.223441][T31674] Tainted: [L]=SOFTLOCKUP [ 1464.223445][T31674] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1464.223452][T31674] Call Trace: [ 1464.223456][T31674] [ 1464.223460][T31674] dump_stack_lvl+0x16c/0x1f0 [ 1464.223483][T31674] should_fail_ex+0x512/0x640 [ 1464.223499][T31674] _copy_from_user+0x2e/0xd0 [ 1464.223514][T31674] ucma_write+0x128/0x330 [ 1464.223526][T31674] ? __pfx_ucma_write+0x10/0x10 [ 1464.223537][T31674] ? bpf_lsm_file_permission+0x9/0x10 [ 1464.223550][T31674] ? security_file_permission+0x71/0x210 [ 1464.223565][T31674] ? rw_verify_area+0xcf/0x6c0 [ 1464.223581][T31674] ? __pfx_ucma_write+0x10/0x10 [ 1464.223591][T31674] vfs_writev+0x5df/0xde0 [ 1464.223608][T31674] ? __pfx_vfs_writev+0x10/0x10 [ 1464.223622][T31674] ? find_held_lock+0x2b/0x80 [ 1464.223650][T31674] ? __fget_files+0x20e/0x3c0 [ 1464.223664][T31674] ? __fget_files+0x180/0x3c0 [ 1464.223681][T31674] ? do_writev+0x28c/0x340 [ 1464.223694][T31674] do_writev+0x28c/0x340 [ 1464.223708][T31674] ? __pfx_do_writev+0x10/0x10 [ 1464.223722][T31674] ? do_user_addr_fault+0x843/0x1370 [ 1464.223739][T31674] __do_fast_syscall_32+0xe8/0x680 [ 1464.223753][T31674] do_fast_syscall_32+0x32/0x80 [ 1464.223763][T31674] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1464.223777][T31674] RIP: 0023:0xf7ff4579 [ 1464.223787][T31674] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1464.223798][T31674] RSP: 002b:00000000f54e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000092 [ 1464.223809][T31674] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 1464.223816][T31674] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1464.223822][T31674] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1464.223828][T31674] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1464.223834][T31674] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1464.223848][T31674] [ 1464.272681][ T40] audit: type=1326 audit(1768451469.267:11076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31663 comm="syz.4.7255" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x0 [ 1464.326410][T31675] siw: device registration error -23 [ 1464.680633][T31682] netlink: 'syz.3.7258': attribute type 1 has an invalid length. [ 1464.800429][T31687] FAULT_INJECTION: forcing a failure. [ 1464.800429][T31687] name failslab, interval 1, probability 0, space 0, times 0 [ 1464.811715][T31687] CPU: 0 UID: 0 PID: 31687 Comm: syz.2.7260 Tainted: G L syzkaller #0 PREEMPT(full) [ 1464.811744][T31687] Tainted: [L]=SOFTLOCKUP [ 1464.811750][T31687] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1464.811762][T31687] Call Trace: [ 1464.811769][T31687] [ 1464.811777][T31687] dump_stack_lvl+0x16c/0x1f0 [ 1464.811807][T31687] should_fail_ex+0x512/0x640 [ 1464.811826][T31687] ? fs_reclaim_acquire+0xae/0x150 [ 1464.811868][T31687] should_failslab+0xc2/0x120 [ 1464.811892][T31687] kmem_cache_alloc_noprof+0x83/0x770 [ 1464.811918][T31687] ? __pfx_map_id_range_down+0x10/0x10 [ 1464.811940][T31687] ? security_inode_alloc+0x3b/0x2b0 [ 1464.811962][T31687] ? security_inode_alloc+0x3b/0x2b0 [ 1464.811978][T31687] security_inode_alloc+0x3b/0x2b0 [ 1464.811997][T31687] inode_init_always_gfp+0xced/0x1040 [ 1464.812025][T31687] alloc_inode+0x86/0x240 [ 1464.812044][T31687] new_inode+0x22/0x1c0 [ 1464.812064][T31687] __debugfs_create_file+0x105/0x530 [ 1464.812086][T31687] debugfs_create_file_full+0x41/0x60 [ 1464.812106][T31687] ref_tracker_dir_debugfs+0x19d/0x2f0 [ 1464.812127][T31687] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1464.812171][T31687] ? lockdep_init_map_type+0x5c/0x270 [ 1464.812192][T31687] preinit_net.part.0+0x24e/0x8f0 [ 1464.812221][T31687] copy_net_ns+0x4cd/0x7c0 [ 1464.812247][T31687] create_new_namespaces+0x3ea/0xab0 [ 1464.812276][T31687] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1464.812301][T31687] ksys_unshare+0x45b/0xa40 [ 1464.812326][T31687] ? __pfx_ksys_unshare+0x10/0x10 [ 1464.812349][T31687] ? ksys_write+0x1ac/0x250 [ 1464.812375][T31687] ? do_user_addr_fault+0x843/0x1370 [ 1464.812399][T31687] __ia32_sys_unshare+0x30/0x40 [ 1464.812414][T31687] __do_fast_syscall_32+0xe8/0x680 [ 1464.812434][T31687] do_fast_syscall_32+0x32/0x80 [ 1464.812450][T31687] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1464.812471][T31687] RIP: 0023:0xf7fb1579 [ 1464.812485][T31687] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1464.812499][T31687] RSP: 002b:00000000f54a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000136 [ 1464.812517][T31687] RAX: ffffffffffffffda RBX: 0000000062040200 RCX: 0000000000000000 [ 1464.812528][T31687] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1464.812537][T31687] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1464.812546][T31687] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1464.812556][T31687] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1464.812581][T31687] [ 1464.814603][T31687] debugfs: out of free dentries, can not create file 'net_refcnt@ffff888047bb27d8' [ 1465.183891][T31687] lo speed is unknown, defaulting to 1000 [ 1465.355032][T30028] Bluetooth: hci3: command tx timeout [ 1466.432128][ T40] audit: type=1326 audit(1768451471.426:11077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31701 comm="syz.0.7263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 1466.441938][ T40] audit: type=1326 audit(1768451471.426:11078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31701 comm="syz.0.7263" exe="/syz-executor" sig=0 arch=40000003 syscall=183 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 1466.449591][ T40] audit: type=1326 audit(1768451471.426:11079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31701 comm="syz.0.7263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 1466.472256][ T40] audit: type=1326 audit(1768451471.426:11080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31701 comm="syz.0.7263" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 1466.479928][ T40] audit: type=1326 audit(1768451471.436:11081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31701 comm="syz.0.7263" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 1466.486945][ T40] audit: type=1326 audit(1768451471.436:11082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31701 comm="syz.0.7263" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 1466.493861][ T40] audit: type=1326 audit(1768451471.436:11083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31701 comm="syz.0.7263" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 1466.500141][ T40] audit: type=1326 audit(1768451471.436:11084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31701 comm="syz.0.7263" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 1466.561485][ T40] audit: type=1326 audit(1768451471.556:11085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31701 comm="syz.0.7263" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 1466.700489][ T5997] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1466.870725][ T5997] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1466.875853][ T5997] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 58415, setting to 1024 [ 1466.882492][ T5997] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1466.886750][ T5997] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1466.889903][ T5997] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.914939][T31702] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1466.923744][T31724] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 1466.926268][T31724] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1466.930127][ T5997] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1466.930298][T31724] vhci_hcd vhci_hcd.0: Device attached [ 1467.217437][T31728] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1467.220291][T31728] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1467.298111][T31728] vhci_hcd vhci_hcd.0: Device attached [ 1467.356706][T31728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7268'. [ 1467.580676][ T6106] usb 44-1: SetAddress Request (21) to port 0 [ 1467.583049][ T6106] usb 44-1: new SuperSpeed USB device number 21 using vhci_hcd [ 1467.754386][T31725] vhci_hcd: connection closed [ 1467.755124][ T5283] vhci_hcd vhci_hcd.2: stop threads [ 1467.758258][ T5283] vhci_hcd vhci_hcd.2: release socket [ 1467.760311][ T5283] vhci_hcd vhci_hcd.2: disconnect device [ 1467.794558][T31733] vhci_hcd: connection reset by peer [ 1467.796485][ T6803] vhci_hcd vhci_hcd.3: stop threads [ 1467.798847][ T6803] vhci_hcd vhci_hcd.3: release socket [ 1467.801394][ T6803] vhci_hcd vhci_hcd.3: disconnect device [ 1468.151072][ T5997] usb 5-1: USB disconnect, device number 53 [ 1468.521554][T31741] netlink: 'syz.4.7272': attribute type 1 has an invalid length. [ 1468.623898][ T7393] usb 42-1: device descriptor read/8, error -110 [ 1468.731285][ T7393] usb usb42-port1: attempt power cycle [ 1468.800924][T26142] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1469.191601][ T24] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1469.356125][ T24] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 1469.359825][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 1469.362672][ T24] usb 5-1: Product: syz [ 1469.364215][ T24] usb 5-1: Manufacturer: syz [ 1469.365781][ T24] usb 5-1: SerialNumber: syz [ 1469.369044][ T24] usb 5-1: config 0 descriptor?? [ 1469.375433][ T24] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 1469.377813][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 1469.381392][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1469.384824][ T24] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 1469.387460][ T24] usb 5-1: media controller created [ 1469.395502][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1469.602069][ T24] cxusb: set interface failed [ 1469.603787][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1469.624998][ T24] DVB: Unable to find symbol mt352_attach() [ 1469.627143][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 1469.629308][ T24] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1469.632027][ T24] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 1469.681055][ T24] rc_core: IR keymap rc-dvico-mce not found [ 1469.683297][ T24] Registered IR keymap rc-empty [ 1469.685514][ T24] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 1469.691349][ T24] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input59 [ 1469.696179][ T24] dvb-usb: schedule remote query interval to 100 msecs. [ 1469.700254][ T24] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 1469.708248][ T24] usb 5-1: USB disconnect, device number 54 [ 1469.810605][ T24] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 1470.063641][ T7393] usb usb42-port1: unable to enumerate USB device [ 1470.403854][T31774] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1470.459113][T31784] siw: device registration error -23 [ 1470.463412][T31781] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1470.466190][T31781] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1470.469321][T31781] vhci_hcd vhci_hcd.0: Device attached [ 1470.492647][T31774] netlink: 'syz.2.7283': attribute type 1 has an invalid length. [ 1470.539111][T31785] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7282'. [ 1470.701064][T31782] vhci_hcd: connection closed [ 1470.701328][ T5184] vhci_hcd vhci_hcd.3: stop threads [ 1470.711164][ T5184] vhci_hcd vhci_hcd.3: release socket [ 1470.715703][ T5184] vhci_hcd vhci_hcd.3: disconnect device [ 1470.901208][ T40] kauditd_printk_skb: 44 callbacks suppressed [ 1470.901227][ T40] audit: type=1326 audit(1768451475.895:11130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31772 comm="syz.0.7285" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x0 [ 1472.215019][T28066] page_pool_release_retry() stalled pool shutdown: id 226, 1 inflight 303 sec [ 1472.218912][T28066] page_pool_release_retry() stalled pool shutdown: id 224, 1 inflight 303 sec [ 1472.227597][T28066] page_pool_release_retry() stalled pool shutdown: id 221, 1 inflight 303 sec [ 1472.457396][T31829] netlink: 'syz.4.7294': attribute type 1 has an invalid length. [ 1472.498680][T31830] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7298'. [ 1472.503079][T31832] siw: device registration error -23 [ 1472.504738][T31830] block nbd0: not configured, cannot reconfigure [ 1472.624219][ T6106] usb 44-1: device descriptor read/8, error -110 [ 1472.974241][T31836] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1472.976374][T31836] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1472.981742][T31836] vhci_hcd vhci_hcd.0: Device attached [ 1473.013065][ T6106] usb usb44-port1: attempt power cycle [ 1473.051322][T31839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7299'. [ 1473.263155][T28066] page_pool_release_retry() stalled pool shutdown: id 220, 1 inflight 304 sec [ 1473.276450][ T7393] usb 42-1: SetAddress Request (111) to port 0 [ 1473.278898][ T7393] usb 42-1: new SuperSpeed USB device number 111 using vhci_hcd [ 1473.296033][T31849] lo speed is unknown, defaulting to 1000 [ 1473.484028][T31853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7302'. [ 1473.487658][T31853] fuse: Unknown parameter 'fd¸?ßhJíÕß Þ2t' [ 1473.566154][T31837] vhci_hcd: connection reset by peer [ 1473.568465][ T5283] vhci_hcd vhci_hcd.2: stop threads [ 1473.570799][ T5283] vhci_hcd vhci_hcd.2: release socket [ 1473.573177][ T5283] vhci_hcd vhci_hcd.2: disconnect device [ 1473.593373][ T6106] usb usb44-port1: unable to enumerate USB device [ 1475.128277][T31874] siw: device registration error -23 [ 1477.714868][T31893] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1477.717297][T31893] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1477.720497][T31893] vhci_hcd vhci_hcd.0: Device attached [ 1477.723779][T31893] tmpfs: Bad value for 'mpol' [ 1477.782483][T31902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7314'. [ 1477.937715][T31896] vhci_hcd: connection closed [ 1477.937943][T30675] vhci_hcd vhci_hcd.2: stop threads [ 1477.941209][T30675] vhci_hcd vhci_hcd.2: release socket [ 1477.943170][T30675] vhci_hcd vhci_hcd.2: disconnect device [ 1478.319959][T31913] FAULT_INJECTION: forcing a failure. [ 1478.319959][T31913] name failslab, interval 1, probability 0, space 0, times 0 [ 1478.324371][T31913] CPU: 3 UID: 0 PID: 31913 Comm: syz.3.7319 Tainted: G L syzkaller #0 PREEMPT(full) [ 1478.324390][T31913] Tainted: [L]=SOFTLOCKUP [ 1478.324394][T31913] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1478.324400][T31913] Call Trace: [ 1478.324406][T31913] [ 1478.324411][T31913] dump_stack_lvl+0x16c/0x1f0 [ 1478.324438][T31913] should_fail_ex+0x512/0x640 [ 1478.324454][T31913] should_failslab+0xc2/0x120 [ 1478.324471][T31913] kmem_cache_alloc_noprof+0x83/0x770 [ 1478.324485][T31913] ? lock_acquire+0x179/0x330 [ 1478.324495][T31913] ? skb_clone+0x190/0x3f0 [ 1478.324512][T31913] ? skb_clone+0x190/0x3f0 [ 1478.324525][T31913] skb_clone+0x190/0x3f0 [ 1478.324539][T31913] dev_queue_xmit_nit+0x25b/0xac0 [ 1478.324559][T31913] dev_hard_start_xmit+0x56b/0x6e0 [ 1478.324574][T31913] __dev_queue_xmit+0x6d7/0x46b0 [ 1478.324592][T31913] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1478.324613][T31913] ? __asan_memcpy+0x3c/0x60 [ 1478.324627][T31913] ? __asan_memcpy+0x3c/0x60 [ 1478.324639][T31913] ? __skb_clone+0x570/0x760 [ 1478.324655][T31913] netlink_deliver_tap+0xa87/0xd30 [ 1478.324677][T31913] netlink_unicast+0x64c/0x870 [ 1478.324697][T31913] ? __pfx_netlink_unicast+0x10/0x10 [ 1478.324718][T31913] netlink_sendmsg+0x8c8/0xdd0 [ 1478.324736][T31913] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1478.324754][T31913] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1478.324775][T31913] ____sys_sendmsg+0xa5d/0xc30 [ 1478.324787][T31913] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1478.324796][T31913] ? get_compat_msghdr+0x11a/0x170 [ 1478.324817][T31913] ___sys_sendmsg+0x134/0x1d0 [ 1478.324833][T31913] ? __pfx____sys_sendmsg+0x10/0x10 [ 1478.324854][T31913] ? find_held_lock+0x2b/0x80 [ 1478.324877][T31913] __sys_sendmsg+0x16d/0x220 [ 1478.324891][T31913] ? __pfx___sys_sendmsg+0x10/0x10 [ 1478.324911][T31913] ? do_user_addr_fault+0x843/0x1370 [ 1478.324927][T31913] __do_fast_syscall_32+0xe8/0x680 [ 1478.324939][T31913] do_fast_syscall_32+0x32/0x80 [ 1478.324949][T31913] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1478.324963][T31913] RIP: 0023:0xf7ff4579 [ 1478.324972][T31913] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1478.324983][T31913] RSP: 002b:00000000f54e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1478.324993][T31913] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1478.325000][T31913] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1478.325006][T31913] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1478.325012][T31913] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1478.325018][T31913] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1478.325032][T31913] [ 1478.422920][ T7393] usb 42-1: device descriptor read/8, error -110 [ 1478.619174][T31920] siw: device registration error -23 [ 1478.771566][T31923] lo speed is unknown, defaulting to 1000 [ 1478.783019][T31924] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1478.785059][T31924] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1478.793106][T31924] vhci_hcd vhci_hcd.0: Device attached [ 1478.823388][ T7393] usb usb42-port1: attempt power cycle [ 1479.242762][ T10] usb 41-1: new low-speed USB device number 21 using vhci_hcd [ 1479.524806][T26142] hid-generic 0005:4C4A:5505.0009: item fetching failed at offset 0/1 [ 1479.528017][T26142] hid-generic 0005:4C4A:5505.0009: probe with driver hid-generic failed with error -22 [ 1480.187138][T31925] vhci_hcd: connection reset by peer [ 1480.208874][T25873] vhci_hcd vhci_hcd.2: stop threads [ 1480.210653][T25873] vhci_hcd vhci_hcd.2: release socket [ 1480.212533][T25873] vhci_hcd vhci_hcd.2: disconnect device [ 1480.247326][T31949] netlink: 'syz.4.7326': attribute type 6 has an invalid length. [ 1480.296168][T31950] netlink: 'syz.0.7325': attribute type 1 has an invalid length. [ 1480.317052][T31951] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1480.319480][T31951] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1480.322635][T31951] vhci_hcd vhci_hcd.0: Device attached [ 1480.329773][T31951] random: crng reseeded on system resumption [ 1480.353817][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1480.357825][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1480.434029][T31949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1480.603048][T13410] usb 46-1: SetAddress Request (26) to port 0 [ 1480.605625][T13410] usb 46-1: new SuperSpeed USB device number 26 using vhci_hcd [ 1480.962551][T31952] vhci_hcd: connection reset by peer [ 1480.967081][T31946] vhci_hcd vhci_hcd.4: stop threads [ 1480.969157][T31946] vhci_hcd vhci_hcd.4: release socket [ 1480.974882][T31946] vhci_hcd vhci_hcd.4: disconnect device [ 1481.966658][T31979] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1482.553480][T31995] 9pnet_virtio: no channels available for device syz [ 1483.688675][T31936] INFO: trying to register non-static key. [ 1483.690955][T31936] The code is fine but needs lockdep annotation, or maybe [ 1483.694699][T31936] you didn't initialize this object before use? [ 1483.698225][T31936] turning off the locking correctness validator. [ 1483.700210][T31936] CPU: 1 UID: 0 PID: 31936 Comm: khidpd_4c4a5505 Tainted: G L syzkaller #0 PREEMPT(full) [ 1483.700227][T31936] Tainted: [L]=SOFTLOCKUP [ 1483.700230][T31936] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1483.700238][T31936] Call Trace: [ 1483.700244][T31936] [ 1483.700249][T31936] dump_stack_lvl+0x116/0x1f0 [ 1483.700270][T31936] register_lock_class+0x497/0x4b0 [ 1483.700281][T31936] ? rcu_is_watching+0x12/0xc0 [ 1483.700295][T31936] ? trace_sched_exit_tp+0xd1/0x110 [ 1483.700313][T31936] __lock_acquire+0xa4/0x2890 [ 1483.700325][T31936] lock_acquire+0x179/0x330 [ 1483.700334][T31936] ? __mutex_lock+0xca5/0x1ca0 [ 1483.700345][T31936] ? schedule+0x2d7/0x3a0 [ 1483.700360][T31936] _raw_spin_lock_irqsave+0x3a/0x60 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1483.700375][T31936] ? __mutex_lock+0xca5/0x1ca0 [ 1483.700384][T31936] __mutex_lock+0xca5/0x1ca0 [ 1483.700397][T31936] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1483.700414][T31936] ? l2cap_unregister_user+0x71/0x240 [ 1483.700426][T31936] ? __pfx___mutex_lock+0x10/0x10 [ 1483.700436][T31936] ? rcu_is_watching+0x12/0xc0 [ 1483.700450][T31936] ? lockdep_hardirqs_on+0x7c/0x110 [ 1483.700466][T31936] ? __try_to_del_timer_sync+0x110/0x170 [ 1483.700490][T31936] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 1483.700516][T31936] ? l2cap_unregister_user+0x71/0x240 [ 1483.700528][T31936] l2cap_unregister_user+0x71/0x240 [ 1483.700542][T31936] hidp_session_thread+0x45e/0x680 [ 1483.700561][T31936] ? __pfx_hidp_session_thread+0x10/0x10 [ 1483.700580][T31936] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 1483.700594][T31936] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 1483.700607][T31936] ? lockdep_hardirqs_on+0x7c/0x110 [ 1483.700623][T31936] ? __kthread_parkme+0x19e/0x250 [ 1483.700639][T31936] ? __pfx_hidp_session_thread+0x10/0x10 [ 1483.700654][T31936] kthread+0x3c5/0x780 [ 1483.700664][T31936] ? __pfx_kthread+0x10/0x10 [ 1483.700674][T31936] ? rcu_is_watching+0x12/0xc0 [ 1483.700687][T31936] ? __pfx_kthread+0x10/0x10 [ 1483.700697][T31936] ret_from_fork+0x983/0xb10 [ 1483.700709][T31936] ? __pfx_ret_from_fork+0x10/0x10 [ 1483.700720][T31936] ? __switch_to+0x7af/0x10d0 [ 1483.700733][T31936] ? __pfx_kthread+0x10/0x10 [ 1483.700743][T31936] ret_from_fork_asm+0x1a/0x30 [ 1483.700763][T31936] [ 1483.793212][T31936] non-slab/vmalloc memory [ 1483.795144][T31936] list_del corruption. prev->next should be ffffc90007cb7bf0, but was 0000000000000000. (prev=ffff88806d4dc0a8) [ 1483.800255][T31936] ------------[ cut here ]------------ [ 1483.802596][T31936] kernel BUG at lib/list_debug.c:62! [ 1483.805056][T31936] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 1483.808109][T31936] CPU: 1 UID: 0 PID: 31936 Comm: khidpd_4c4a5505 Tainted: G L syzkaller #0 PREEMPT(full) [ 1483.813080][T31936] Tainted: [L]=SOFTLOCKUP [ 1483.815094][T31936] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1483.819049][T31936] RIP: 0010:__list_del_entry_valid_or_report+0x17a/0x200 [ 1483.821687][T31936] Code: 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 8d 00 00 00 48 8b 55 00 48 89 e9 48 89 de 48 c7 c7 20 bb f2 8b e8 17 5a e9 fc 90 <0f> 0b 4c 89 e7 e8 6c d5 4f fd 48 89 ea 48 b8 00 00 00 00 00 fc ff [ 1483.829227][T31936] RSP: 0018:ffffc90007cb7ac0 EFLAGS: 00010086 [ 1483.831208][T31936] RAX: 000000000000006d RBX: ffffc90007cb7bf0 RCX: ffffffff819c19b5 [ 1483.834025][T31936] RDX: 0000000000000000 RSI: ffffffff819c9599 RDI: 0000000000000005 [ 1483.836640][T31936] RBP: ffff88806d4dc0a8 R08: 0000000000000005 R09: 0000000000000000 [ 1483.839250][T31936] R10: 0000000000000002 R11: 6c65645f7473696c R12: ffff88806d4dc0a8 [ 1483.841747][T31936] R13: dffffc0000000000 R14: ffff88806d4dc058 R15: ffff88806d4dc058 [ 1483.844559][T31936] FS: 0000000000000000(0000) GS:ffff8880977f9000(0000) knlGS:0000000000000000 [ 1483.847353][T31936] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1483.849757][T31936] CR2: 00000000f73e8098 CR3: 000000007175e000 CR4: 0000000000352ef0 [ 1483.853045][T31936] Call Trace: [ 1483.854360][T31936] [ 1483.855528][T31936] __mutex_remove_waiter+0x1a/0x1a0 [ 1483.857713][T31936] ? __mutex_lock+0x1291/0x1ca0 [ 1483.859754][T31936] __mutex_lock+0x12f6/0x1ca0 [ 1483.861831][T31936] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1483.864069][T31936] ? l2cap_unregister_user+0x71/0x240 [ 1483.865798][T31936] ? __pfx___mutex_lock+0x10/0x10 [ 1483.867398][T31936] ? rcu_is_watching+0x12/0xc0 [ 1483.868929][T31936] ? lockdep_hardirqs_on+0x7c/0x110 [ 1483.870594][T31936] ? __try_to_del_timer_sync+0x110/0x170 [ 1483.872562][T31936] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 1483.874729][T31936] ? l2cap_unregister_user+0x71/0x240 [ 1483.876426][T31936] l2cap_unregister_user+0x71/0x240 [ 1483.878122][T31936] hidp_session_thread+0x45e/0x680 [ 1483.879743][T31936] ? __pfx_hidp_session_thread+0x10/0x10 [ 1483.881534][T31936] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 1483.883853][T31936] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 1483.886021][T31936] ? lockdep_hardirqs_on+0x7c/0x110 [ 1483.887784][T31936] ? __kthread_parkme+0x19e/0x250 [ 1483.889691][T31936] ? __pfx_hidp_session_thread+0x10/0x10 [ 1483.891657][T31936] kthread+0x3c5/0x780 [ 1483.893096][T31936] ? __pfx_kthread+0x10/0x10 [ 1483.894864][T31936] ? rcu_is_watching+0x12/0xc0 [ 1483.896438][T31936] ? __pfx_kthread+0x10/0x10 [ 1483.897969][T31936] ret_from_fork+0x983/0xb10 [ 1483.899475][T31936] ? __pfx_ret_from_fork+0x10/0x10 [ 1483.901148][T31936] ? __switch_to+0x7af/0x10d0 [ 1483.902792][T31936] ? __pfx_kthread+0x10/0x10 [ 1483.904544][T31936] ret_from_fork_asm+0x1a/0x30 [ 1483.906257][T31936] [ 1483.907264][T31936] Modules linked in: [ 1483.908524][T31936] ---[ end trace 0000000000000000 ]--- [ 1483.910255][T31936] RIP: 0010:__list_del_entry_valid_or_report+0x17a/0x200 [ 1483.912602][T31936] Code: 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 8d 00 00 00 48 8b 55 00 48 89 e9 48 89 de 48 c7 c7 20 bb f2 8b e8 17 5a e9 fc 90 <0f> 0b 4c 89 e7 e8 6c d5 4f fd 48 89 ea 48 b8 00 00 00 00 00 fc ff [ 1483.919020][T31936] RSP: 0018:ffffc90007cb7ac0 EFLAGS: 00010086 [ 1483.921017][T31936] RAX: 000000000000006d RBX: ffffc90007cb7bf0 RCX: ffffffff819c19b5 [ 1483.923704][T31936] RDX: 0000000000000000 RSI: ffffffff819c9599 RDI: 0000000000000005 [ 1483.926329][T31936] RBP: ffff88806d4dc0a8 R08: 0000000000000005 R09: 0000000000000000 [ 1483.928871][T31936] R10: 0000000000000002 R11: 6c65645f7473696c R12: ffff88806d4dc0a8 [ 1483.931598][T31936] R13: dffffc0000000000 R14: ffff88806d4dc058 R15: ffff88806d4dc058 [ 1483.934410][T31936] FS: 0000000000000000(0000) GS:ffff8880977f9000(0000) knlGS:0000000000000000 [ 1483.937468][T31936] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1483.939719][T31936] CR2: 00000000f73e8098 CR3: 000000007175e000 CR4: 0000000000352ef0 [ 1483.942520][T31936] Kernel panic - not syncing: Fatal exception [ 1483.945507][T31936] Kernel Offset: disabled [ 1483.946880][T31936] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:27:13 Registers: info registers vcpu 0 CPU#0 RAX=0000000001bf6f7c RBX=0000000000000000 RCX=ffffffff8b75a6d9 RDX=ffffed100564673e RSI=ffffffff8bf2b600 RDI=ffffffff8192d28d RBP=fffffbfff1c12f68 RSP=ffffffff8e007df8 R8 =0000000000000000 R9 =ffffed100564673d R10=ffff88802b2339eb R11=ffffffff9ae26a08 R12=0000000000000000 R13=ffffffff8e097b40 R14=ffffffff9088f1d0 R15=0000000000000000 RIP=ffffffff8b758dcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976f9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f54c5da4 CR3=000000007175e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000009d00000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff853033c5 RDI=ffffffff9aedc2a0 RBP=ffffffff9aedc260 RSP=ffffc90007cb7490 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6e64696420756f79 R12=0000000000000000 R13=0000000000000033 R14=ffffffff9aedc260 R15=ffffffff85303360 RIP=ffffffff853033ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977f9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73e8098 CR3=000000007175e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81b219c7 RDX=ffff888029504980 RSI=0000000000000000 RDI=0000000000000005 RBP=ffffc900037c7ad0 RSP=ffffc900037c7978 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffff88802b33bda8 R12=1ffff920006f8f38 R13=0000000000000000 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff81be5e00 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978f9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005567d9698f40 CR3=000000004fd6d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=f8edf649ae5ff5bb a3948c122d53891b f8edf649ae5ff5bb a3948c122d53891b f8edf649ae5ff5bb a3948c122d53891b f8edf649ae5ff5bb a3948c122d53891b ZMM18=0a6da629b52a55e2 25b2111dca7b6426 0a6da629b52a55e2 25b2111dca7b6426 0a6da629b52a55e2 25b2111dca7b6426 0a6da629b52a55e2 25b2111dca7b6426 ZMM19=5431000000000000 0000000000000004 5431000000000000 0000000000000003 5431000000000000 0000000000000002 5431000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0380d423717bc9b8 50e7170230e3d84b 0daf5661994c6833 a2de039008058803 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0608000580036480 8008000008000fff ffffff0201080008 0158ea0008000181 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 800201c708000601 40ee0030656c6966 2f2e01ffffffffff ffffffef08018180 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0007b0030fffffff ff0407a003100800 0798030108000790 0304080007880300 ZMM25=25b2111d25b2111d 25b2111d25b2111d 25b2111d25b2111d 25b2111d25b2111d 25b2111d25b2111d 25b2111d25b2111d 25b2111d25b2111d 25b2111d25b2111d ZMM26=b52a55e2b52a55e2 b52a55e2b52a55e2 b52a55e2b52a55e2 b52a55e2b52a55e2 b52a55e2b52a55e2 b52a55e2b52a55e2 b52a55e2b52a55e2 b52a55e2b52a55e2 ZMM27=0a6da6290a6da629 0a6da6290a6da629 0a6da6290a6da629 0a6da6290a6da629 0a6da6290a6da629 0a6da6290a6da629 0a6da6290a6da629 0a6da6290a6da629 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=5331000053310000 5331000053310000 5331000053310000 5331000053310000 5331000053310000 5331000053310000 5331000053310000 5331000053310000 info registers vcpu 3 CPU#3 RAX=00000000016dcf4c RBX=0000000000000003 RCX=ffffffff8b75a6d9 RDX=ffffed10056a673e RSI=ffffffff8bf2b600 RDI=ffffffff8192d28d RBP=ffffed1003b5b000 RSP=ffffc9000048fde8 R8 =0000000000000000 R9 =ffffed10056a673d R10=ffff88802b5339eb R11=0000000000000001 R12=0000000000000003 R13=ffff88801dad8000 R14=ffffffff9088f1d0 R15=0000000000000000 RIP=ffffffff8b758dcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979f9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f739d630 CR3=0000000054619000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000101000000000 0000002a00000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000