last executing test programs: 16m47.164519778s ago: executing program 1 (id=923): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/firmware_class', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040)=0xa, 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000007f00000000b702000014000000b7030000000000008500000005000000bf0900000000000065090100000000006600000006000000180100002020702500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000ffff56000000060000002c93000000000000b5030000000000008500000076000000b700000000009c85cfe3fac41f9ab9f5"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000040)={0x40, 0x8, 0x8, 0x5, 0x1, 0x26, 0x34, "195847a0aa45de6ba8ea4130c81b99fe0129f7cf", "39e8599818f836f17fc62a065f77a36d35695c8b"}) r3 = socket(0xa, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) recvmmsg(r5, &(0x7f0000001480)=[{{&(0x7f0000000200)=@qipcrtr, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/209, 0xd1}, {&(0x7f0000000480)=""/83, 0x53}], 0x2}, 0x877c}, {{&(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000580)=""/9, 0x9}, {&(0x7f00000005c0)=""/139, 0x8b}, {&(0x7f0000000680)=""/221, 0xdd}, {&(0x7f0000000900)=""/174, 0xae}, {&(0x7f0000000780)=""/32, 0x20}], 0x5, &(0x7f0000000a40)=""/208, 0xd0}, 0x2}, {{&(0x7f0000000b40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000bc0)=""/87, 0x57}, {&(0x7f0000000c40)=""/129, 0x81}, {&(0x7f0000000d00)=""/81, 0x51}, {&(0x7f0000000d80)=""/75, 0x4b}, {&(0x7f0000000e00)=""/238, 0xee}, {&(0x7f0000000f00)=""/193, 0xc1}], 0x6}, 0xfd}, {{&(0x7f0000001040)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, 0x80, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/226, 0xe2}, {&(0x7f00000011c0)=""/231, 0xe7}, {&(0x7f00000012c0)=""/200, 0xc8}, {&(0x7f00000013c0)=""/58, 0x3a}], 0x4}, 0x3}], 0x4, 0x2100, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000400)={r9, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x1000], [0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000100)={r10, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r11}) close_range(r3, 0xffffffffffffffff, 0x0) 16m46.905287974s ago: executing program 1 (id=933): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/firmware_class', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040)=0xa, 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000007f00000000b702000014000000b7030000000000008500000005000000bf0900000000000065090100000000006600000006000000180100002020702500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000ffff56000000060000002c93000000000000b5030000000000008500000076000000b700000000009c85cfe3fac41f9ab9f5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket(0xa, 0x2, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) recvmmsg(r2, &(0x7f0000001480)=[{{&(0x7f0000000200)=@qipcrtr, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/209, 0xd1}, {&(0x7f0000000480)=""/83, 0x53}], 0x2}, 0x877c}, {{&(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000580)=""/9, 0x9}, {&(0x7f00000005c0)=""/139, 0x8b}, {&(0x7f0000000680)=""/221, 0xdd}, {&(0x7f0000000900)=""/174, 0xae}, {&(0x7f0000000780)=""/32, 0x20}], 0x5, &(0x7f0000000a40)=""/208, 0xd0}, 0x2}, {{&(0x7f0000000b40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000bc0)=""/87, 0x57}, {&(0x7f0000000c40)=""/129, 0x81}, {&(0x7f0000000d00)=""/81, 0x51}, {&(0x7f0000000d80)=""/75, 0x4b}, {&(0x7f0000000e00)=""/238, 0xee}, {&(0x7f0000000f00)=""/193, 0xc1}], 0x6}, 0xfd}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/226, 0xe2}, {&(0x7f00000011c0)=""/231, 0xe7}, {&(0x7f00000012c0)=""/200, 0xc8}, {&(0x7f00000013c0)=""/58, 0x3a}], 0x4, &(0x7f0000001440)=""/16, 0x10}, 0x3}], 0x4, 0x2100, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000400)={r6, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x1000], [0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r8}) close_range(r1, 0xffffffffffffffff, 0x0) 16m46.512689162s ago: executing program 1 (id=927): syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaa0000000000019078ac1dffdeac1414aa0395907800960003451d000500650001f67300005e65ffff00"/62], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0xc}, {0x0, 0xa}, {0x5, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x40}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_RTT={0x8, 0x7, 0x100c01}, @TCA_CAKE_TARGET={0x8, 0x8, 0x9}]}}]}, 0x54}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x3b, 0x0, &(0x7f0000000240), &(0x7f0000000100)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000100000000000000000000009500000000001ce7721eb5c47071d8491dac292fa5cec78a316cd851f09e1d84ba02dc03d236867cc115efada15bd1d82935eda64042d2e45b80f20b253998ef78c650043b47fb9f7e81ecf564340e060cc4f19858323b6c5c00c724488b407dda80d43516056c92469998a9ebd47f57242d6bf87ac50923b7a0aa22b0ac1d6c12163f6fe7fd7709fcd84db34b0a7dcb6d963bfba3c665e638"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x34, 0x3, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @broadcast}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_DEV_DESTROY(r5, 0x5502) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x403}, [@NFTA_RULE_EXPRESSIONS={0x24}, @NFTA_RULE_POSITION_ID={0x0, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x78}, 0x1, 0x0, 0x0, 0x880}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x9, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) 16m43.594804827s ago: executing program 1 (id=945): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1fe) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff06, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c064001000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000001280)="62b3ada2eccc1a5643ea29b6e5a4c8ed8f4b1b6c4eaa91b83727a64401a6f1b5120752fc39e96caaa7b3be6fd4e2b61503aa28da8c9b22c6321b0b661ff354aa8e283c659ec6485c13da78333acd51ae10393600de5ec36f297684dd92f761b07a14d3f1ad9e33a632cd80ee2142ac39b01a485cf29520cde472bff8f932a530e095178dd14e873d9eb595cefc16ce380fd85dad705730f779e3451819228ac4fd01e5b1403fbef73d42e72cb6ac33557f179869ce6c400668a053816da60fa0e14214b5fc117fcf76b21f45b20db29ac164b73fac4acb44d5df58a2e035a41d1a15d10364b3f73925fa11010e99713c7d87530b563624c48d71efa3210d20475877a98a1a22eedab56f321107cdbfd75a4d1430a167426ea536ee87223028777d893813d6408b61c45e0cfe7a2c3bd0930d9a73b95a1b93a6ebe52cd52f900b77876e3dbc3d90e5c16907f5853676255eb584d5427237e85deaf44f7029fe60a01af741a954fa6fed087ee63bd8f6315b2b1e0ace90dcdc25da90d246b579371a4871cb136440f9aabc82f3a35a9f6ce98b89fb26a5cb6e533d4c86ce6d10da0fb7a2c5b75a4f5fdab723ea0f3ba28ac3aa0d459e338468a2bdc46276a49c5207f9cf47dd3d721064b6f82c62625e49b2e8c7e9073856bd9f497b24eec0ab68787a3b4cb657cdd327fe22b070720115ca569d578d3047d0a5fe44bedae874cddeec765d8265d449225d8ffa2122dbd1e294f8b19c40f33bcfe5a10113d3866413f4810100b9411758625909b89d512f23e469035a382fbfc8fb9d9734d3ed947d06393ce589ab8a293bae7a813fc5f8beaef6d63d1b3e1f9434121dd11bead9d80c5870a25dc97bd386a0d9f438178eabbc8745ec3b0d3297934d7f8c2c8e0938ad2858f43a3a8390e34a64b4fdcb7ce24223fd66362b7214b622a1e6f8052d9525f127c16f02de49cb718753201c211346b780247aca78d65e95b6e270eb1d9e969bbbe4d1d9b63623ace5a423dd4c6d5056c1ddfe0b568223aff15e07933fdec97599388e76f5733517783bbcf8bb41d628aba3e74e46b66d163cd3fa36fe16b008dd964b2784138d2afb6b0e3df4e5765644c9c26c3ce976dffca131c2bc13f64af4c31c0f69edee2b530ec66e47c8ca332d4bccfd17f6b105393e5dbb6b44f5e8ceb7527155badafcac30a50f6b1bd01190720a4e39fc18decf87a2871d6f683911f82bf5f48ec64519eb91f24526ed3cf9d8e4cb6eb1c20dc20a1caf9418e4cf5d86789dd191a392c8abc8fc2116d321e1b310cee06e760f1f94440943045080df3bf61beddc1caba8d85d1e63e319fb3499f9575fc83d1be1b05280bd3b0b8861d51ee9b7815445d08ed9a24748bda1694bc0aefe91c6f5f39b1e5af895de1b6a261df7b6130517524cfe737cca68c59c3e03fcc932c0bce6e54c970872e39bdf06f24728fed95825777685f9a824f5a6101ab3c941d7efa19f076145eeb5be33823cd3d0f2e2a2415fff7a74a5dbe0512c19daafb369131913ba2fe7c20317ea85189f2515196175ac407285c2e14c75fefe231754fe99d794a473ee58922e94f6465370968b1200f1627369b26819d552ec67c4d92fc758ed71f50539a7ee3db319fc24d00bcbc6605c4bd37882e82a95b63866cd2e3ac79c995d7927500f066b5e9af71b1df0915f5a3dc8f2fb26bdfb7a16b021ee397cc3c236f7703c8a9e9163742be569171019c7e02c79c351749de251814bced4d2fc1de2dbf4701696a486433ee2db2ba9f0679b3c3bb8dc82a0528f0c6c35a6fd4b522c08a2bc8f860b40e24695a4471006026dab4e2a64c05ad16b1d8793903b966393249043dfda78ead1e9ecedbd94c47c54ce9544769b318e9256f4a2d40148f23e593e1a7418e0a30e4de5cae24fd60c7570bdeaafbad1d35f55922c55346fe23e8935cabee3c0268336a47efa04e5d2985965aed6f85762833de77688b332b31f8760fc5cdcf2615555b30483d61f5cb9bdd06dd53a09b030f2d5d64509231bc88fc86050a07d070bf240c9da6b6cac05794a39e18110b9989610faed7833e678ac302b0c1fe9f06ea5776707250db6075ce4ac3562825dd125edf32c222cc95cf8114921d8ec3bb4e224de97809af93ef9ae1551c9a67267b2b4f2fabfedfaaaa08dbb981779bc3f6b2818de7f5a69b510229ef0298063a0aa84b185f86287bfa9b6d68c3adf4488ed72cc631f1438aadbe132ad2b9a26e962b0e1e059b21f74e9acb1af9db82944a55b0bf521ffbc6f09c103b6b21bdd6c410da1b1c89b6d15e85459cab6ad18fc5d2feb51ccaaf5dce7ad2b71cffe74f0c40e9320990b4617860e23e259342b33751f89b7e7b3ad28c462404e89f6cc1108bfc61e96914e437bc1e7585a52a8d6460b364bf14996a18a7115d64f9fa01e5ff1d9a16e10df9a5e0b79ced7c8642a2e2222fbdedba6502a1449015e0b51b548d53ebff59603bc4104d3eae97b7e81a231b8b98c7e779dd57bfa73b68e25a181115fa53319f8736649be1bbd28416983d0a58359192ac29c9bb47993918f6d615a6295a2419160254cad3c828cf58e85139bc19fc043b4386c084b2a1c30c5d4bc469e603cf7149e4cf7c952b1de65cc3ddb8bd1c04e5bafa1883350ef4835b0db020940732bc511c5518ac2f3fd2302e555b1b7ca09196413b8192487193683f1bf26e8303d196d2b8d06eabacf5edcb2cc28e4165f15adcb84be14e7c6812718f48b00daf10666dfd6592f2c051af6d3a115f5a307be006671a2292eb1fe6972616bbbd4881fd75530f8977522d6c2deebde8741a938ff0de271263a4ba111a4aad62d92fa2eb0277126f3c061a6684d5815de514fc08dafd90df399ac71577876c2dda846076636cb9af1be9a17e24bebca11df1f71bea02b402c76c0d87a7dbd1db64092d7f2c8a7d362840034e4c86187a25949ed45d2820fbfe05e1b7b783fbdee681c3cc5818ee03865d113eab253c639597af0c2b49ec06fc4189119be389a78cb6aeee96b3aa0ac0c2eb35dc8b98164aa293be7afb67b0a2593a8a8b46b4e143f8ab2d03b9ff2f8690f06a85055df3a21da19faa0d9b8a010a3320ebe9325da038a49c15f7a21773d2b6cdd330d158bbd49fac86a9689740c994628988469b162b8ef125a302750422a0f2d54c42e15b0b06fcd02c700f60b65e7e556fe84e9ce592f4623ef3ba5516ec1c19b5c9289dabbbf91f175fb1cc0d26a652f6befa72d94cb827507345f9c70f37d8dc4670c7349d1787b0c1a3991dcfa08bcec5adaf1797d7c376e020990a1effa9c789cf85d90bcec3cc906dfb339480a2388571da5168af118bc6b8b3d62004c3432cc3c6605f1b7bff5446f5d075224495886e031cde13a81d05be8b12e9b61be4292b4a38e07899de4ce323c7a8f0dbf5d5cc3f50b4f8795eb3808ffb319bc43760a0e57f3c31fd886c90f292ee4c2efeeb51b31357965f2692b6a7f766f70e94965e5295f3aeb4a92ca10bf72dc47df3c4d88b6825bbf19f4587d72309c2c7e4a3c33ba7c1d03cb7355ae6978ae00ed7bad5e53c91e9b5a08b1bac669429ab17ee39b49e307fbcbe204236cd396d9b5265d6d7be1219f684aa52721dbc83d06456092aeec9532f3173062119ad966def97f3c94922026a974a3905c689fd9f49a749b832a798a5fa8953d5432b294a573a62ff38c41e35e62bdc6415aa295623967a86d66a339cb26b00438afb979c2f70f75836d6c28825ae7030a74e99e10146a6600a38b8165c1fcd2a989a8191fdbf9d2467a80cf3171475232715e586f4700b50ce2502109a4aa18661b2f92fc0164732a94b945adb9bf2fe13d189616b6280f9622f82d03b3d9ef83108f2ea984c231501748a625ea3ed73f73d0a50161a0f8b1f26a0a7594ff7e111bd85097cc5e7cbe6c4c58a2be6bbebe7021fe56cdb5ce386cc4be7413a9c25ef978012ed759e62693a46676ed5a414fd8b0c9e7cbb11ab775a98c35f1bfb2c1680361c26ff6c34b9efeef631a67738c21c82e2a0c0e2fed046023eda96aaef6434df5d8798442f5b3709d7a9a4ee6ab16f44df037fd81eab31d3259597e7d98abbfd10151e0943d39e91840ff864c752b2c473d2a0382be54e6e7349d9478df047da58b6aef5be07d1fc3f068ca8d7398834592bbd456630367bc993750fa8c7b7b81e0c665a6cb96d469de7430e87b676764c4c93eca791c4b783bf2291c36346162ee9c965adc775c79fd5f9c8a1e1f724e703b3966bf57a0e58af31c7b51cf8190035d249503007afff6ae9dff312ad81cc6a2dab66f818c24df6cce95eda23210ec0be8e703b1d1b6279f7d2938ce69614b93bc8245607eeff841fe19b42b1f8f063553689c1235c2808e6f32e25d9481abffa3b13f69a1ca63b9c9d1ec3a22b6a9d76a61f90b9fba2c9f64311839ddff74bb14cd25fcaf3c7f7ebebab941f0aa744da578620c52857cff81a05861e9c61762e48e80d26cdc30716197e74f910a40bc669815df7b905bd82ef0e17fde7140ff0673855a087e6b85a51fc0252c29b839eac7e3a4e7c51e56fd91552f11ddba476fd30d6fd09f8f8e79689734e02a5bd33ec138e545ced322f5339120d27277580397fd68f9c13bf9314513c6389129690e80e04027d156d1464eecb027f1d704133078532284a4a0c7031a61bcd41e2b15054b28c639de9e9bafd2063849c7151b7f09fcdfd569008f0139c7fc12e60ec50c998e07a4d937183d8d84d021f0a72d055b071cab57800c804dbbad2c4e0a7c611e8cc14489cf7787410d3878835fa6a3cebdc913cdd661c22a903b0bd6cda23a60ca622529dabf0d93690bd77525685ced0b9887773cb142085cc3ac360e26302d7fc2cff7", 0xd81}], 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = dup2(r4, r4) r6 = accept4$inet6(r5, &(0x7f00000000c0), &(0x7f0000000180)=0x1c, 0x800) connect$pppl2tp(r5, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e21, @rand_addr=0x64010100}, 0x0, 0x0, 0x2, 0x4}}, 0x2e) r7 = syz_clone(0xa0122580, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r8) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r7, &(0x7f0000000040)='cgroup\x00') 16m42.880317152s ago: executing program 1 (id=941): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000c40)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) dup2(r0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) shmdt(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r7, 0x0, 0x7}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=[0x509], 0x0, 0x7, 0x1}}, 0x40) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r8, &(0x7f00000007c0)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0xc, 0x0, 0x2}}]}}]}, 0x44}}, 0x0) 16m42.273626215s ago: executing program 1 (id=943): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0xbaf6}]}}]}, 0x3c}, 0x1, 0x280000}, 0x0) 16m27.242312952s ago: executing program 32 (id=943): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0xbaf6}]}}]}, 0x3c}, 0x1, 0x280000}, 0x0) 6m8.482830587s ago: executing program 3 (id=4879): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000800), 0xe8, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0x3ff00000, 0xac}) memfd_secret(0x80000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000000)=@ethtool_coalesce={0x26}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x3040}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000e40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x5ec}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r7 = dup(r5) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd74) r8 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x40024e, 0x0, r4}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r12, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) eventfd2(0xff, 0x80001) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x4, 0xfffc, 0x3, {0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x1}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="03e5", 0x2}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x318}, 0x0, 0x40000}) io_uring_enter(r8, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 6m7.040835194s ago: executing program 3 (id=4883): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="98000095", @ANYRES16=0x0], 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x10) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0xe56, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3ff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001700)=@newtaction={0x18a8, 0x30, 0x1, 0x0, 0x0, {}, [{0x1894, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x1, 0x5, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x58, 0x4, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x14, 0x6, "e5a4dec26a6be2087709ff8b0ed5ea20"}, {0xc}, {0xc}}}, @m_bpf={0x18c, 0x16, 0x0, 0x0, {{0x8}, {0x98, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x34, 0x4, [{0xd251, 0xd, 0x5, 0x2}, {0xfff, 0xfb, 0x4, 0x5}, {0x7, 0x1, 0x9, 0x8}, {0x1000, 0x0, 0xee, 0x7}, {0x7, 0xfb, 0x1, 0xfbd}, {0x4, 0x81, 0x9}]}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x6, 0x6, 0x9, 0x3}, {0x8, 0x8b, 0x5, 0xffffffba}, {0xffff, 0x6, 0xe5, 0x749f}, {0x35, 0xbf, 0x0, 0x5}, {0x0, 0x6, 0x2, 0x9}, {0x6041, 0x2, 0x20, 0x5}, {0xf6d, 0x4, 0x7f, 0x8}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file1\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xcd, 0x6, "09ebfc9bf0694761427093fcb9e2c1120be52c950fe4cf47ce09a17062bccc9ffbeeb87cb6f4ea012481f21e39f9e6d6c386ad79481d6d7151e7f02845f46f469ad2abe44c171936cbb871cba7ebbd5450813cda4270589cfb137f5fdc70b1abc4131c97f21e87bd5aff33f86d6152445ca9d365ba395aacfb5d13d7989c1052f3b4078f80c5d47f4f206e1bc7c038ff817d21dcad2f46afc3a3ef47e768857d1b619f2eda6ac3d5df8a934c7bc4d74ed43eabfe30d2abee741e79a8e9b0ad8b855885d1db1044c7e0"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x1668, 0x1b, 0x0, 0x0, {{0xb}, {0x1554, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x7ff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3e}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x2, 0x9, 0x1000, 0xfffffff7, 0xffff4ae0, 0x7, 0x9, 0x8000, 0x2, 0x3ff, 0x0, 0xe9f, 0xfffffff9, 0x7fffffff, 0x2, 0x2, 0x1, 0x9, 0x7, 0x7, 0x3, 0x7f, 0x8, 0x10000, 0x1, 0xe5a, 0x10001, 0x3, 0x9, 0x5, 0x9, 0x10000, 0x2, 0x1, 0x8, 0x8001, 0x8001, 0x9, 0x9, 0x1, 0x0, 0xfffffff7, 0x3, 0x3, 0x5b, 0x3ff, 0x10000, 0x3ff, 0x9, 0xfb48, 0xfcd0, 0x0, 0x7, 0x2, 0x4, 0x1ff, 0x5, 0xfff, 0x8, 0x2, 0x5, 0x5, 0x7, 0x0, 0x6, 0x3, 0x1, 0x100, 0xfffffff8, 0x2, 0x6, 0x7, 0x5, 0x1, 0x7, 0x7c, 0x40, 0xb, 0x5, 0x5, 0x8, 0xff, 0x40, 0xb, 0xeb, 0x1, 0x5, 0x80000000, 0x7ff, 0x100, 0x100, 0x599, 0x8, 0xc, 0x7, 0x5, 0x4, 0x98, 0x3c45, 0x38000, 0x8, 0xffffff80, 0x1, 0xffffff81, 0x3, 0x36, 0x5, 0x0, 0x6, 0xffffffff, 0x5, 0x7f, 0x18000000, 0x3a5b, 0x9, 0x4, 0x2ef2, 0xce, 0x7, 0x2, 0x6, 0x5, 0x9bd5, 0xfffffff7, 0x8, 0xc00, 0x8, 0xfffffffc, 0x2e1805a7, 0x3, 0x3, 0x7, 0x1, 0x8, 0x19, 0x4, 0x9, 0x7, 0x100, 0xc, 0xf9a1, 0x200, 0x3, 0xb, 0x2f, 0xf471, 0x5, 0x5, 0x2, 0x309, 0x200, 0xa, 0x8, 0x5, 0x8, 0xd8f, 0x6, 0x555, 0x4, 0xbf, 0x8, 0x4, 0xc7d, 0x0, 0x80000000, 0x1, 0x7, 0x2, 0x3, 0x9, 0xc7, 0x5917, 0x5, 0xd4, 0xfffffff1, 0xb, 0x8, 0x1, 0x3, 0xfffffff1, 0x3, 0x65, 0x5, 0x4, 0x3, 0x1, 0x0, 0x1, 0x2, 0x7, 0x4, 0x8, 0x4, 0xfffffff9, 0x2, 0x2c, 0x3f, 0x1, 0x10000, 0x9, 0x6, 0xe, 0x100, 0xffffffff, 0x400, 0x6, 0x6, 0xe27e, 0x0, 0x4, 0x8, 0xddfe, 0xfff, 0x28de, 0xf2, 0x6b6b, 0x1, 0x7, 0x7, 0xfffffffa, 0x7, 0x6f, 0x2, 0x1, 0x3, 0x1, 0x81, 0x8d, 0x7fff, 0x1, 0x4, 0x9, 0x85fb, 0x6, 0x10000, 0xc, 0x659, 0xff, 0x3, 0x4, 0xd7e, 0x9d6e, 0x5, 0x3, 0x3, 0x1, 0x4, 0x1, 0x8df6, 0x6e7, 0xfffffffb, 0x80000000, 0x400, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x10, 0x3354, 0x40000000, 0x4, 0x2, 0x2, 0x8, 0x40, 0xc00, 0x1a, 0x7, 0x7, 0x6, 0x6, 0x10001, 0x8, 0x200, 0x9, 0x7, 0x2, 0x40, 0x8, 0x6, 0x7f, 0x1, 0x2, 0x4, 0xffff8000, 0x184b, 0xf, 0xff, 0x4, 0x7, 0xfffffff9, 0x5, 0x80, 0xfffffffa, 0x1, 0x2, 0x6, 0x3ff, 0x5, 0x40, 0x9, 0x1e, 0x2, 0x2, 0x0, 0x9, 0xf, 0x800, 0x5, 0x800, 0x4, 0x3, 0x7039, 0x800, 0xfffffffb, 0xee, 0x8, 0x5, 0x2242, 0x1, 0x800, 0xfffffff7, 0xf, 0x87ec, 0x1, 0xffffff95, 0x81, 0xf7b, 0x6, 0x80000001, 0x8, 0x0, 0x0, 0x5, 0x9, 0xfffffffa, 0x9, 0x8, 0xc84, 0x89, 0x1, 0x9, 0x7fffffff, 0x431b, 0x6, 0xfff, 0x1, 0x707, 0x5, 0x3, 0x3, 0x4a, 0x0, 0x2, 0xfffffff5, 0x342752a9, 0x1b, 0x10001, 0x400, 0xd96, 0x2, 0x0, 0x64, 0x1, 0x1, 0x0, 0x8, 0x7, 0x7, 0x6, 0x8, 0x6, 0x81, 0x2, 0x3, 0x800, 0x0, 0x7, 0xffffffff, 0x1, 0x400, 0x6, 0xc1b, 0x7ff, 0x8, 0x7, 0x3, 0x9, 0x5b, 0xeb, 0x8, 0x0, 0x1, 0xa, 0x7f, 0x4, 0x6, 0x0, 0x7, 0x5, 0xaa, 0x7fff, 0x5, 0x7, 0x2, 0x3, 0xb2, 0x7, 0xfff, 0x1, 0x9f, 0x4, 0xb1, 0x9, 0x4, 0x1, 0x3, 0x7, 0x0, 0x3, 0x80000001, 0xb9, 0x2d6e, 0x9, 0x8, 0x5, 0x7fff, 0x4b42, 0x7f, 0x1a6cfdc9, 0x2, 0xf9, 0x6, 0x1, 0x1, 0x5cf, 0x0, 0x8a66, 0x2, 0x3, 0x40, 0x1, 0xb69, 0xfff, 0x9, 0x7, 0x5, 0xfffff9ab, 0xb96, 0x3, 0x2, 0x3ff, 0x7, 0x7, 0x7, 0x6, 0xd89, 0x477, 0x7ff, 0x64fb, 0x9, 0xb8, 0x401, 0x5, 0x8, 0x0, 0xfffffff0, 0x8fe, 0xab7, 0x3, 0x746, 0xecb, 0x5, 0xe, 0x800, 0x8001, 0xffffffff, 0x9c, 0x2, 0x1ff, 0xe, 0x1, 0xc51a, 0x8, 0xc2cc, 0x5, 0x10, 0x3, 0x1e87b4a9, 0x6c, 0x0, 0x8001, 0x4, 0x0, 0x6, 0x7f, 0x0, 0x1, 0x3, 0x516a, 0x5, 0x7, 0x4, 0x2, 0x0, 0x10, 0xff, 0x42, 0x1, 0x4, 0x2, 0x6]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x1ff}, @TCA_POLICE_RATE={0x404, 0x2, [0xed8, 0x200, 0x1, 0x9, 0x55, 0x74, 0x80000001, 0xffff, 0x101, 0x3, 0x7fff, 0xe7d, 0x6, 0xe, 0x9, 0x80000000, 0x4, 0x5, 0x4, 0x0, 0x1, 0x3, 0x0, 0xc8, 0x7ff, 0xfffffff9, 0x6, 0x2, 0x7, 0x1, 0x8082, 0x2, 0x71e, 0x73, 0x80000001, 0xfffff767, 0xffffffff, 0xc, 0x2, 0x9, 0x4, 0x9, 0x7fffffff, 0x9, 0x5, 0x8, 0x6, 0x7, 0x5, 0x5, 0xe, 0x7f, 0x8, 0x7, 0xfffffffe, 0x5, 0x4998f653, 0x0, 0x0, 0xfffffffb, 0x7fff, 0x6, 0x27, 0xb, 0x100, 0x4, 0x9, 0x7f, 0x0, 0x80000001, 0x3, 0x1, 0x2, 0x4, 0x5, 0xfffffff7, 0x3e9, 0x12f4, 0x3, 0x7, 0x7, 0x400, 0x8, 0xfffff001, 0x0, 0xe, 0x183, 0xa4e3, 0x2, 0x8, 0x4, 0x8, 0x1ff, 0x4, 0x0, 0x6, 0x9, 0x2, 0x3, 0x3ffffb39, 0x0, 0xc78, 0xd876, 0x3, 0xcd, 0x6, 0x7, 0xc, 0x4, 0x5, 0x0, 0x7, 0xa, 0xff, 0x71e, 0x0, 0x80000001, 0x6, 0xa5, 0x8001, 0x5, 0x6, 0xd, 0xa4, 0x101, 0xfffff705, 0xe, 0x5, 0x101, 0x4, 0x1000, 0x4, 0x364, 0x10, 0xfffff8ff, 0xffffffc0, 0x9, 0x0, 0x7a5697e8, 0xb, 0x8, 0x2, 0x8d6, 0x8e1, 0x5, 0x66c6, 0xe3c3adf7, 0x3, 0x8, 0x400, 0x7, 0x480, 0x800, 0x401, 0x7dad8012, 0xa, 0x7866, 0x6, 0xd, 0xfffffffe, 0x8, 0x4, 0x8, 0x9, 0x1, 0xc, 0x5, 0x9, 0x5, 0xfffffff7, 0x80, 0x979b, 0x8, 0x6, 0x3, 0x6, 0x3, 0x3, 0x1c00, 0x3, 0x4, 0x8, 0x2, 0x4, 0x5, 0x1, 0x6, 0x5, 0x4, 0x4, 0x1, 0x3, 0x2, 0x128d7455, 0x6, 0x4, 0x2f40, 0x19, 0xfffffffc, 0x3f, 0x9, 0x6, 0x3, 0xfffffffa, 0xe098, 0x208, 0x44be69db, 0x4, 0x1000, 0x200, 0x81, 0x0, 0x8, 0x9, 0x9348, 0xef, 0xff, 0x2, 0xe7, 0x4, 0xe45, 0x6020, 0x100, 0x1, 0x9, 0xc628, 0xd6, 0xffff, 0x80, 0xde5b, 0x5, 0x0, 0x9, 0x5, 0x3, 0x1, 0x2, 0xfffffffd, 0x2, 0x5, 0x10001, 0x3, 0x6, 0x3, 0x3, 0x8, 0xfffffffe, 0x6, 0x78a6, 0xfffffbff, 0x1fd2, 0x3, 0x3ff, 0x9, 0x7, 0x7]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x113}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x3, 0x42, 0x6, 0x0, {0xc, 0x2, 0x0, 0x3, 0xfff1, 0x6}, {0x9, 0x1, 0x1, 0x2, 0xba, 0x8}, 0xd, 0x3, 0x7fffffff}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7fffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0xc, 0x5, 0x101, 0x0, 0x6, 0x6, 0xc112, 0x3, 0x0, 0x10000, 0x7, 0xff, 0xfffffffa, 0xff, 0x9d3c, 0xb1, 0x10001, 0xfffffffd, 0x9a, 0x4, 0x4, 0x0, 0xeb, 0x4, 0x7351, 0x100000, 0x323e92b6, 0xf11, 0xf, 0xd, 0xf42d, 0x1, 0x1, 0x7309, 0x80, 0x9, 0x0, 0x23a, 0x80000000, 0xfffffff9, 0xfffffff9, 0xc3, 0x6, 0xe, 0x4, 0x1, 0x1, 0x80000000, 0xae, 0x100, 0x45b, 0x2e, 0x101, 0x3ff, 0xf6, 0x0, 0x0, 0xfffffffc, 0xffffffff, 0x9, 0x9, 0x6, 0xc5, 0x2, 0x7, 0xfff, 0xfffffff6, 0x6, 0x3, 0x1, 0x0, 0x5, 0x6, 0x3a48, 0x9, 0x5, 0x101, 0x6, 0x7, 0x0, 0x1d, 0xffffffff, 0x8, 0x2, 0x81, 0xa5, 0x3, 0x0, 0xc97, 0xfffffff8, 0x20, 0x400, 0x3, 0x9, 0xfffffff4, 0xc8c, 0x5e, 0xffffffc0, 0xe17, 0x6ffa, 0x0, 0xfffff000, 0x1, 0x101, 0x81, 0xe, 0x2, 0x8000, 0xd, 0x2, 0xffff, 0xffffff3b, 0x8, 0xb, 0xb86a, 0x3, 0x1, 0x4, 0x9, 0x1, 0x6, 0x10001, 0xa, 0x6, 0x163, 0xffffffff, 0x8, 0x57f000, 0x5, 0x1, 0x0, 0x5, 0x0, 0x7, 0x4, 0x9b2, 0x81, 0x8, 0x400, 0x5, 0x9, 0x2, 0x0, 0x75c64742, 0x9, 0x4, 0x1, 0x6c, 0x0, 0x5, 0xffffffff, 0x1, 0xfa, 0x7fff, 0xffffffff, 0x544c, 0x3, 0x2, 0x4, 0x10001, 0x5, 0x100, 0x5, 0x3, 0x5, 0xff, 0x3, 0x3, 0x2, 0x6, 0x5, 0x3, 0x6, 0xa1, 0x8c45, 0xff, 0xb8fb, 0x8, 0x4, 0x7, 0x24dc, 0x3, 0x8d34, 0x5, 0xfffffffc, 0x18c, 0x2, 0xffff91e2, 0x8, 0x3, 0x0, 0x80000000, 0x5, 0x7, 0xfffffffb, 0x40, 0x3cb1, 0x5, 0xcc, 0x68b, 0x7bc, 0x9, 0x0, 0x0, 0x2, 0x7, 0x1, 0x8, 0x8, 0x7, 0x8, 0x8, 0x10000, 0x61c9, 0x5, 0x6, 0x4, 0x9, 0x9, 0x257, 0x400, 0x83, 0xef, 0x3, 0x8, 0x0, 0x0, 0x6, 0x93f1, 0x6, 0xfff, 0x5, 0x8000, 0xc, 0x1000, 0x0, 0xc, 0x2, 0xf358, 0x80000001, 0x6, 0x67, 0x6, 0x4, 0x0, 0xd, 0xdfc2, 0x0, 0x5, 0x9, 0xfffffffa, 0x5, 0xe6c, 0x282f, 0x7fff, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x7, 0x1, 0x6, 0x6, {0x7, 0x1, 0xb49, 0x7, 0x6d8, 0x1}, {0x4, 0x2, 0x1a8, 0x8, 0x38d9, 0x7}, 0x1, 0xffffffff, 0x4}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x400}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x9, 0x80, 0x5, 0x26, 0x1, 0xf, 0x6, 0x4, 0x8, 0x10, 0x48000, 0x4, 0x5, 0x10000000, 0x8, 0x10000, 0x6, 0x7, 0x7fffffff, 0x7, 0x4, 0x9, 0x4, 0x3, 0x0, 0x1, 0x1000, 0x3, 0x4, 0x3, 0x1, 0x9, 0x34, 0x2, 0x0, 0xfffffffd, 0x9, 0x90f2, 0x0, 0x0, 0x9, 0xf629, 0x0, 0x0, 0x836, 0x1, 0x7, 0x80000000, 0x2, 0x52a7, 0x0, 0x8, 0x6, 0xbe1, 0xfff, 0x8236, 0x9, 0x2, 0xa, 0x9e, 0x80, 0x1, 0x1, 0x6, 0x6, 0x4, 0x2, 0x235, 0x9, 0x7, 0x5, 0x2d1a, 0x0, 0x553, 0x2, 0x4e15, 0x6, 0x10000, 0x401, 0x88, 0xaac, 0x54, 0x7, 0x2a, 0xb, 0x9, 0x7, 0x4, 0x3, 0x10001, 0x6, 0x8, 0x9, 0x3, 0x99d, 0x971, 0x5, 0x80000001, 0xff, 0xd3, 0x28e5, 0x63cd26ee, 0x0, 0x1, 0x800, 0xb000000, 0x3, 0x3, 0xa, 0x58, 0x0, 0x6, 0x1e66, 0x4, 0x5, 0x80, 0x2, 0x1, 0x4, 0x9, 0x5, 0x3, 0x1000, 0xffff, 0x6, 0xfffffffb, 0x5, 0x6, 0x8, 0x0, 0x4, 0x5, 0x2, 0x1, 0x3, 0x7, 0x5000, 0x7d9c, 0x781a, 0x3, 0x6ed, 0x1, 0xe3b4, 0x1000, 0x7f, 0x400, 0x1c12, 0x8, 0xa, 0x2, 0x502d, 0x81, 0x401, 0x9, 0x4, 0x9, 0x7, 0xfffffffa, 0x5, 0x7fffffff, 0x8, 0x0, 0x1, 0x6, 0xb, 0x5, 0x4, 0x0, 0x4, 0xf13, 0x98, 0x9, 0x40, 0x4, 0x4, 0x9, 0x4, 0xd6f5, 0xfffffffb, 0x6, 0x8, 0xff, 0x2, 0x6, 0x9ca4, 0x10, 0x5d0, 0x6, 0x8, 0x1, 0xf, 0x6, 0x8f6d, 0x6a1, 0x66, 0x1, 0x6, 0x7fffffff, 0x10000, 0x5, 0xd745, 0x140, 0x400, 0xc1b, 0x10, 0x58, 0x0, 0x3, 0x9, 0x0, 0x7, 0x7, 0xb, 0x7, 0x3b36aec7, 0xa, 0x1, 0x2, 0x1, 0x2, 0xe93, 0x40, 0x560, 0x6, 0x7, 0x5, 0x7, 0xd4b, 0x5, 0x6, 0x7fff, 0x5, 0x1, 0xe0000000, 0x1e5a, 0xa3, 0x1ff, 0x37e, 0x3c8d, 0xa, 0x3, 0x0, 0x9, 0x1, 0x6, 0x3af, 0xf, 0x8, 0x7fffffff, 0x8001, 0x3, 0x2a, 0x9, 0x1000, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xa}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf825}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}]]}, {0xec, 0x6, "9f4ebe6051d8867efe0ec85079f2b052ac94f6e61d7e798daa8a0c08a96aa2efb792f58a6ff75898a72724a8e7e503c4be8dd45a35eea635c01b7b9dc4051450f027e74685491b406df03353a57a4f08115370c1af30e125efd8b25a5b608904391aa2d40d46e502ca799b4ac8e5b0077d1563ad5d368de0c0a06e3f7cf5846eae3c0d62595d549fc2b3c060667aad7f606bb168c30d8f629e49d1e8c501fbf4774ea098b63ad923480b0aac56f4b08476d7b4a1223cce09ef79d58f6e514601dc3dad6aa9fa62cc06c4d3e524761af4d1b59def1c76cc7e7be7c6e9a04b64260a5e42c1a21a3dc4"}, {0xc}, {0xc, 0x8, {0x2, 0x760b1cfee79edb54}}}}]}]}, 0x18a8}, 0x1, 0x0, 0x0, 0x800}, 0x4840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000001680)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb6599", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x2b, 0x0, @private1, @private0}}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$apparmor_thread_current(0xffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$apparmor_current(r7, &(0x7f0000000500)=ANY=[@ANYBLOB='permhat 0x0000000^\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1b) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000084ffffffff000000000200000006000000000000000000000903000000000000000000000602"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500000000"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c00000003060500000000000000000000000006050001000700308e960000c1cc1fee3aa9f189e5850c2623320926d8abd34a037ed9eceb21e34db6028e0d41981455914763cc8e94b40262873ecb6c312ed8ba528856aaeb1826dbf49c2e504fe741192c34dadd3ba6ba5e33b020115a3cb3ff22b81a0be08acefdea773bb0340e464ec0aac7d0d6fda70124f7e13288363d519cf1ae72df23d6049e3b23062e8f75c933df6b7c0000"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) 6m4.75163083s ago: executing program 3 (id=4887): socket$netlink(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x101040, 0x0) socket(0x10, 0x803, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000150300000009214000000122"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x7, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e6ef1f00060000007f00000001"], 0x48) syz_usb_connect(0x0, 0x3f, &(0x7f0000000180)=ANY=[], 0x0) pselect6(0x40, &(0x7f0000000600)={0x8, 0xfffffffffffffffc, 0x2, 0x9, 0x4, 0x0, 0xffffffff, 0x7}, 0x0, &(0x7f0000000080)={0x7fc, 0x2, 0x4000000000800000, 0xfffffffffffffffc, 0x0, 0xc3ad}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m1.53328525s ago: executing program 3 (id=4891): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000800), 0xe8, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0x3ff00000, 0xac}) memfd_secret(0x80000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000000)=@ethtool_coalesce={0x26}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@local, 0x0, 0x32}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x38224007eaa0d79c}}]}, 0x144}}, 0x0) r4 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x3040}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x5ec}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r7 = dup(r5) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd74) r8 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x40024e, 0x0, r4}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r12, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) eventfd2(0xff, 0x80001) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x4, 0xfffc, 0x3, {0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x1}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="03e5", 0x2}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="7c0000001501000005000000ff9ecc9edf812393f0d8b81b5788aacf4a3cff179a9732d863ae57fc9f4e295a95f0bf9f722a0f8327c82de81bdf28a968203ca8edf0ae4ef73446f1a9a1dce86e5d08be3809925d023e63564997f5cead66a998c961b56f0f2106ed1c608c1f3cad586333bfb51861223b593a0667000c0000001400000006000000200000002900000006000000e4ce4feaf4d1bd4732a5a9ee6a6196790428bd00a80000000c010000000400009d61b09c365e3d3bfc958fbf48eb43fadddc2f2aedfb813cedbefade8bf29c7252747d4eb75c854d89a2c66842a2cb122ff78391b500834b035bd5bee7c06b4f9e65243f8909d416a3ba82719be74c80dfc88bb2d1c01ee52786f06a644f0163eb1c22de70a8a882b3aca234e292e5246965d61110d3b81605220f5b9d726e347faf0628d8516a1a5f55dbb4965ffdfb43aeb6c820a7767acc59df3f580000001301000009000000bdce0f101f2d077789740f59a352a37988be5c24fdecffe50ae3a62904eb3821c559733e359b3bc625615cf788e23e5f7c77ecaabcc366699b768e4d794ab2fae723a384869867d12db00000700100000a01000000080000b8e6ec54eccf66cc9cc88f7d5d9b29ecbade77587d80e266d6877e715eb6121ff6770467add122dd5d9c6cb78b6106814ada0f2583a6bc4d891eb7b9edc183b05ec03690bc02b21dd9084112481e86bd0781791ba773c94c78c9aaeabf62351c5c5483b527f8c0b298c7694ef197845db79d62ff51e3b83ae60d6b7d81f625f793d1930fffda7728e446db58d5d5f7ece5008068f2d0b9d306a44eef892158a7d67ba1f55868dfca7fb3387725f2c3d0dcfcd36f89c6ea7c8214840d0f0100997b20c41043168d712784ba2e2b6c8d97ee28585a01d70b8080ffc1f005d2ac8a25487188fedc3df1f823093d503eee18b9a62b961a282dd75a7edc8b42a11a1d81d0077014a47e36f23cee32ef2d3a058cee6acb1c165709293b6c90717f0f2c698fd0de7a0d2615a9b4f3672958afa600a12caf79669103108d5e3e5be5ba862526fd9f44b5df99ac32cfc41ba833eadec371e5a1bfe46c0a447c51b81812c215000000"], 0x318}, 0x0, 0x40000}) io_uring_enter(r8, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 6m0.23832056s ago: executing program 3 (id=4892): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000080000000280000000000000", @ANYRES32, @ANYBLOB="000000000000000600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x20) r1 = socket$caif_seqpacket(0x25, 0x5, 0x2) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a090000400100000000"], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) preadv(r4, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000240)=""/219, 0xdb}], 0x2, 0x9, 0x0) mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e') ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r5}, 0x10) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x434, 0x280, 0x150, 0x150, 0x280, 0xf8010000, 0x36c, 0x238, 0x238, 0x36c, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'caif0\x00', {0xff}, {}, 0x84}, 0x0, 0x218, 0x280, 0x0, {}, [@common=@frag={{0x30}, {[0xffff, 0x1], 0xfffffff9, 0x32}}, @common=@inet=@sctp={{0x144}, {[0x4e22], [], [0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], 0x6, [{}, {0x10, 0x0, 0x2}], 0x0, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x5, 0x80b1, 0x6cdd, 0x80000001, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast1, [0x0, 0xff000000, 0x0, 0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}, 0x87, 0x0, 0x0, 0x10}, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x0, 0x6}}]}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x490) socket$inet6(0xa, 0x3, 0x5) connect$caif(r1, &(0x7f00000003c0)=@util={0x25, "c74aa54c3c83b77bef7068a119ff9484"}, 0x18) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000440)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06464ce, &(0x7f00000004c0)={r7, 0x9, 0x5, 0x7, 0x1, [], [0x8, 0x10001, 0x2, 0x9], [0x3, 0x2, 0x77b, 0x4], [0x5, 0xb, 0x7, 0x5f]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d50, @void, @value}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x2, '.\x00'}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x3, &(0x7f0000000340)=[{0x2f, 0x8, 0x4, 0x4}, {0xc, 0x9, 0x8, 0x76646304}, {0x6, 0x6, 0xa1, 0x40}]}, 0x8) ioctl$sock_proto_private(r8, 0x89e1, &(0x7f0000000540)="cd2be0968fc0dcfab270719b617072c2369832773bd1f6ad8c1227b9b0c400c66fae0a6e2fcabbc6f48aa12c029af890798d0650cae745f3fef63bddf8695260eec5bdde68f133df7436851cfe29a5351826086ec4c9b65310997c52e2654b94cf4fe9f112803c2db490085ad226ceb8e5256dbc24") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x20, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_macvtap\x00', &(0x7f00000001c0)=@ethtool_drvinfo={0x3, "fb73fedf1e4fa103075039740000fa730b000200", "8d254475783a22d45063a182713167e313c87c347e1f4a655d6343256aa5945a", "2f6d1f536584e741184edeabc72c55869102bd73090fbc903e1ebb7b66c5fd3c", "c97801db9cb01b2d8aed0afe8fd867073942276dbc17aa368a0486e2e8ca7d24", "fc0000005853a17e969b131a4fc9c57658c649a6b2bfc5dff7e55f18d936c6f7", "7846050300002300", 0x2000000}}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008", @ANYRES32], 0x5c}}, 0x40) 5m59.328661692s ago: executing program 3 (id=4896): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x100000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x6}, 0xc) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000500)={r1, 0xb, 0x2, r1}) r5 = dup(r2) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000180)) unshare(0x64000600) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000140)) syz_io_uring_setup(0x7bb4, &(0x7f0000000300)={0x0, 0xb7dd, 0x400, 0x2, 0x30b}, &(0x7f0000000380), &(0x7f00000003c0)) syz_usb_connect(0x3, 0x24, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x7647a000) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000400)='-%!\'T\x00', &(0x7f0000000440)='/dev/vhost-vsock\x00', 0x0) 5m43.210952961s ago: executing program 33 (id=4896): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x100000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x6}, 0xc) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000500)={r1, 0xb, 0x2, r1}) r5 = dup(r2) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000180)) unshare(0x64000600) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000140)) syz_io_uring_setup(0x7bb4, &(0x7f0000000300)={0x0, 0xb7dd, 0x400, 0x2, 0x30b}, &(0x7f0000000380), &(0x7f00000003c0)) syz_usb_connect(0x3, 0x24, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x7647a000) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000400)='-%!\'T\x00', &(0x7f0000000440)='/dev/vhost-vsock\x00', 0x0) 2m18.72150313s ago: executing program 0 (id=5603): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x5422}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) (fail_nth: 13) 2m18.543732514s ago: executing program 0 (id=5605): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0xfdfb}) 2m17.260348829s ago: executing program 0 (id=5609): socket$netlink(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x101040, 0x0) socket(0x10, 0x803, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x7, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) syz_usb_connect(0x0, 0x3f, &(0x7f0000000180)=ANY=[], 0x0) pselect6(0x40, &(0x7f0000000600)={0x8, 0xfffffffffffffffc, 0x2, 0x9, 0x4, 0x0, 0xffffffff, 0x7}, 0x0, &(0x7f0000000080)={0x7fc, 0x2, 0x4000000000800000, 0xfffffffffffffffc, 0x0, 0xc3ad}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m15.243949008s ago: executing program 0 (id=5618): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x149802, 0x0) r1 = dup(r0) read$msr(r1, &(0x7f0000032380)=""/102356, 0x18fd4) r2 = io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8000002, 0x3d7}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r4 = socket(0x1e, 0x4, 0x0) mkdir(&(0x7f0000002880)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x0) recvmmsg(r3, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000480)=""/160, 0xa0}], 0x1}, 0x2174eda0}], 0x1, 0x1, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r6 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x88080, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, 0x0, 0x0) ppoll(&(0x7f0000000200)=[{r6, 0x40}], 0x1, 0x0, 0x0, 0x0) read$eventfd(r6, &(0x7f00000003c0), 0x8) sendfile(r0, r1, 0x0, 0x80006) 2m14.559871196s ago: executing program 0 (id=5619): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000800), 0xe8, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0x3ff00000, 0xac}) memfd_secret(0x80000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000000)=@ethtool_coalesce={0x26}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@local, 0x0, 0x32}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x38224007eaa0d79c}}]}, 0x144}}, 0x0) r4 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x3040}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000e40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x5ec}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r7 = dup(r5) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd74) r8 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x40024e, 0x0, r4}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r11, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) eventfd2(0xff, 0x80001) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x4, 0xfffc, 0x3, {0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x1}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="03e5", 0x2}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x318}, 0x0, 0x40000}) io_uring_enter(r8, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 2m12.859968024s ago: executing program 0 (id=5627): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x74, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) (fail_nth: 8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0x4, 0x4, 0x324, 0xffffffff, 0x194, 0xc8, 0x0, 0xfeffffff, 0xffffffff, 0x25c, 0x25c, 0x25c, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private2, [], [], 'batadv_slave_0\x00', 'team_slave_1\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @private0, [], [], 'hsr0\x00', 'veth0_macvtap\x00'}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x380) 2m12.480189877s ago: executing program 34 (id=5627): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x74, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) (fail_nth: 8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0x4, 0x4, 0x324, 0xffffffff, 0x194, 0xc8, 0x0, 0xfeffffff, 0xffffffff, 0x25c, 0x25c, 0x25c, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private2, [], [], 'batadv_slave_0\x00', 'team_slave_1\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @private0, [], [], 'hsr0\x00', 'veth0_macvtap\x00'}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x380) 7.667707843s ago: executing program 4 (id=6141): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000cc0)=ANY=[@ANYRES32=r0], &(0x7f0000001000)={0x5, &(0x7f0000000440)={0xa, 0x6, 0x310, 0x1, 0x4, 0x8, 0x20, 0xf}, 0x5, &(0x7f0000000d80)={0x5, 0xf, 0x5}, 0x0, [{0x0, &(0x7f0000000400)=@lang_id={0x0, 0x3, 0x41d}}, {0x0, &(0x7f00000005c0)=@lang_id={0x0, 0x3, 0xf4ff}}, {0x0, &(0x7f0000000600)=@string={0x0, 0x3, "f3e5129a6fbf087f52d8eaf516a4c5e497307d6cf5f73260013b9de34617d771d331b6889e3a"}}, {0x0, &(0x7f0000000dc0)=@string={0x0, 0x3, "2894806b595ce209b3a8380ec1df327373e31f649af1a17c7857e506d9f62e0d3667e514891cc0d08ad735f51ce6b277ee6b08ae21eca1138d74fa32f844e109614ea576528433e0023873639a934a0b1b7ce1abb75cfb238ff3d35ef4cfebf30e9e86120de8dee80d172e0f97a15726174e193f0781cf4a5016d3fd41cc01e94978059d6555b0a12e1e6678c6ec2f3e0f2c947663e4e57d75706846140db61bda19abf035465a589d9fa4d79d1e310203d7cb19ed65f37db904af722b6d1bb29231978f7b9cf9e0ed188b0f2d5a207f13b40879782ffe7dcee511bf1f33b5710cf352ab037a2623bf712e459b"}}, {0x0, &(0x7f0000000d00)=@lang_id={0x0, 0x3, 0x416}}, {0x0, &(0x7f0000000d40)=@string={0x0, 0x3, "97a4721f0849fe494124a2d8ecdc5aa2701e94f5549c99d980cd5e6bd0bbf2b3"}}, {0x0, &(0x7f0000000ec0)=@lang_id={0x0, 0x3, 0x419}}, {0x0, &(0x7f0000000f00)=@string={0x0, 0x3, "722411d5abda05fb3b3a31479d703536a7b2c8fef0c657db7a31a0b6804bc6c68b8e8f345c2ee4f2d5bcbb7c6e4027969f8d7eabd2a87644eedcc38319310ca64b6b4ca155dd4227e292ca80873fff3fe413edb47829055e8aa41577022ac34a851371393c30e6b4bd680ced"}}, {0x0, &(0x7f0000000f80)=@lang_id={0x0, 0x3, 0x458}}, {0x0, &(0x7f0000000fc0)=@string={0x0, 0x3, "d7c2e8290425d223d98721e3e07c3d8647cb4655e004f4"}}]}) syz_usb_control_io$hid(r4, &(0x7f0000000a40)={0x14, &(0x7f00000008c0)={0x0, 0x10, 0x6e, {0x6e, 0x0, "65a0e0cd3613f1501e79ccbf6182a693810c37e004c81e7b86ce6ab75c58f41633ceec16813f1a006d990ccf616625c8562f4c8c483b00cfd94ed3ec19a1e07caf9c566eab635a7feda072c6ec9a871f3d34f650237325190c9c3fae96053a80e8f9d4366ff905756d076c8b"}}, &(0x7f0000000940)=ANY=[@ANYBLOB="0003710000007103c13fc5a3e9540552de1e61e24d061a6a27047d92e0281c403eac104017469d63bac2c39293f34bf1f351f131df5e4025f47ae304ff0c50e656c55a1478658b9600d6372cf841f9ad2771c59d3d82032cf96dfa2bd9a8a8c868cb9c70312fed151ec5a4f47d8612b96c47ae63e2"], &(0x7f00000009c0)={0x0, 0x22, 0x3, {[@local=@item_012={0x2, 0x2, 0x2, "9219"}]}}, &(0x7f0000000a00)={0x0, 0x21, 0x9, {0x9, 0x21, 0xe5, 0x8, 0x1, {0x22, 0xa07}}}}, &(0x7f0000000c40)={0x18, &(0x7f0000000a80)={0x20, 0x12, 0x22, "36207156139c2df06fd882b3c2a1c0513206ba7b6186ef4cd0271f81f3594c055d28"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0xa3}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0xfe}, &(0x7f0000000b40)={0x20, 0x1, 0x42, "c6503daf45afdabe9a7fdc47c7ed728276c6ee67dd16f98697960c7c0a64dd19a92dd846baf57deda21c298ada09151fd7fbe5b745b099b54fb1f08f56182ba8a53d"}, &(0x7f0000000c00)={0x20, 0x3, 0x1, 0x3}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0xefaace022867884) close(0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000c80)='veth1_to_batadv\x00', 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c000100000000000000e2000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r7, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x13}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001500)=ANY=[], 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) open(&(0x7f0000000340)='./cgroup/../file0\x00', 0x402, 0x108) r9 = openat$cgroup_int(r8, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f0000000080)=0x5, 0x12) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = openat$vsock(0xffffff9c, &(0x7f0000000000), 0xc100, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f0000000040), 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="70000000000905030000000000000000000000000900010073797a31000000000c00048004000140000000003c0002000c00028005000100000000002c000180140003000000000000000000000000000000000014000400fe8000000000000000000000000000bb0800054000000000cf21c9cb475985ef059e0b24fdf3b882a2a7b0e88f118cf0fddf7e97dd0eef81981fe18fda9f64263a9fa09fba5b40d59eb5c5e1ff2ec2d54c417cc81b3af5d0cf2b99e7a600951132b3f44563281bf7d54a215f1a13d2d865"], 0x70}}, 0x0) r13 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r13, 0x1, 0x2b, &(0x7f0000000000)=0x40000006, 0x4) 4.830085081s ago: executing program 2 (id=6152): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x10, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00', 0x44, 0x842, 0x23456}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) unshare(0x22020400) socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_setup(0x10f, &(0x7f0000000440)={0x0, 0x242, 0x0, 0x2}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000004c0)=[{&(0x7f0000000340)="a0", 0x1}], 0x2be, 0x4) getsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f00000001c0)={0x81, 0xffffffffffffffff, 0xd, {0x7, 0x3}, 0x3}, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) 4.480645166s ago: executing program 4 (id=6154): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x20, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) r3 = open(0x0, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000008c0), 0xffa4}) close_range(r4, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(r3, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.046518879s ago: executing program 4 (id=6156): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@enum={0x3, 0x1, 0x0, 0xf, 0x4, [{0xa, 0x1}]}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x77, 0x0, 0x2e, 0x1}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x18, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) 3.83313392s ago: executing program 4 (id=6157): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r2 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r2, &(0x7f0000000140)=@OVL_FILEID_V1={0x30, 0x300fb, {'\x00', {0x0, 0xfb, 0x15, 0x7, 0x5, "e8371f2efe0868327a31a705ec978547"}}}, 0x30000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_pauseparam={0x13, 0xe, 0x2, 0x2}}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) munmap(&(0x7f0000445000/0x1000)=nil, 0x1000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x7ffffffd, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r9}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r11], &(0x7f0000000200), &(0x7f0000000580)=[r10], &(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r7, 0xc04064aa, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], r10, 0x0, '\x00', 0x5, 0xa}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000010c0)) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, [], [0xffffffff], [], [0xfffffffffffffffc]}) 3.647171086s ago: executing program 6 (id=6158): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000040000000400000006"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc010) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x10, 0x3, 0x0, 0x0, @void, @value, @void, @value=0x180}, 0x50) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)={0x14, 0x0, 0xf03, 0xfffffffe, 0x0, {0x34}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) 3.646691169s ago: executing program 2 (id=6159): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x8000000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 3.497568068s ago: executing program 2 (id=6160): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000800), 0xe8, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0x3ff00000, 0xac}) memfd_secret(0x80000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000000)=@ethtool_coalesce={0x26}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@local, 0x0, 0x32}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x38224007eaa0d79c}}]}, 0x144}}, 0x0) r4 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x3040}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000e40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x5ec}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r7 = dup(r5) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd74) r8 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x40024e, 0x0, r4}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r12, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) eventfd2(0xff, 0x80001) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40000}) io_uring_enter(r8, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 2.530028189s ago: executing program 2 (id=6163): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x20000253) 2.384270226s ago: executing program 6 (id=6164): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x881, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="8200000000000000ff000040"]) (async, rerun: 32) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x23, &(0x7f0000000540)=@mangle={'mangle\x00', 0x64, 0x6, 0x508, 0x360, 0xcc, 0x0, 0x298, 0x360, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @local, [0x0, 0xff], [], 'macvtap0\x00', 'ip6tnl0\x00', {0xff}}, 0x0, 0xc8, 0x104, 0x0, {}, [@common=@eui64={{0x24}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa4, 0xc8}, @common=@unspec=@CONNSECMARK={0x24}}, {{@uncond, 0x0, 0xa4, 0xc8}, @inet=@DSCP={0x24}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@multicast1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x564) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x2c}}, 0x0) (async) r5 = syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) (rerun: 64) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8}]}}}]}, 0x3c}}, 0x0) 2.256283285s ago: executing program 5 (id=6165): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000700009001f"], 0x44}}, 0x0) 2.255640647s ago: executing program 2 (id=6166): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000800), 0xe8, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0x3ff00000, 0xac}) memfd_secret(0x80000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000000)=@ethtool_coalesce={0x26}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@local, 0x0, 0x32}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x38224007eaa0d79c}}]}, 0x144}}, 0x0) r4 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x3040}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000e40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x5ec}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r7 = dup(r5) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd74) r8 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x40024e, 0x0, r4}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r12, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) eventfd2(0xff, 0x80001) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x4, 0xfffc, 0x3, {0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x1}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="03e5", 0x2}], 0x1, 0x0, 0x318}, 0x0, 0x40000}) io_uring_enter(r8, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 2.085971958s ago: executing program 5 (id=6167): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000700001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.999189226s ago: executing program 5 (id=6168): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.880981718s ago: executing program 5 (id=6169): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="50010000100033060000000000000000fc000000000000000000000000000000ffffffff00000000000000000000000000004000000080010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000000b23030000000000000000000000000000000000000000000000000000000000000000000000000000000067a529de04ac2f0f0000000000000000000000000000000000000000000100000000010000000000000000"], 0x150}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1800000056000106f50000870000000007"], 0x18}], 0x1}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.818852889s ago: executing program 4 (id=6170): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x3f, 0x0, 0x1159b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) 1.740217527s ago: executing program 5 (id=6171): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000800), 0xe8, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0x3ff00000, 0xac}) memfd_secret(0x80000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000000)=@ethtool_coalesce={0x26}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@local, 0x0, 0x32}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x38224007eaa0d79c}}]}, 0x144}}, 0x0) r4 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x3040}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000e40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x5ec}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r7 = dup(r5) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd74) r8 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x40024e, 0x0, r4}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r12, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) eventfd2(0xff, 0x80001) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40000}) io_uring_enter(r8, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 1.582899922s ago: executing program 6 (id=6172): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x101000) timerfd_create(0x0, 0x80000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') read$FUSE(r1, &(0x7f0000004d80)={0x2020}, 0x2020) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000680)='fuseblk\x00', &(0x7f0000000200)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='fuseblk\x00', &(0x7f0000000100)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\x1c@\\\x00', &(0x7f00000002c0)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, 0x1d, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xd}}]}, 0x30}}, 0x4844) syz_open_dev$dri(&(0x7f0000000800), 0x8, 0x4202) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000380)='}\x00', &(0x7f0000000880)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xecQ\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849@\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xf4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;\xf1C\xea!J\x19\xe1\xfe\x0f\x84\xdfY\x10\xed\x1c\xb2n\xc0ME\xaa\x9e\xd1f\x92q\xeb\xdb)\xcd1(>\x8e\x0f}\x03\xdd\xf8\x84\x9bz!\x80F\xc5ls< \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\x1c\x9f\xbd\xcd\xea\xc3w\xa3\xf5\x1d.\x00\x00\x00\xa0\xf4\xe9\xe2\x83\xac\xde\x95cmvM\x12\xc1O\x1f#\xcd\x90\x1e\x03\x1e}\xe7w\xe7\"Oh`\xed\bM9\xaf\xa3BQ\xbf\xfd1\x1cG\xb5\xed\x86\xb9Q(\x19dZ\x8da\x008e*\x928\xcf\x0f\x0e\x05\x1dM?\x11$E\xc3\x12\x1e\xffI\x84t0D\xec\xf3T\xe2\xddJm\x87\xc9\xb1\xff\n\xa1\x13\xcbo\xc6\xda\x84\x02\xa3\x14\xf2q\x96\xa8Sa\xe4\x1f\x01\xa2]\xb2\xc9\xd5\xff\xfd\xf2\xb5\xf5\xef \xc7\x02\x927\xdb\xa5\a\x9eS\xb6\xe2\xbaL\x99n\xb4\xe3\xf7\x0eU\xc0', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='%*.\x00', &(0x7f0000000400)='^,/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='(!\xef(.(\\-]\x00', &(0x7f0000000080)='\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000240)='fuseblk\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)='\x00', &(0x7f0000000500)='\x04\x9b\xaa', 0x0) read(r0, 0x0, 0x0) close(r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r5, 0x303, 0x0, 0xfffffff8}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000c40)="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", 0x13a}, {&(0x7f0000000480)="79905f7781fd84d8628905637ab82b280168c643e34516a7109690f5d6a7167fca7d9c3e880e879b107dea1462b7785f1c419b2d211061c90034698fe6dffb19ce61a1cb28588d352cb55e43b2e8b6992851ffad4357", 0x56}, {&(0x7f0000000540)="4cfa0a3fca7216beb7c58caabf395fc692dc70670230f5c6aacc57618dbacab3a3cd8409dacabb6baca2e6903d6ca1b2927584c8fd91d26373db07ac3b0647c27bf9ed99018d73e04b0311cbe99e331e2c4cb5963f0ebb0a1c87c7164e57cd02d3378c6ef62d2fc224feee9623e284571df60c8855b962837eecb6036750b627f5192ba27bf2", 0x86}, {&(0x7f0000000600)="3b061b28c3fe608efea0f1ccae841f8426ddec89a8da368aa1666b51eb5df2d0ca0d094d6809e8ee11a7eb48661dc1a9c154b8a857d559cef1c8f9261dbf5c93cca8f3469adbc06f65f64c97d0eecd4f0c583ba5845e5d8f313ab18c82c6b603498c0864410897427f3bd974c06c8069a3ce2b774e930f658e25", 0x7a}, {&(0x7f00000006c0)="420d2a15a2510dc90589f0881ad89af46a71c6f04a21e94d51e6aa75bea69aece93095bdbaa3c6843a2564c3ca398152d37253618e264f1c62cf108ff62ed884f6890ae8369603b146bfab55431edc2a384ba717d068c4c1f3dca941d262a3b0f31f4ce3a53272c78ee13b05f9008c1b476f41d73d4d2b2c1168efea3805a740ff028d89da694b87bb5bad9d31725d383e4f13a15c6b01afd7b1fcbdaae6402ff5f195e94cb9065ed2f5b94d375fbc9c081677f6aad0492890212446d0624fb9eea9dd0180", 0xc5}, {&(0x7f0000000a40)="2f93b2f5e3da4e67bdea071fdc88e4f52e21dcfa255fae1f9ecfe2a8116f919e7cd5362e31be1d3a79cefca717b7ff02573be16d647d8bcb3afddfe024ccaf50b01c15c908de5f0cc6abd46df9e768b4d99b19e65ec2ef19bee80e057859a8855eced1bed8751ef9092acbc2deca0490846f8ff3a9aa349a2135141e8ae7b48449172d5341dfe471ad4889b72b8e42dd3893bab6950d90f3e8f01133c290a2248785b919a8d49399779deba34433ec3d7a31aec00ed4cb4886f41227687bb9ccdfa3de74b236977aa372dd9436156f934936559a3733ffd0198a53256c46", 0xde}, {&(0x7f0000000b40)="03feb254e9f5fc3a12785c009a10d360a62c45bc2e8deb5e2d15668dcdb3ce80ad1831cf261cb13d6d969405e73f960625adde975eccf0d238260e3b054ce355bd207decf10d323e23f5bf959b186bd506779c9982a97b2c4a990ab1652009ea454c8859ace3a98ce3be3399cd2485aa7f0eddc22efc1f695a777c613f82437549011033f693dee60df466401ede07e3ee000b7065f7e5b00c7358ca430c0c27c6efcbcd1e6ba11b8bd9e34a01354794aea6538725a4277fd75d2b0939574767291bd58e2f01fa64aee15c55ac", 0xcd}, {&(0x7f0000002000)="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", 0x1000}], 0x8) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) 1.466138924s ago: executing program 4 (id=6173): socket$inet_sctp(0x2, 0x400000000001, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000200000000000000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, {}, {}, [@alu={0x4, 0x1, 0x8, 0x5, 0x6, 0xfffffffffffffff4, 0x8031f31610bde97e}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x2d) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_mpls={0x90, 0xa, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xf9}, @TCA_MPLS_LABEL={0x8, 0x5, 0x5055d}, @TCA_MPLS_TTL={0x5, 0x7, 0x4}, @TCA_MPLS_TC={0x5, 0x6, 0x3}]}, {0x44, 0x6, "956f7ff9873de02a70c8b78170ca53fa0e5d027f392f569bd4cb59e6344f39814d0be4964aa064d8ce180ef4cd5e8be85727d04f804875dbdeff1d5fef1a820b"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x6}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r5, 0x8949, &(0x7f0000000000)) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000180)=ANY=[@ANYBLOB]) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/net\x00') r6 = syz_io_uring_setup(0x2390, 0x0, &(0x7f0000000100), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00004a5000/0x3000)=nil, 0x3000, 0x8, 0x50, r6, 0x0) 1.259448639s ago: executing program 2 (id=6174): syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0a0000cb2600005f877d130000000000000000000080", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/11], 0x48) r0 = socket$packet(0x11, 0xa, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xc0, 0x30, 0x1, 0x0, 0x0, {}, [{0xac, 0x1, [@m_ct={0x60, 0x2, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x200, 0x0, 0x4, 0x8, 0x65}}, @TCA_CT_MARK={0x8, 0x5, 0x4}, @TCA_CT_LABELS={0x14, 0x7, "c5bf992dc6743f0958e03036da968a9b"}]}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc0}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_ENTRY(r2, 0x0, 0x0) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) openat$cdrom(0xffffff9c, &(0x7f00000000c0), 0x1000, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$vicodec0(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000fe2500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1.104711076s ago: executing program 6 (id=6175): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) close(0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0xa002a008}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 348.323656ms ago: executing program 5 (id=6176): syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0a0000cb2600005f877d130000000000000000000080", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/11], 0x48) socket$packet(0x11, 0xa, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$vicodec0(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400002f2500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) 88.004419ms ago: executing program 6 (id=6177): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 6 (id=6178): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r2, 0x0) (async) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r3, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) (async) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) rmdir(&(0x7f0000000200)='./file0\x00') (async) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[0x0, 0x0], 0x42af}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) (async) unshare(0x20000400) (async) read(0xffffffffffffffff, 0x0, 0x0) (async) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c0000000900000000000000", @ANYRES32, @ANYBLOB="0000ecff000000dc9094e267b4ff480000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r7}, 0x38) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) lstat64(&(0x7f00000000c0)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYRES64=r0], 0x2c}, 0x1, 0x0, 0x0, 0x24000005}, 0x40084) kernel console output (not intermixed with test programs): late: vblank timer overrun [ 1158.209130][T23129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1158.698491][ C3] vkms_vblank_simulate: vblank timer overrun [ 1158.909085][T23295] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5675'. [ 1158.932222][T23297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5677'. [ 1158.954797][T23129] veth0_vlan: entered promiscuous mode [ 1158.988132][T23129] veth1_vlan: entered promiscuous mode [ 1159.010353][T23297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5677'. [ 1159.054570][ C3] vkms_vblank_simulate: vblank timer overrun [ 1159.117597][T23129] veth0_macvtap: entered promiscuous mode [ 1159.143753][T23129] veth1_macvtap: entered promiscuous mode [ 1159.234025][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1159.263022][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.276783][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1159.287056][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.312898][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1159.318932][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.369862][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1159.377195][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.381739][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1159.386304][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.420379][T23129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1159.426020][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1159.431223][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.435846][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1159.466474][ C3] vkms_vblank_simulate: vblank timer overrun [ 1159.469843][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.473756][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1159.477893][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.486397][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1159.490990][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.515015][ C3] vkms_vblank_simulate: vblank timer overrun [ 1159.518177][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1159.534552][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.560474][T23129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1159.629689][T23129] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.638223][T23129] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.642019][T23129] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.676601][T23129] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.897620][ C3] vkms_vblank_simulate: vblank timer overrun [ 1160.002113][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.010824][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.065918][ C3] vkms_vblank_simulate: vblank timer overrun [ 1160.099757][T19675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.107955][T19675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.847938][T23314] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5679'. [ 1160.875597][ C3] vkms_vblank_simulate: vblank timer overrun [ 1160.879142][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 1160.879158][ T40] audit: type=1804 audit(1747211622.413:1211): pid=23315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.5628" name="/newroot/0/file0" dev="tmpfs" ino=18 res=1 errno=0 [ 1161.331365][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1161.475808][ T69] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1161.489639][ T69] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1161.504161][ T69] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1161.511942][ T69] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1161.517457][ T69] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1161.993279][T23321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5681'. [ 1162.071031][T23321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5681'. [ 1162.341941][T23328] netlink: 6 bytes leftover after parsing attributes in process `syz.6.5683'. [ 1162.354380][T23328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1162.363495][T23329] netlink: 6 bytes leftover after parsing attributes in process `syz.6.5683'. [ 1162.412116][T23329] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1162.454233][T23318] chnl_net:caif_netlink_parms(): no params data found [ 1163.030818][T23318] bridge0: port 1(bridge_slave_0) entered blocking state [ 1163.034219][T23318] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.037900][T23318] bridge_slave_0: entered allmulticast mode [ 1163.043498][T23318] bridge_slave_0: entered promiscuous mode [ 1163.048735][T23318] bridge0: port 2(bridge_slave_1) entered blocking state [ 1163.052550][T23318] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.055925][T23318] bridge_slave_1: entered allmulticast mode [ 1163.060225][T23318] bridge_slave_1: entered promiscuous mode [ 1163.308761][T23318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1163.504563][T23318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1163.571292][T20543] Bluetooth: hci2: command tx timeout [ 1163.602183][T23318] team0: Port device team_slave_0 added [ 1163.617725][T23318] team0: Port device team_slave_1 added [ 1163.695149][T23318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1163.697471][T23318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1163.726671][T23318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1163.739664][T23318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1163.745476][T23318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1163.766710][T23318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1164.174139][T23318] hsr_slave_0: entered promiscuous mode [ 1164.203806][T23353] loop9: detected capacity change from 0 to 7 [ 1164.226059][T23318] hsr_slave_1: entered promiscuous mode [ 1164.229533][T23318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1164.234131][T23318] Cannot create hsr debugfs directory [ 1164.246876][T23353] Dev loop9: unable to read RDB block 7 [ 1164.249745][T23353] loop9: unable to read partition table [ 1164.252733][T23353] loop9: partition table beyond EOD, truncated [ 1164.265893][T23353] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1164.290475][ C2] vkms_vblank_simulate: vblank timer overrun [ 1164.829415][T23360] fuse: Invalid rootmode [ 1164.859577][T23360] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1164.986463][ C2] vkms_vblank_simulate: vblank timer overrun [ 1165.014704][T23318] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.082511][ C2] vkms_vblank_simulate: vblank timer overrun [ 1165.216675][T23365] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5693'. [ 1165.278395][ C2] vkms_vblank_simulate: vblank timer overrun [ 1165.287431][T23318] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.292808][T23368] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5693'. [ 1165.360694][ T34] kernel write not supported for file [eventfd] (pid: 34 comm: kworker/3:0) [ 1165.432249][T23318] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.470874][T23367] vxcan3: entered promiscuous mode [ 1165.474553][T23367] vxcan3: entered allmulticast mode [ 1165.627270][ C2] vkms_vblank_simulate: vblank timer overrun [ 1165.643616][T20543] Bluetooth: hci2: command tx timeout [ 1165.681344][T23318] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.070474][ C2] vkms_vblank_simulate: vblank timer overrun [ 1166.115611][T23318] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1166.229358][T23318] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1166.288138][T23374] netlink: 100 bytes leftover after parsing attributes in process `syz.6.5696'. [ 1166.363759][T23318] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1166.379692][T23318] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1166.617687][T23318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1166.699295][T23318] 8021q: adding VLAN 0 to HW filter on device team0 [ 1166.708314][T19675] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.711830][T19675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1166.778688][T19675] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.784347][T19675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1166.911136][ C2] vkms_vblank_simulate: vblank timer overrun [ 1167.368884][T23382] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 1167.372210][T23382] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1167.379515][T23318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1167.388108][T23382] vhci_hcd vhci_hcd.0: Device attached [ 1167.541300][T23382] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(11) [ 1167.549408][T23382] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1167.553090][ T10] vhci_hcd: vhci_device speed not set [ 1167.566267][T23391] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1167.588428][T23382] vhci_hcd vhci_hcd.0: Device attached [ 1167.611434][ T10] usb 49-1: new full-speed USB device number 2 using vhci_hcd [ 1167.618542][T23382] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(13) [ 1167.621973][T23382] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1167.630524][T23393] fuse: Invalid rootmode [ 1167.633564][T23382] vhci_hcd vhci_hcd.0: Device attached [ 1167.647085][T23393] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1167.656990][T23382] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(18) [ 1167.660175][T23382] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1167.669528][T23382] vhci_hcd vhci_hcd.0: Device attached [ 1167.707400][T23382] vhci_hcd vhci_hcd.0: pdev(6) rhport(5) sockfd(20) [ 1167.715212][T23382] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1167.731858][T20543] Bluetooth: hci2: command tx timeout [ 1167.794994][T23382] vhci_hcd vhci_hcd.0: Device attached [ 1167.815043][T23382] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1167.847401][T23404] ata1.00: invalid multi_count 1 ignored [ 1168.064887][ C2] vkms_vblank_simulate: vblank timer overrun [ 1168.174954][T23318] veth0_vlan: entered promiscuous mode [ 1168.186379][T23318] veth1_vlan: entered promiscuous mode [ 1168.217559][T23399] vhci_hcd: connection closed [ 1168.219084][T23388] vhci_hcd: connection closed [ 1168.223294][T23383] vhci_hcd: connection reset by peer [ 1168.240458][T23397] vhci_hcd: connection closed [ 1168.246688][T23394] vhci_hcd: connection closed [ 1168.252474][T19669] vhci_hcd: stop threads [ 1168.279068][T23318] veth0_macvtap: entered promiscuous mode [ 1168.284221][T19669] vhci_hcd: release socket [ 1168.289584][T23318] veth1_macvtap: entered promiscuous mode [ 1168.293876][T19669] vhci_hcd: disconnect device [ 1168.337878][T19669] vhci_hcd: stop threads [ 1168.338626][T23318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1168.344798][T23318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1168.353662][T19669] vhci_hcd: release socket [ 1168.359792][T23318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1168.359812][T23318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1168.359827][T23318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1168.359837][T23318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1168.359855][T23318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1168.359867][T23318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1168.359883][T23318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1168.359895][T23318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1168.359912][T23318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1168.359924][T23318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1168.362184][T23318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1168.365073][T23318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1168.381669][T19669] vhci_hcd: disconnect device [ 1168.387740][ C2] vkms_vblank_simulate: vblank timer overrun [ 1168.406191][T19669] vhci_hcd: stop threads [ 1168.411872][T23318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1168.417320][T19669] vhci_hcd: release socket [ 1168.435002][T23318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1168.435026][T23318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1168.435045][T23318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1168.435058][T23318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1168.435080][T23318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1168.435092][T23318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1168.435111][T23318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1168.435123][T23318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1168.435140][T23318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1168.435152][T23318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1168.438150][T23318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1168.478174][T23318] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.494275][T19669] vhci_hcd: disconnect device [ 1168.501680][T23318] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.530937][T19669] vhci_hcd: stop threads [ 1168.546563][T23318] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.563292][T19669] vhci_hcd: release socket [ 1168.573188][T23318] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.596847][T19669] vhci_hcd: disconnect device [ 1168.692638][T19669] vhci_hcd: stop threads [ 1168.695787][T19669] vhci_hcd: release socket [ 1168.699317][T19669] vhci_hcd: disconnect device [ 1168.913159][ T7985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1168.929763][ T7985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1169.033204][T23415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5703'. [ 1169.103677][T23415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5703'. [ 1169.104015][ T7993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1169.110568][ T7993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1169.274518][ C2] vkms_vblank_simulate: vblank timer overrun [ 1169.509902][T23426] FAULT_INJECTION: forcing a failure. [ 1169.509902][T23426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1169.555706][ C2] vkms_vblank_simulate: vblank timer overrun [ 1169.555711][T23426] CPU: 0 UID: 0 PID: 23426 Comm: syz.4.5706 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 1169.555740][T23426] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1169.555750][T23426] Call Trace: [ 1169.555757][T23426] [ 1169.555765][T23426] dump_stack_lvl+0x16c/0x1f0 [ 1169.555801][T23426] should_fail_ex+0x512/0x640 [ 1169.555829][T23426] _copy_to_user+0x32/0xd0 [ 1169.555859][T23426] v4l2_compat_put_user+0x344/0x1810 [ 1169.555879][T23426] ? lockdep_hardirqs_on+0x7c/0x110 [ 1169.555912][T23426] ? __pfx_v4l2_compat_put_user+0x10/0x10 [ 1169.555933][T23426] ? _copy_to_user+0xb6/0xd0 [ 1169.555957][T23426] ? _copy_to_user+0x48/0xd0 [ 1169.555983][T23426] ? v4l2_compat_put_array_args+0x10b/0x720 [ 1169.556007][T23426] ? __pfx_v4l2_compat_put_array_args+0x10/0x10 [ 1169.556029][T23426] ? __pfx___video_do_ioctl+0x10/0x10 [ 1169.556056][T23426] ? video_usercopy+0x9c3/0x1440 [ 1169.556083][T23426] video_usercopy+0x665/0x1440 [ 1169.556108][T23426] ? __pfx___video_do_ioctl+0x10/0x10 [ 1169.556132][T23426] ? __pfx_video_usercopy+0x10/0x10 [ 1169.556165][T23426] ? hook_file_ioctl_common+0x145/0x410 [ 1169.556191][T23426] v4l2_ioctl+0x1bd/0x250 [ 1169.556212][T23426] ? fput+0x11/0xf0 [ 1169.556236][T23426] v4l2_compat_ioctl32+0x214/0x2c0 [ 1169.556256][T23426] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 1169.556280][T23426] __ia32_compat_sys_ioctl+0x24c/0x360 [ 1169.556309][T23426] __do_fast_syscall_32+0x73/0x120 [ 1169.556337][T23426] do_fast_syscall_32+0x32/0x80 [ 1169.556362][T23426] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1169.556385][T23426] RIP: 0023:0xf7f87579 [ 1169.556400][T23426] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1169.556414][T23426] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1169.556433][T23426] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0245628 [ 1169.556444][T23426] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1169.556455][T23426] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1169.556466][T23426] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1169.556476][T23426] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1169.556507][T23426] [ 1169.724983][ C2] vkms_vblank_simulate: vblank timer overrun [ 1169.801483][T20543] Bluetooth: hci2: command tx timeout [ 1170.743123][ C2] vkms_vblank_simulate: vblank timer overrun [ 1171.095018][T23441] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5709'. [ 1171.099995][T23441] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5709'. [ 1171.110212][T23441] dummy0: entered promiscuous mode [ 1171.113714][T23441] team0: entered promiscuous mode [ 1171.116198][T23441] team_slave_0: entered promiscuous mode [ 1171.118724][T23441] team_slave_1: entered promiscuous mode [ 1171.389613][T23443] fuse: Bad value for 'rootmode' [ 1171.531315][T23443] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1172.176643][T23452] netlink: 100 bytes leftover after parsing attributes in process `syz.5.5713'. [ 1172.354380][ C2] vkms_vblank_simulate: vblank timer overrun [ 1172.760366][ T10] vhci_hcd: vhci_device speed not set [ 1172.884691][T23457] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5714'. [ 1172.908280][ C2] vkms_vblank_simulate: vblank timer overrun [ 1173.031106][T23459] tipc: Started in network mode [ 1173.039044][T23459] tipc: Node identity , cluster identity 4711 [ 1173.061267][T23461] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5716'. [ 1173.107405][T23461] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5716'. [ 1173.196840][T23463] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(13) [ 1173.215275][T23463] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1173.268558][T23463] vhci_hcd vhci_hcd.0: Device attached [ 1173.300716][T23468] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(16) [ 1173.303833][T23468] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1173.307204][T23468] vhci_hcd vhci_hcd.0: Device attached [ 1173.323452][T23463] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1173.372262][T23463] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(19) [ 1173.375687][ C2] vkms_vblank_simulate: vblank timer overrun [ 1173.383180][T23463] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1173.387355][T23463] vhci_hcd vhci_hcd.0: Device attached [ 1173.411095][ C2] vkms_vblank_simulate: vblank timer overrun [ 1173.470653][T23463] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(22) [ 1173.473111][T23463] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1173.502340][T23478] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1173.546526][T23468] vhci_hcd vhci_hcd.0: pdev(6) rhport(5) sockfd(25) [ 1173.549423][T23468] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1173.553530][T23468] vhci_hcd vhci_hcd.0: Device attached [ 1173.585582][T23468] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1173.622688][T23463] vhci_hcd vhci_hcd.0: Device attached [ 1173.628968][T23463] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1173.671635][T23476] vhci_hcd: connection closed [ 1173.672800][T23475] vhci_hcd: connection closed [ 1173.675739][T23464] vhci_hcd: connection closed [ 1173.678292][T23469] vhci_hcd: connection closed [ 1173.678731][T23473] vhci_hcd: connection closed [ 1173.698678][T19669] vhci_hcd: stop threads [ 1173.707818][T19669] vhci_hcd: release socket [ 1173.709828][T19669] vhci_hcd: disconnect device [ 1173.710459][ T10] vhci_hcd: vhci_device speed not set [ 1173.737579][T19669] vhci_hcd: stop threads [ 1173.739772][T19669] vhci_hcd: release socket [ 1173.741941][T19669] vhci_hcd: disconnect device [ 1173.748829][T19669] vhci_hcd: stop threads [ 1173.757367][T19669] vhci_hcd: release socket [ 1173.759501][T19669] vhci_hcd: disconnect device [ 1173.780036][ T10] usb 49-1: device descriptor read/64, error -110 [ 1173.785392][T19669] vhci_hcd: stop threads [ 1173.787809][T19669] vhci_hcd: release socket [ 1173.800057][T19669] vhci_hcd: disconnect device [ 1173.802395][T19669] vhci_hcd: stop threads [ 1173.805688][T19669] vhci_hcd: release socket [ 1173.820768][T19669] vhci_hcd: disconnect device [ 1173.970193][ T10] vhci_hcd: vhci_device speed not set [ 1174.121614][T23483] FAULT_INJECTION: forcing a failure. [ 1174.121614][T23483] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.198400][T23483] CPU: 1 UID: 0 PID: 23483 Comm: syz.5.5719 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 1174.198429][T23483] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1174.198440][T23483] Call Trace: [ 1174.198448][T23483] [ 1174.198456][T23483] dump_stack_lvl+0x16c/0x1f0 [ 1174.198486][T23483] should_fail_ex+0x512/0x640 [ 1174.198512][T23483] ? fs_reclaim_acquire+0xae/0x150 [ 1174.198539][T23483] ? tomoyo_encode2+0x100/0x3e0 [ 1174.198561][T23483] should_failslab+0xc2/0x120 [ 1174.198583][T23483] __kmalloc_noprof+0xd2/0x510 [ 1174.198602][T23483] ? d_absolute_path+0x136/0x1a0 [ 1174.198628][T23483] tomoyo_encode2+0x100/0x3e0 [ 1174.198656][T23483] tomoyo_encode+0x29/0x50 [ 1174.198679][T23483] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1174.198711][T23483] tomoyo_mount_acl+0x664/0x850 [ 1174.198732][T23483] ? kernel_text_address+0x8d/0x100 [ 1174.198748][T23483] ? __kernel_text_address+0xd/0x40 [ 1174.198773][T23483] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 1174.198824][T23483] ? tomoyo_domain+0xbb/0x150 [ 1174.198839][T23483] ? tomoyo_profile+0x47/0x60 [ 1174.198857][T23483] tomoyo_mount_permission+0x16d/0x420 [ 1174.198879][T23483] ? tomoyo_mount_permission+0x14f/0x420 [ 1174.198903][T23483] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1174.198941][T23483] security_sb_mount+0x9b/0x260 [ 1174.198964][T23483] path_mount+0x128/0x1f20 [ 1174.198985][T23483] ? kmem_cache_free+0x2d4/0x4d0 [ 1174.199003][T23483] ? __pfx_path_mount+0x10/0x10 [ 1174.199025][T23483] ? putname+0x154/0x1a0 [ 1174.199049][T23483] __ia32_sys_mount+0x28b/0x310 [ 1174.199068][T23483] ? __pfx___ia32_sys_mount+0x10/0x10 [ 1174.199090][T23483] ? rcu_is_watching+0x12/0xc0 [ 1174.199111][T23483] __do_fast_syscall_32+0x73/0x120 [ 1174.199139][T23483] do_fast_syscall_32+0x32/0x80 [ 1174.199165][T23483] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1174.199186][T23483] RIP: 0023:0xf7f52579 [ 1174.199199][T23483] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1174.199217][T23483] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 1174.199233][T23483] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 0000000080000040 [ 1174.199245][T23483] RDX: 0000000080000200 RSI: 000000000021000d RDI: 0000000000000000 [ 1174.199255][T23483] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1174.199265][T23483] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1174.199275][T23483] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1174.199297][T23483] [ 1174.199318][T23483] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1174.331494][T23485] FAULT_INJECTION: forcing a failure. [ 1174.331494][T23485] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.522294][T23485] CPU: 2 UID: 0 PID: 23485 Comm: syz.6.5721 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 1174.522322][T23485] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1174.522335][T23485] Call Trace: [ 1174.522342][T23485] [ 1174.522350][T23485] dump_stack_lvl+0x16c/0x1f0 [ 1174.522380][T23485] should_fail_ex+0x512/0x640 [ 1174.522404][T23485] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1174.522424][T23485] should_failslab+0xc2/0x120 [ 1174.522446][T23485] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1174.522462][T23485] ? lockdep_init_map_type+0x5c/0x280 [ 1174.522484][T23485] ? register_netdevice+0x4eb/0x2270 [ 1174.522509][T23485] register_netdevice+0x4eb/0x2270 [ 1174.522532][T23485] ? __pfx_validate_linkmsg+0x10/0x10 [ 1174.522714][T23485] ? __pfx_register_netdevice+0x10/0x10 [ 1174.522752][T23485] br_dev_newlink+0x6a/0x170 [ 1174.522775][T23485] ? __pfx_br_dev_newlink+0x10/0x10 [ 1174.522799][T23485] rtnl_newlink+0xc42/0x2000 [ 1174.522826][T23485] ? __pfx_rtnl_newlink+0x10/0x10 [ 1174.522974][T23485] ? kfree_skbmem+0x1a4/0x1f0 [ 1174.523005][T23485] ? rcu_is_watching+0x12/0xc0 [ 1174.523022][T23485] ? trace_cap_capable+0x18d/0x200 [ 1174.523046][T23485] ? find_held_lock+0x2b/0x80 [ 1174.523061][T23485] ? __pfx_rtnl_newlink+0x10/0x10 [ 1174.523080][T23485] ? __pfx_rtnl_newlink+0x10/0x10 [ 1174.523097][T23485] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1174.523118][T23485] ? __pfx_rtnl_newlink+0x10/0x10 [ 1174.523139][T23485] rtnetlink_rcv_msg+0x95b/0xe90 [ 1174.523162][T23485] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1174.523194][T23485] netlink_rcv_skb+0x16d/0x440 [ 1174.523216][T23485] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1174.523237][T23485] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1174.523269][T23485] ? netlink_deliver_tap+0x1ae/0xd30 [ 1174.523294][T23485] netlink_unicast+0x53a/0x7f0 [ 1174.523329][T23485] ? __pfx_netlink_unicast+0x10/0x10 [ 1174.523356][T23485] netlink_sendmsg+0x8d1/0xdd0 [ 1174.523383][T23485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1174.523413][T23485] ? __import_iovec+0x1c8/0x660 [ 1174.523435][T23485] ____sys_sendmsg+0xa98/0xc70 [ 1174.523469][T23485] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1174.523492][T23485] ? get_compat_msghdr+0x11a/0x170 [ 1174.523523][T23485] ___sys_sendmsg+0x134/0x1d0 [ 1174.523547][T23485] ? __pfx____sys_sendmsg+0x10/0x10 [ 1174.523599][T23485] __sys_sendmsg+0x16d/0x220 [ 1174.523621][T23485] ? __pfx___sys_sendmsg+0x10/0x10 [ 1174.523654][T23485] ? rcu_is_watching+0x12/0xc0 [ 1174.523674][T23485] __do_fast_syscall_32+0x73/0x120 [ 1174.523876][T23485] do_fast_syscall_32+0x32/0x80 [ 1174.523903][T23485] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1174.523925][T23485] RIP: 0023:0xf7f47579 [ 1174.523940][T23485] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1174.523956][T23485] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1174.523974][T23485] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 1174.523985][T23485] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1174.523995][T23485] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1174.524006][T23485] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1174.524016][T23485] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1174.524040][T23485] [ 1174.757602][T23495] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1174.758120][ C2] vkms_vblank_simulate: vblank timer overrun [ 1174.883209][ C2] vkms_vblank_simulate: vblank timer overrun [ 1174.990126][ C2] vkms_vblank_simulate: vblank timer overrun [ 1175.167054][T23508] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5728'. [ 1175.214960][T23516] netlink: 100 bytes leftover after parsing attributes in process `syz.5.5729'. [ 1175.243098][T23514] syz.4.5727: attempt to access beyond end of device [ 1175.243098][T23514] sr0: rw=0, sector=0, nr_sectors = 4 limit=0 [ 1175.263936][T23514] (syz.4.5727,23514,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 1175.268078][T23514] (syz.4.5727,23514,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 1175.271659][T23514] (syz.4.5727,23514,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1175.275859][T23514] (syz.4.5727,23514,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 1175.544093][T23521] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 1175.546702][T23521] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1175.549876][T23521] vhci_hcd vhci_hcd.0: Device attached [ 1175.557813][T23521] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(15) [ 1175.560868][T23521] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1175.564119][T23521] vhci_hcd vhci_hcd.0: Device attached [ 1175.569570][T23521] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1175.605579][T23521] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(19) [ 1175.608275][T23521] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1175.624035][T23521] vhci_hcd vhci_hcd.0: Device attached [ 1175.645238][T23521] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(22) [ 1175.648345][T23521] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1175.653290][T23521] vhci_hcd vhci_hcd.0: Device attached [ 1175.664318][T23521] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(24) [ 1175.668120][T23521] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1175.679317][T23521] vhci_hcd vhci_hcd.0: Device attached [ 1175.689063][T23521] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1175.697388][T23521] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1175.718166][T23521] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1175.730134][ T5981] vhci_hcd: vhci_device speed not set [ 1175.790842][ T5981] usb 41-1: new low-speed USB device number 5 using vhci_hcd [ 1175.801401][T23532] vhci_hcd: connection closed [ 1175.801476][T23530] vhci_hcd: connection closed [ 1175.803657][T23524] vhci_hcd: connection reset by peer [ 1175.804147][T23526] vhci_hcd: connection closed [ 1175.806851][T23528] vhci_hcd: connection closed [ 1175.829999][T19669] vhci_hcd: stop threads [ 1175.834208][T19669] vhci_hcd: release socket [ 1175.836374][T19669] vhci_hcd: disconnect device [ 1175.845772][T19669] vhci_hcd: stop threads [ 1175.848380][T19669] vhci_hcd: release socket [ 1175.850402][T19669] vhci_hcd: disconnect device [ 1175.852504][T19669] vhci_hcd: stop threads [ 1175.854201][T19669] vhci_hcd: release socket [ 1175.873162][T19669] vhci_hcd: disconnect device [ 1175.875815][T19669] vhci_hcd: stop threads [ 1175.877756][T19669] vhci_hcd: release socket [ 1175.880023][T19669] vhci_hcd: disconnect device [ 1175.886811][T19669] vhci_hcd: stop threads [ 1175.896800][T19669] vhci_hcd: release socket [ 1175.899010][T19669] vhci_hcd: disconnect device [ 1176.395832][T23535] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5732'. [ 1176.690990][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.800913][T23558] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5741'. [ 1176.808632][ T40] audit: type=1326 audit(1747211638.374:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23554 comm="syz.5.5740" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 1176.849431][ C2] vkms_vblank_simulate: vblank timer overrun [ 1176.880441][ C2] vkms_vblank_simulate: vblank timer overrun [ 1176.889879][ T40] audit: type=1326 audit(1747211638.374:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23554 comm="syz.5.5740" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 1176.976500][T23561] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1176.981969][T23561] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1177.056988][ C2] vkms_vblank_simulate: vblank timer overrun [ 1177.060118][T23561] vhci_hcd vhci_hcd.0: Device attached [ 1177.289978][ T34] vhci_hcd: vhci_device speed not set [ 1177.350828][ T34] usb 45-1: new full-speed USB device number 4 using vhci_hcd [ 1177.351520][T23562] vhci_hcd: connection closed [ 1177.368557][T23563] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1177.470429][ T7985] vhci_hcd: stop threads [ 1177.472077][ T7985] vhci_hcd: release socket [ 1177.474081][ T7985] vhci_hcd: disconnect device [ 1177.538400][ C2] vkms_vblank_simulate: vblank timer overrun [ 1177.865098][ C2] vkms_vblank_simulate: vblank timer overrun [ 1177.912737][T23575] FAULT_INJECTION: forcing a failure. [ 1177.912737][T23575] name failslab, interval 1, probability 0, space 0, times 0 [ 1177.918507][T23575] CPU: 3 UID: 0 PID: 23575 Comm: syz.2.5745 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 1177.918540][T23575] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1177.918554][T23575] Call Trace: [ 1177.918565][T23575] [ 1177.918576][T23575] dump_stack_lvl+0x16c/0x1f0 [ 1177.918614][T23575] should_fail_ex+0x512/0x640 [ 1177.918651][T23575] should_failslab+0xc2/0x120 [ 1177.918680][T23575] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1177.918707][T23575] ? find_held_lock+0x2b/0x80 [ 1177.918728][T23575] ? dst_alloc+0x99/0x1a0 [ 1177.918757][T23575] dst_alloc+0x99/0x1a0 [ 1177.918784][T23575] rt_dst_alloc+0x35/0x3a0 [ 1177.918818][T23575] ip_route_output_key_hash_rcu+0x87a/0x28f0 [ 1177.918863][T23575] ip_route_output_key_hash+0x137/0x2e0 [ 1177.918899][T23575] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1177.918948][T23575] ? find_held_lock+0x2b/0x80 [ 1177.918974][T23575] ip_route_output_flow+0x27/0x150 [ 1177.918999][T23575] udp_sendmsg+0x1bc3/0x29e0 [ 1177.919032][T23575] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1177.919068][T23575] ? __pfx_udp_sendmsg+0x10/0x10 [ 1177.919094][T23575] ? find_held_lock+0x2b/0x80 [ 1177.919136][T23575] ? __pfx___might_resched+0x10/0x10 [ 1177.919161][T23575] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1177.919197][T23575] ? aa_sk_perm+0x2f4/0xb10 [ 1177.919237][T23575] ? __import_iovec+0x1c8/0x660 [ 1177.919257][T23575] ? __pfx_udp_sendmsg+0x10/0x10 [ 1177.919285][T23575] inet_sendmsg+0x105/0x140 [ 1177.919321][T23575] ____sys_sendmsg+0x973/0xc70 [ 1177.919357][T23575] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1177.919388][T23575] ? get_compat_msghdr+0x11a/0x170 [ 1177.919418][T23575] ? __pfx__kstrtoull+0x10/0x10 [ 1177.919468][T23575] ___sys_sendmsg+0x134/0x1d0 [ 1177.919500][T23575] ? __pfx____sys_sendmsg+0x10/0x10 [ 1177.919546][T23575] ? find_held_lock+0x2b/0x80 [ 1177.919592][T23575] __sys_sendmmsg+0x2f9/0x420 [ 1177.919655][T23575] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1177.919697][T23575] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1177.919746][T23575] ? fput+0x70/0xf0 [ 1177.919774][T23575] ? ksys_write+0x1b9/0x240 [ 1177.919798][T23575] ? __pfx_ksys_write+0x10/0x10 [ 1177.919826][T23575] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 1177.919857][T23575] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1177.919890][T23575] __do_fast_syscall_32+0x73/0x120 [ 1177.919925][T23575] do_fast_syscall_32+0x32/0x80 [ 1177.919956][T23575] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1177.919983][T23575] RIP: 0023:0xf70de579 [ 1177.920005][T23575] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1177.920027][T23575] RSP: 002b:00000000f50ce55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 1177.920050][T23575] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080007fc0 [ 1177.920064][T23575] RDX: 000000000800001d RSI: 0000000000000000 RDI: 0000000000000000 [ 1177.920078][T23575] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1177.920092][T23575] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1177.920105][T23575] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1177.920135][T23575] [ 1178.209773][T23577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5746'. [ 1178.272104][T23579] binder: 23578:23579 ioctl 4018620d 0 returned -22 [ 1179.280373][T23584] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20002 [ 1179.350763][T23586] fuse: Unknown parameter 'use00000000000000000000' [ 1179.375630][ C2] vkms_vblank_simulate: vblank timer overrun [ 1179.396191][T23586] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1179.571388][ C2] vkms_vblank_simulate: vblank timer overrun [ 1179.707531][T23601] netlink: 100 bytes leftover after parsing attributes in process `syz.5.5753'. [ 1179.887234][ C2] vkms_vblank_simulate: vblank timer overrun [ 1179.990327][ C2] vkms_vblank_simulate: vblank timer overrun [ 1180.113209][ C2] vkms_vblank_simulate: vblank timer overrun [ 1180.326295][ C2] vkms_vblank_simulate: vblank timer overrun [ 1180.628447][ C2] vkms_vblank_simulate: vblank timer overrun [ 1180.707869][T23612] tipc: Started in network mode [ 1180.709982][T23612] tipc: Node identity ac1414aa, cluster identity 4711 [ 1180.713823][T23612] tipc: Enabled bearer , priority 10 [ 1180.915127][ T5981] vhci_hcd: vhci_device speed not set [ 1181.211010][T23616] sctp: [Deprecated]: syz.5.5757 (pid 23616) Use of int in maxseg socket option. [ 1181.211010][T23616] Use struct sctp_assoc_value instead [ 1181.595080][T23622] binder: 23617:23622 ioctl 4018620d 0 returned -22 [ 1181.601475][T23620] can0: slcan on ttyprintk. [ 1181.703028][ T59] tipc: Node number set to 2886997162 [ 1182.238467][ C2] vkms_vblank_simulate: vblank timer overrun [ 1182.371905][ C2] vkms_vblank_simulate: vblank timer overrun [ 1182.410882][ C2] vkms_vblank_simulate: vblank timer overrun [ 1182.506286][ C2] vkms_vblank_simulate: vblank timer overrun [ 1182.508560][T23629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5761'. [ 1182.531778][T23628] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5760'. [ 1182.563069][ T34] vhci_hcd: vhci_device speed not set [ 1182.729451][ C2] vkms_vblank_simulate: vblank timer overrun [ 1182.758698][T23618] can0 (unregistered): slcan off ttyprintk. [ 1183.226350][ C2] vkms_vblank_simulate: vblank timer overrun [ 1183.307575][T23637] fuse: Unknown parameter 'use00000000000000000000' [ 1183.341115][T23637] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1183.513213][T23646] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5764'. [ 1183.623055][T23646] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5764'. [ 1183.769663][ T7948] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1183.941975][ T7948] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1183.960911][ T7948] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1183.967406][ T7948] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1183.979412][ T7948] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1183.985538][ T7948] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.045551][ T7948] usb 10-1: config 0 descriptor?? [ 1184.173696][T23660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5771'. [ 1184.179246][T23660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5771'. [ 1184.500207][ T7948] plantronics 0003:047F:FFFF.0037: No inputs registered, leaving [ 1184.539512][ T7948] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1184.660568][T23672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5776'. [ 1184.664614][T23670] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5777'. [ 1184.685609][T23673] fuse: Unknown parameter 'use00000000000000000000' [ 1184.697301][T23673] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1184.823077][T23675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1184.837530][T23675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1184.845275][ T8607] usb 10-1: USB disconnect, device number 9 [ 1184.886205][ C2] vkms_vblank_simulate: vblank timer overrun [ 1185.035933][T23681] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5779'. [ 1185.065494][T23681] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5779'. [ 1185.122447][ C2] vkms_vblank_simulate: vblank timer overrun [ 1185.370269][ C2] vkms_vblank_simulate: vblank timer overrun [ 1185.448305][T23689] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5781'. [ 1186.730071][ C2] vkms_vblank_simulate: vblank timer overrun [ 1186.838261][ C2] vkms_vblank_simulate: vblank timer overrun [ 1187.006231][ C2] vkms_vblank_simulate: vblank timer overrun [ 1187.233949][T23706] 9pnet_fd: Insufficient options for proto=fd [ 1187.764566][T23713] binder: 23712:23713 ioctl 80084503 80000380 returned -22 [ 1187.775126][T23713] tipc: Started in network mode [ 1187.777318][T23713] tipc: Node identity 4, cluster identity 4711 [ 1187.855479][T23713] tipc: Node number set to 4 [ 1187.995377][T23722] fuse: Unknown parameter 'user_i00000000000000000000' [ 1188.005788][T23724] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5794'. [ 1188.008332][T23722] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1188.058230][ C2] vkms_vblank_simulate: vblank timer overrun [ 1188.265149][ T40] audit: type=1326 audit(1747211649.835:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23725 comm="syz.2.5795" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 1188.297051][ T40] audit: type=1326 audit(1747211649.835:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23725 comm="syz.2.5795" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 1188.318567][ C2] vkms_vblank_simulate: vblank timer overrun [ 1188.324928][ T40] audit: type=1326 audit(1747211649.835:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23725 comm="syz.2.5795" exe="/syz-executor" sig=0 arch=40000003 syscall=77 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 1188.338367][ T40] audit: type=1326 audit(1747211649.835:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23725 comm="syz.2.5795" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 1188.360271][ T40] audit: type=1326 audit(1747211649.835:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23725 comm="syz.2.5795" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 1188.372979][T23731] overlayfs: failed to resolve './file1': -2 [ 1188.376936][ T40] audit: type=1326 audit(1747211649.835:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23725 comm="syz.2.5795" exe="/syz-executor" sig=0 arch=40000003 syscall=427 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 1188.417117][ T40] audit: type=1326 audit(1747211649.835:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23725 comm="syz.2.5795" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 1188.442918][ C2] vkms_vblank_simulate: vblank timer overrun [ 1188.447492][ T40] audit: type=1326 audit(1747211649.835:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23725 comm="syz.2.5795" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 1188.460414][ T40] audit: type=1326 audit(1747211649.835:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23725 comm="syz.2.5795" exe="/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 1188.492629][ T40] audit: type=1326 audit(1747211649.835:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23725 comm="syz.2.5795" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 1188.744713][T23738] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1188.753214][T23738] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1188.823015][ C2] vkms_vblank_simulate: vblank timer overrun [ 1189.072785][T23747] netfs: Couldn't get user pages (rc=-14) [ 1189.306008][ C2] vkms_vblank_simulate: vblank timer overrun [ 1189.553171][ C2] vkms_vblank_simulate: vblank timer overrun [ 1189.615708][T23737] delete_channel: no stack [ 1189.794955][T23762] FAULT_INJECTION: forcing a failure. [ 1189.794955][T23762] name failslab, interval 1, probability 0, space 0, times 0 [ 1189.810268][T23762] CPU: 2 UID: 0 PID: 23762 Comm: syz.2.5799 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 1189.810295][T23762] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1189.810307][T23762] Call Trace: [ 1189.810325][T23762] [ 1189.810334][T23762] dump_stack_lvl+0x16c/0x1f0 [ 1189.810366][T23762] should_fail_ex+0x512/0x640 [ 1189.810392][T23762] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1189.810416][T23762] should_failslab+0xc2/0x120 [ 1189.810439][T23762] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1189.810459][T23762] ? __kernfs_new_node+0xd2/0x8a0 [ 1189.810481][T23762] __kernfs_new_node+0xd2/0x8a0 [ 1189.810499][T23762] ? __pfx_idr_alloc_u32+0x10/0x10 [ 1189.810525][T23762] ? __pfx___kernfs_new_node+0x10/0x10 [ 1189.810547][T23762] ? find_held_lock+0x2b/0x80 [ 1189.810566][T23762] ? kernfs_root+0xee/0x2a0 [ 1189.810587][T23762] kernfs_new_node+0x13c/0x1e0 [ 1189.810612][T23762] __kernfs_create_file+0x53/0x350 [ 1189.810638][T23762] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1189.810672][T23762] internal_create_group+0x578/0xf30 [ 1189.810698][T23762] ? __pfx_internal_create_group+0x10/0x10 [ 1189.810736][T23762] ? kernfs_create_link+0x1bd/0x240 [ 1189.810764][T23762] internal_create_groups+0x9d/0x150 [ 1189.810787][T23762] device_add+0xf30/0x1a70 [ 1189.810813][T23762] ? __pfx_device_add+0x10/0x10 [ 1189.810837][T23762] ? lockdep_init_map_type+0x5c/0x280 [ 1189.810861][T23762] ? __init_waitqueue_head+0xca/0x150 [ 1189.810883][T23762] wakeup_source_device_create+0x214/0x2a0 [ 1189.810909][T23762] wakeup_source_sysfs_add+0x1c/0x90 [ 1189.810933][T23762] wakeup_source_register+0xaa/0x140 [ 1189.810958][T23762] ep_create_wakeup_source+0x1dd/0x2e0 [ 1189.810988][T23762] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 1189.811023][T23762] ? do_epoll_ctl+0x154d/0x3590 [ 1189.811058][T23762] do_epoll_ctl+0x1d6a/0x3590 [ 1189.811097][T23762] ? __pfx_do_epoll_ctl+0x10/0x10 [ 1189.811123][T23762] ? find_held_lock+0x2b/0x80 [ 1189.811140][T23762] ? __might_fault+0xe3/0x190 [ 1189.811163][T23762] ? __might_fault+0xe3/0x190 [ 1189.811196][T23762] ? __ia32_sys_epoll_ctl+0x15b/0x1e0 [ 1189.811220][T23762] __ia32_sys_epoll_ctl+0x15b/0x1e0 [ 1189.811246][T23762] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 1189.811278][T23762] ? rcu_is_watching+0x12/0xc0 [ 1189.811303][T23762] __do_fast_syscall_32+0x73/0x120 [ 1189.811338][T23762] do_fast_syscall_32+0x32/0x80 [ 1189.811364][T23762] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1189.811387][T23762] RIP: 0023:0xf70de579 [ 1189.811402][T23762] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1189.811419][T23762] RSP: 002b:00000000f50ce55c EFLAGS: 00000296 ORIG_RAX: 00000000000000ff [ 1189.811437][T23762] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000001 [ 1189.811447][T23762] RDX: 0000000000000003 RSI: 00000000800000c0 RDI: 0000000000000000 [ 1189.811458][T23762] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1189.811468][T23762] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1189.811480][T23762] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1189.811504][T23762] [ 1190.035165][ C2] vkms_vblank_simulate: vblank timer overrun [ 1190.104552][T23764] netlink: 'syz.2.5800': attribute type 8 has an invalid length. [ 1190.443007][T23771] tipc: Enabled bearer , priority 10 [ 1190.483431][ T5981] IPVS: starting estimator thread 0... [ 1190.522911][T23774] FAULT_INJECTION: forcing a failure. [ 1190.522911][T23774] name failslab, interval 1, probability 0, space 0, times 0 [ 1190.546355][T23774] CPU: 0 UID: 0 PID: 23774 Comm: syz.4.5802 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 1190.546380][T23774] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1190.546392][T23774] Call Trace: [ 1190.546399][T23774] [ 1190.546406][T23774] dump_stack_lvl+0x16c/0x1f0 [ 1190.546436][T23774] should_fail_ex+0x512/0x640 [ 1190.546459][T23774] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1190.546484][T23774] should_failslab+0xc2/0x120 [ 1190.546506][T23774] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1190.546525][T23774] ? __alloc_skb+0x2b2/0x380 [ 1190.546554][T23774] __alloc_skb+0x2b2/0x380 [ 1190.546572][T23774] ? __pfx___alloc_skb+0x10/0x10 [ 1190.546593][T23774] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1190.546618][T23774] netlink_alloc_large_skb+0x69/0x130 [ 1190.546640][T23774] netlink_sendmsg+0x6a1/0xdd0 [ 1190.546664][T23774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1190.546687][T23774] ? __import_iovec+0x1c8/0x660 [ 1190.546708][T23774] ____sys_sendmsg+0xa98/0xc70 [ 1190.546737][T23774] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1190.546758][T23774] ? get_compat_msghdr+0x11a/0x170 [ 1190.546787][T23774] ___sys_sendmsg+0x134/0x1d0 [ 1190.546807][T23774] ? __pfx____sys_sendmsg+0x10/0x10 [ 1190.546854][T23774] __sys_sendmsg+0x16d/0x220 [ 1190.546874][T23774] ? __pfx___sys_sendmsg+0x10/0x10 [ 1190.546902][T23774] ? rcu_is_watching+0x12/0xc0 [ 1190.546922][T23774] __do_fast_syscall_32+0x73/0x120 [ 1190.546945][T23774] do_fast_syscall_32+0x32/0x80 [ 1190.546969][T23774] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1190.546988][T23774] RIP: 0023:0xf7f87579 [ 1190.547002][T23774] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1190.547017][T23774] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1190.547034][T23774] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000 [ 1190.547045][T23774] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1190.547055][T23774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1190.547064][T23774] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1190.547073][T23774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1190.547095][T23774] [ 1190.757911][T23776] fuse: Unknown parameter 'user_i00000000000000000000' [ 1190.783573][T23776] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1190.839168][T23772] IPVS: using max 22 ests per chain, 52800 per kthread [ 1191.118931][ C2] vkms_vblank_simulate: vblank timer overrun [ 1191.119984][T23781] __nla_validate_parse: 1 callbacks suppressed [ 1191.120002][T23781] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5805'. [ 1191.167207][T23781] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5805'. [ 1191.389915][ C2] vkms_vblank_simulate: vblank timer overrun [ 1192.468183][ C2] vkms_vblank_simulate: vblank timer overrun [ 1192.628499][T23797] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5808'. [ 1192.659004][T23797] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 1192.661957][T23797] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1192.665515][T23797] vhci_hcd vhci_hcd.0: Device attached [ 1192.684346][T23810] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 1192.739064][T23754] vhci_hcd: stop threads [ 1192.740944][T23754] vhci_hcd: release socket [ 1192.745224][T23754] vhci_hcd: disconnect device [ 1192.814289][ C2] vkms_vblank_simulate: vblank timer overrun [ 1193.273845][T23819] fuse: Unknown parameter 'user_id00000000000000000000' [ 1193.291090][T23819] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1193.640445][ C2] vkms_vblank_simulate: vblank timer overrun [ 1193.808367][T23826] Invalid ELF header magic: != ELF [ 1193.992341][ C2] vkms_vblank_simulate: vblank timer overrun [ 1194.037100][ C2] vkms_vblank_simulate: vblank timer overrun [ 1194.222370][ C2] vkms_vblank_simulate: vblank timer overrun [ 1194.862336][T23845] veth0_vlan: entered allmulticast mode [ 1194.991635][T23846] program syz.2.5819 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1195.538188][ C2] vkms_vblank_simulate: vblank timer overrun [ 1195.563755][T23852] fuse: Unknown parameter 'user_id00000000000000000000' [ 1195.574922][T23852] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1195.604818][T23840] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 18467 - 0 [ 1195.630221][T23840] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 18467 - 0 [ 1195.643002][T23840] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 18467 - 0 [ 1195.646783][T23840] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 18467 - 0 [ 1195.669072][T23840] geneve2: entered promiscuous mode [ 1195.672677][T23840] geneve2: entered allmulticast mode [ 1195.781325][T23857] input: syz1 as /devices/virtual/input/input87 [ 1195.846930][T23861] mkiss: ax0: crc mode is auto. [ 1196.156631][T23869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5829'. [ 1196.185856][T23869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5829'. [ 1196.227874][T23866] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5825'. [ 1196.870181][ C2] vkms_vblank_simulate: vblank timer overrun [ 1196.965112][T23881] fuse: Unknown parameter 'user_id00000000000000000000' [ 1196.982251][T23881] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1197.354226][ C2] vkms_vblank_simulate: vblank timer overrun [ 1197.386068][ C2] vkms_vblank_simulate: vblank timer overrun [ 1197.469910][ C2] vkms_vblank_simulate: vblank timer overrun [ 1197.670302][ C2] vkms_vblank_simulate: vblank timer overrun [ 1198.172947][T23908] fuse: Bad value for 'fd' [ 1198.178313][T23908] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1198.254251][ C2] vkms_vblank_simulate: vblank timer overrun [ 1198.336580][ C2] vkms_vblank_simulate: vblank timer overrun [ 1198.489512][ C2] vkms_vblank_simulate: vblank timer overrun [ 1198.562233][ C2] vkms_vblank_simulate: vblank timer overrun [ 1199.824294][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 1199.824313][ T40] audit: type=1326 audit(1747211661.385:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23916 comm="syz.5.5846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7fc00000 [ 1199.849093][ T40] audit: type=1326 audit(1747211661.385:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23916 comm="syz.5.5846" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f52579 code=0x7fc00000 [ 1199.888776][ T40] audit: type=1326 audit(1747211661.385:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23916 comm="syz.5.5846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7fc00000 [ 1199.898099][ T40] audit: type=1326 audit(1747211661.395:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23916 comm="syz.5.5846" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7fc00000 [ 1200.041358][T23932] fuse: Bad value for 'fd' [ 1200.053101][T23932] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1200.588706][ C2] vkms_vblank_simulate: vblank timer overrun [ 1201.018502][ C2] vkms_vblank_simulate: vblank timer overrun [ 1201.335820][T23943] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5855'. [ 1201.616577][T23950] binder_alloc: 23949: pid 23949 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1201.713122][T23955] fuse: Bad value for 'fd' [ 1201.727512][T23955] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1201.866561][T23957] input: syz1 as /devices/virtual/input/input88 [ 1202.099451][T23964] netlink: 'syz.2.5864': attribute type 5 has an invalid length. [ 1202.370242][ C2] vkms_vblank_simulate: vblank timer overrun [ 1202.486113][ C2] vkms_vblank_simulate: vblank timer overrun [ 1202.674057][ C2] vkms_vblank_simulate: vblank timer overrun [ 1202.691498][T23978] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5868'. [ 1203.033517][ C2] vkms_vblank_simulate: vblank timer overrun [ 1203.045945][T23984] fuse: Unknown parameter '0x0000000000000003' [ 1203.058034][T23984] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1203.209069][T23987] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5871'. [ 1203.506535][ C2] vkms_vblank_simulate: vblank timer overrun [ 1203.901489][T23998] ata1.00: invalid multi_count 1 ignored [ 1204.022259][ C2] vkms_vblank_simulate: vblank timer overrun [ 1204.240170][ C2] vkms_vblank_simulate: vblank timer overrun [ 1204.434092][ C2] vkms_vblank_simulate: vblank timer overrun [ 1204.658117][ C2] vkms_vblank_simulate: vblank timer overrun [ 1204.804300][T24011] fuse: Unknown parameter '0x0000000000000003' [ 1204.815115][T24011] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1205.102109][ C2] vkms_vblank_simulate: vblank timer overrun [ 1205.142069][ C2] vkms_vblank_simulate: vblank timer overrun [ 1205.535214][ C2] vkms_vblank_simulate: vblank timer overrun [ 1205.672467][ C2] vkms_vblank_simulate: vblank timer overrun [ 1205.752238][ C2] vkms_vblank_simulate: vblank timer overrun [ 1206.109735][ C2] vkms_vblank_simulate: vblank timer overrun [ 1206.248696][T24037] Bluetooth: MGMT ver 1.23 [ 1206.295944][T24037] netlink: 'syz.6.5886': attribute type 1 has an invalid length. [ 1206.393207][T24040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5887'. [ 1206.788286][T23070] usb 9-1: new low-speed USB device number 79 using dummy_hcd [ 1207.309103][ C2] vkms_vblank_simulate: vblank timer overrun [ 1207.580329][T23070] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 1207.584945][T23070] usb 9-1: config 0 has no interface number 0 [ 1207.598114][T23070] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1207.604545][T23070] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1207.618094][T23070] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1207.626031][T23070] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1207.648039][T23070] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1207.654764][T23070] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1207.689846][T23070] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1207.700905][T23070] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.740399][T23070] usb 9-1: config 0 descriptor?? [ 1207.784830][T24043] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1207.794043][ C2] vkms_vblank_simulate: vblank timer overrun [ 1207.824842][T24043] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1207.831848][T24054] gtp0: entered allmulticast mode [ 1207.839884][T23070] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1208.098988][T23305] usb 9-1: USB disconnect, device number 79 [ 1208.106416][T23305] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 1208.723777][T24076] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1208.745509][T24076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1208.778671][T24076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.418926][ C2] vkms_vblank_simulate: vblank timer overrun [ 1209.820374][ C2] vkms_vblank_simulate: vblank timer overrun [ 1210.510852][T24092] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5900'. [ 1212.705987][ C2] vkms_vblank_simulate: vblank timer overrun [ 1212.916009][ C2] vkms_vblank_simulate: vblank timer overrun [ 1212.927623][T24110] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1213.212535][T24114] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1213.216604][T24114] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1213.230496][T24114] vhci_hcd vhci_hcd.0: Device attached [ 1213.522744][ T9907] usb 47-1: new low-speed USB device number 3 using vhci_hcd [ 1213.525642][T15821] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1213.725214][T15821] usb 10-1: config 0 has no interfaces? [ 1213.727777][T15821] usb 10-1: New USB device found, idVendor=0de5, idProduct=0056, bcdDevice= 5.b5 [ 1213.746949][T15821] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.778714][T15821] usb 10-1: config 0 descriptor?? [ 1214.215638][ T9907] usb 47-1: device descriptor read/64, error -71 [ 1214.229474][T20804] usb 10-1: USB disconnect, device number 10 [ 1214.236267][T24117] vhci_hcd: connection closed [ 1214.236462][T23758] vhci_hcd: stop threads [ 1214.247735][T23758] vhci_hcd: release socket [ 1214.249855][T23758] vhci_hcd: disconnect device [ 1214.313916][T24130] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1214.417779][ T9907] vhci_hcd: vhci_device speed not set [ 1214.591462][T24136] fuse: Unknown parameter 'fd0x0000000000000003' [ 1214.600195][T24136] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1214.747116][ C2] vkms_vblank_simulate: vblank timer overrun [ 1214.842005][ C2] vkms_vblank_simulate: vblank timer overrun [ 1214.957247][T24144] syz.6.5917: attempt to access beyond end of device [ 1214.957247][T24144] nbd6: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1214.966868][T24144] SQUASHFS error: Failed to read block 0x0: -5 [ 1214.982270][T24144] unable to read squashfs_super_block [ 1215.287385][T24150] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5920'. [ 1215.308799][T24150] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5920'. [ 1215.400158][ C2] vkms_vblank_simulate: vblank timer overrun [ 1216.134057][ C2] vkms_vblank_simulate: vblank timer overrun [ 1216.336791][T24167] FAULT_INJECTION: forcing a failure. [ 1216.336791][T24167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1216.343144][T24167] CPU: 1 UID: 0 PID: 24167 Comm: syz.5.5923 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 1216.343170][T24167] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1216.343181][T24167] Call Trace: [ 1216.343190][T24167] [ 1216.343198][T24167] dump_stack_lvl+0x16c/0x1f0 [ 1216.343230][T24167] should_fail_ex+0x512/0x640 [ 1216.343260][T24167] _copy_to_user+0x32/0xd0 [ 1216.343289][T24167] simple_read_from_buffer+0xcb/0x170 [ 1216.343319][T24167] proc_fail_nth_read+0x197/0x270 [ 1216.343346][T24167] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1216.343377][T24167] ? rw_verify_area+0xcf/0x680 [ 1216.343403][T24167] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1216.343428][T24167] vfs_read+0x1de/0xc70 [ 1216.343449][T24167] ? __pfx___mutex_lock+0x10/0x10 [ 1216.343473][T24167] ? __pfx_vfs_read+0x10/0x10 [ 1216.343496][T24167] ? __fget_files+0x20e/0x3c0 [ 1216.343518][T24167] ksys_read+0x12a/0x240 [ 1216.343534][T24167] ? __pfx_ksys_read+0x10/0x10 [ 1216.343552][T24167] ? rcu_is_watching+0x12/0xc0 [ 1216.343572][T24167] __do_fast_syscall_32+0x73/0x120 [ 1216.343598][T24167] do_fast_syscall_32+0x32/0x80 [ 1216.343621][T24167] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1216.343640][T24167] RIP: 0023:0xf7f52579 [ 1216.343654][T24167] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1216.343671][T24167] RSP: 002b:00000000f5076590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1216.343687][T24167] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5076620 [ 1216.343697][T24167] RDX: 000000000000000f RSI: 00000000f73e2ff4 RDI: 0000000000000000 [ 1216.343707][T24167] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1216.343717][T24167] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1216.343728][T24167] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1216.343752][T24167] [ 1216.423599][T24162] sp0: Synchronizing with TNC [ 1216.518684][T24161] syz.6.5922: attempt to access beyond end of device [ 1216.518684][T24161] nbd6: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1216.525818][T24169] fuse: Unknown parameter 'fd0x0000000000000003' [ 1216.557720][T24162] [U] è [ 1216.573105][T24161] SQUASHFS error: Failed to read block 0x0: -5 [ 1216.608442][T24169] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1216.619099][T24161] unable to read squashfs_super_block [ 1216.678338][ C2] vkms_vblank_simulate: vblank timer overrun [ 1216.856393][ C2] vkms_vblank_simulate: vblank timer overrun [ 1217.254212][ C2] vkms_vblank_simulate: vblank timer overrun [ 1217.421671][T24183] FAULT_INJECTION: forcing a failure. [ 1217.421671][T24183] name failslab, interval 1, probability 0, space 0, times 0 [ 1217.448755][T24183] CPU: 1 UID: 0 PID: 24183 Comm: syz.6.5930 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 1217.448787][T24183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1217.448799][T24183] Call Trace: [ 1217.448807][T24183] [ 1217.448816][T24183] dump_stack_lvl+0x16c/0x1f0 [ 1217.448848][T24183] should_fail_ex+0x512/0x640 [ 1217.448874][T24183] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1217.448895][T24183] should_failslab+0xc2/0x120 [ 1217.448917][T24183] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1217.448933][T24183] ? find_held_lock+0x2b/0x80 [ 1217.448950][T24183] ? n_hdlc_tty_open+0x8c/0x540 [ 1217.448970][T24183] ? tty_set_ldisc+0x2b8/0x780 [ 1217.448991][T24183] n_hdlc_tty_open+0x8c/0x540 [ 1217.449008][T24183] ? __pfx_n_hdlc_tty_open+0x10/0x10 [ 1217.449040][T24183] tty_ldisc_open+0x9c/0x120 [ 1217.449062][T24183] tty_set_ldisc+0x32b/0x780 [ 1217.449086][T24183] tty_ioctl+0xc42/0x1610 [ 1217.449108][T24183] ? __pfx_tty_ioctl+0x10/0x10 [ 1217.449143][T24183] ? find_held_lock+0x2b/0x80 [ 1217.449159][T24183] ? hook_file_ioctl_common+0x145/0x410 [ 1217.449184][T24183] ? __fget_files+0x20e/0x3c0 [ 1217.449200][T24183] ? fput+0x10/0xf0 [ 1217.449223][T24183] tty_compat_ioctl+0x24a/0x4d0 [ 1217.449244][T24183] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 1217.449266][T24183] __ia32_compat_sys_ioctl+0x24c/0x360 [ 1217.449294][T24183] __do_fast_syscall_32+0x73/0x120 [ 1217.449322][T24183] do_fast_syscall_32+0x32/0x80 [ 1217.449348][T24183] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1217.449370][T24183] RIP: 0023:0xf7f47579 [ 1217.449386][T24183] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1217.449404][T24183] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1217.449422][T24183] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005423 [ 1217.449434][T24183] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1217.449445][T24183] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1217.449456][T24183] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1217.449467][T24183] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1217.449492][T24183] [ 1217.449500][T24183] n_hdlc_tty_open: n_hdlc_alloc failed [ 1217.850306][T24185] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5931'. [ 1218.237986][T24189] Cannot find add_set index 2 as target [ 1219.105643][T24191] FAULT_INJECTION: forcing a failure. [ 1219.105643][T24191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1219.158648][ C2] vkms_vblank_simulate: vblank timer overrun [ 1219.161931][T24194] Bluetooth: MGMT ver 1.23 [ 1219.210261][T24191] CPU: 0 UID: 0 PID: 24191 Comm: syz.6.5933 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 1219.210287][T24191] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1219.210297][T24191] Call Trace: [ 1219.210304][T24191] [ 1219.210311][T24191] dump_stack_lvl+0x16c/0x1f0 [ 1219.210339][T24191] should_fail_ex+0x512/0x640 [ 1219.210366][T24191] _copy_from_iter+0x2a4/0x15b0 [ 1219.210409][T24191] ? __pfx__copy_from_iter+0x10/0x10 [ 1219.210439][T24191] ? rcu_is_watching+0x12/0xc0 [ 1219.210458][T24191] ? trace_kmalloc+0x2b/0xd0 [ 1219.210483][T24191] ? __kmalloc_noprof+0x242/0x510 [ 1219.210509][T24191] kernfs_fop_write_iter+0x19a/0x510 [ 1219.210538][T24191] vfs_write+0x5bd/0x1180 [ 1219.210557][T24191] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1219.210583][T24191] ? __pfx___mutex_lock+0x10/0x10 [ 1219.210609][T24191] ? __pfx_vfs_write+0x10/0x10 [ 1219.210646][T24191] ksys_write+0x12a/0x240 [ 1219.210665][T24191] ? __pfx_ksys_write+0x10/0x10 [ 1219.210684][T24191] ? rcu_is_watching+0x12/0xc0 [ 1219.210706][T24191] __do_fast_syscall_32+0x73/0x120 [ 1219.210735][T24191] do_fast_syscall_32+0x32/0x80 [ 1219.210762][T24191] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1219.210783][T24191] RIP: 0023:0xf7f47579 [ 1219.210798][T24191] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1219.210816][T24191] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 1219.210834][T24191] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000340 [ 1219.210846][T24191] RDX: 000000000000002f RSI: 0000000000000000 RDI: 0000000000000000 [ 1219.210857][T24191] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1219.210867][T24191] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1219.210877][T24191] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1219.210902][T24191] [ 1219.604812][T24201] overlay: Unknown parameter 'fsuuid' [ 1219.761881][ C2] vkms_vblank_simulate: vblank timer overrun [ 1220.081534][T24212] openvswitch: netlink: Actions may not be safe on all matching packets [ 1220.311346][T24218] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1220.329347][T24218] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1220.332665][T24218] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1220.348689][T24218] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1220.353127][T24218] geneve2: entered promiscuous mode [ 1220.355163][T24218] geneve2: entered allmulticast mode [ 1220.492778][T24221] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5945'. [ 1220.881702][T24229] FAULT_INJECTION: forcing a failure. [ 1220.881702][T24229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1220.893169][T24229] CPU: 0 UID: 0 PID: 24229 Comm: syz.5.5949 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 1220.893198][T24229] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1220.893211][T24229] Call Trace: [ 1220.893218][T24229] [ 1220.893226][T24229] dump_stack_lvl+0x16c/0x1f0 [ 1220.893258][T24229] should_fail_ex+0x512/0x640 [ 1220.893288][T24229] _copy_from_user+0x2e/0xd0 [ 1220.893316][T24229] compat_wext_handle_ioctl+0xc0/0x310 [ 1220.893347][T24229] ? __pfx_compat_wext_handle_ioctl+0x10/0x10 [ 1220.893388][T24229] compat_sock_ioctl+0x320/0x730 [ 1220.893419][T24229] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1220.893451][T24229] ? __fget_files+0x20e/0x3c0 [ 1220.893467][T24229] ? fput+0x10/0xf0 [ 1220.893492][T24229] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1220.893518][T24229] __ia32_compat_sys_ioctl+0x24c/0x360 [ 1220.893547][T24229] __do_fast_syscall_32+0x73/0x120 [ 1220.893578][T24229] do_fast_syscall_32+0x32/0x80 [ 1220.893605][T24229] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1220.893626][T24229] RIP: 0023:0xf7f52579 [ 1220.893641][T24229] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1220.893658][T24229] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1220.893677][T24229] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008b26 [ 1220.893688][T24229] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1220.893699][T24229] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1220.893710][T24229] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1220.893721][T24229] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1220.893745][T24229] [ 1221.029980][ C2] vkms_vblank_simulate: vblank timer overrun [ 1221.131779][ C2] vkms_vblank_simulate: vblank timer overrun [ 1221.340020][T24238] FAULT_INJECTION: forcing a failure. [ 1221.340020][T24238] name failslab, interval 1, probability 0, space 0, times 0 [ 1221.346410][T24238] CPU: 1 UID: 0 PID: 24238 Comm: syz.2.5951 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 1221.346436][T24238] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1221.346447][T24238] Call Trace: [ 1221.346455][T24238] [ 1221.346462][T24238] dump_stack_lvl+0x16c/0x1f0 [ 1221.346490][T24238] should_fail_ex+0x512/0x640 [ 1221.346514][T24238] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1221.346538][T24238] should_failslab+0xc2/0x120 [ 1221.346559][T24238] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1221.346584][T24238] ? alloc_empty_file+0x55/0x1e0 [ 1221.346609][T24238] alloc_empty_file+0x55/0x1e0 [ 1221.346631][T24238] path_openat+0xe0/0x2d40 [ 1221.346647][T24238] ? __ia32_compat_sys_open+0x146/0x1e0 [ 1221.346670][T24238] ? __do_fast_syscall_32+0x73/0x120 [ 1221.346693][T24238] ? do_fast_syscall_32+0x32/0x80 [ 1221.346715][T24238] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1221.346758][T24238] ? __pfx_path_openat+0x10/0x10 [ 1221.346779][T24238] ? __lock_acquire+0xaa4/0x1ba0 [ 1221.346803][T24238] do_filp_open+0x20b/0x470 [ 1221.346821][T24238] ? __pfx_do_filp_open+0x10/0x10 [ 1221.346854][T24238] ? _raw_spin_unlock+0x28/0x50 [ 1221.346874][T24238] ? alloc_fd+0x471/0x7d0 [ 1221.346895][T24238] do_sys_openat2+0x11b/0x1d0 [ 1221.346917][T24238] ? __pfx_do_sys_openat2+0x10/0x10 [ 1221.346941][T24238] ? __fget_files+0x20e/0x3c0 [ 1221.346959][T24238] __ia32_compat_sys_open+0x146/0x1e0 [ 1221.346982][T24238] ? __pfx___ia32_compat_sys_open+0x10/0x10 [ 1221.347018][T24238] ? rcu_is_watching+0x12/0xc0 [ 1221.347034][T24238] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1221.347062][T24238] __do_fast_syscall_32+0x73/0x120 [ 1221.347088][T24238] do_fast_syscall_32+0x32/0x80 [ 1221.347113][T24238] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1221.347132][T24238] RIP: 0023:0xf70de579 [ 1221.347148][T24238] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1221.347164][T24238] RSP: 002b:00000000f50ad55c EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1221.347180][T24238] RAX: ffffffffffffffda RBX: 0000000080000240 RCX: 0000000000000000 [ 1221.347190][T24238] RDX: 0000000000000106 RSI: 0000000000000000 RDI: 0000000000000000 [ 1221.347200][T24238] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1221.347210][T24238] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1221.347219][T24238] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1221.347241][T24238] [ 1221.935996][T24245] netlink: 'syz.4.5953': attribute type 2 has an invalid length. [ 1221.944340][T24245] netlink: 119 bytes leftover after parsing attributes in process `syz.4.5953'. [ 1222.083071][T24247] netfs: Couldn't get user pages (rc=-14) [ 1222.230030][ C2] vkms_vblank_simulate: vblank timer overrun [ 1222.649984][T24259] FAULT_INJECTION: forcing a failure. [ 1222.649984][T24259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1222.656783][T24259] CPU: 3 UID: 0 PID: 24259 Comm: syz.5.5960 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 1222.656809][T24259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1222.656820][T24259] Call Trace: [ 1222.656827][T24259] [ 1222.656834][T24259] dump_stack_lvl+0x16c/0x1f0 [ 1222.656865][T24259] should_fail_ex+0x512/0x640 [ 1222.656895][T24259] _copy_from_user+0x2e/0xd0 [ 1222.656923][T24259] do_hidp_sock_ioctl.constprop.0+0x174/0x510 [ 1222.656951][T24259] ? __pfx_do_hidp_sock_ioctl.constprop.0+0x10/0x10 [ 1222.656983][T24259] ? stack_depot_save_flags+0x28/0xa50 [ 1222.657021][T24259] ? __ia32_compat_sys_ioctl+0xc3/0x360 [ 1222.657045][T24259] ? __do_fast_syscall_32+0x73/0x120 [ 1222.657072][T24259] ? do_fast_syscall_32+0x32/0x80 [ 1222.657099][T24259] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1222.657172][T24259] hidp_sock_compat_ioctl+0xf7/0x4e0 [ 1222.657203][T24259] ? __pfx_hidp_sock_compat_ioctl+0x10/0x10 [ 1222.657233][T24259] ? kasan_quarantine_put+0x10a/0x240 [ 1222.657254][T24259] ? lockdep_hardirqs_on+0x7c/0x110 [ 1222.657289][T24259] ? find_held_lock+0x2b/0x80 [ 1222.657310][T24259] ? tomoyo_path_number_perm+0x295/0x580 [ 1222.657340][T24259] ? tomoyo_path_number_perm+0x18d/0x580 [ 1222.657367][T24259] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1222.657391][T24259] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1222.657420][T24259] ? do_vfs_ioctl+0x512/0x1990 [ 1222.657457][T24259] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1222.657496][T24259] ? __pfx_hidp_sock_compat_ioctl+0x10/0x10 [ 1222.657533][T24259] compat_sock_ioctl+0x176/0x730 [ 1222.657570][T24259] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1222.657606][T24259] ? __fget_files+0x20e/0x3c0 [ 1222.657622][T24259] ? fput+0x10/0xf0 [ 1222.657652][T24259] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1222.657681][T24259] __ia32_compat_sys_ioctl+0x24c/0x360 [ 1222.657712][T24259] __do_fast_syscall_32+0x73/0x120 [ 1222.657744][T24259] do_fast_syscall_32+0x32/0x80 [ 1222.657771][T24259] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1222.657825][T24259] RIP: 0023:0xf7f52579 [ 1222.657842][T24259] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1222.657861][T24259] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1222.657879][T24259] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000400448c9 [ 1222.657891][T24259] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1222.657904][T24259] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1222.657915][T24259] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1222.657927][T24259] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1222.657949][T24259] [ 1223.040345][T24266] FAULT_INJECTION: forcing a failure. [ 1223.040345][T24266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1223.062086][T24266] CPU: 3 UID: 0 PID: 24266 Comm: syz.4.5963 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 1223.062111][T24266] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1223.062122][T24266] Call Trace: [ 1223.062129][T24266] [ 1223.062137][T24266] dump_stack_lvl+0x16c/0x1f0 [ 1223.062169][T24266] should_fail_ex+0x512/0x640 [ 1223.062199][T24266] _copy_from_user+0x2e/0xd0 [ 1223.062226][T24266] hidp_sock_compat_ioctl+0x2f0/0x4e0 [ 1223.062254][T24266] ? __pfx_hidp_sock_compat_ioctl+0x10/0x10 [ 1223.062279][T24266] ? kasan_quarantine_put+0x10a/0x240 [ 1223.062297][T24266] ? lockdep_hardirqs_on+0x7c/0x110 [ 1223.062341][T24266] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1223.062383][T24266] ? __pfx_hidp_sock_compat_ioctl+0x10/0x10 [ 1223.062411][T24266] compat_sock_ioctl+0x176/0x730 [ 1223.062443][T24266] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1223.062473][T24266] ? __fget_files+0x20e/0x3c0 [ 1223.062489][T24266] ? fput+0x10/0xf0 [ 1223.062513][T24266] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1223.062538][T24266] __ia32_compat_sys_ioctl+0x24c/0x360 [ 1223.062565][T24266] __do_fast_syscall_32+0x73/0x120 [ 1223.062594][T24266] do_fast_syscall_32+0x32/0x80 [ 1223.062620][T24266] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1223.062642][T24266] RIP: 0023:0xf7f87579 [ 1223.062657][T24266] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1223.062674][T24266] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1223.062692][T24266] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000400448c8 [ 1223.062703][T24266] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 1223.062713][T24266] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1223.062722][T24266] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1223.062732][T24266] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1223.062756][T24266] [ 1223.091300][ C2] vkms_vblank_simulate: vblank timer overrun [ 1223.247151][ C2] vkms_vblank_simulate: vblank timer overrun [ 1223.451565][ T40] audit: type=1326 audit(1747211685.017:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24269 comm="syz.5.5965" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f52579 code=0x0 [ 1223.457613][ T5981] usb 9-1: new full-speed USB device number 80 using dummy_hcd [ 1223.648835][ T5981] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1223.667199][ T5981] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1223.697257][ T5981] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1223.701204][ T5981] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1223.704974][ T5981] usb 9-1: Manufacturer: syz [ 1223.785151][ T5981] usb 9-1: config 0 descriptor?? [ 1223.998899][ T34] hid-generic 0005:16C0:5505.0038: item fetching failed at offset 0/3 [ 1224.003071][ T34] hid-generic 0005:16C0:5505.0038: probe with driver hid-generic failed with error -22 [ 1224.024593][ T5981] usb 9-1: USB disconnect, device number 80 [ 1224.026129][ C2] vkms_vblank_simulate: vblank timer overrun [ 1224.144508][ C2] vkms_vblank_simulate: vblank timer overrun [ 1225.126149][ C2] vkms_vblank_simulate: vblank timer overrun [ 1226.242189][T23305] usb 9-1: new high-speed USB device number 81 using dummy_hcd [ 1226.400812][T23305] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1226.401856][T24298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1226.406643][T23305] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1226.406672][T23305] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1226.406721][T23305] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1226.406742][T23305] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.427789][T23305] usb 9-1: config 0 descriptor?? [ 1226.460680][T24299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1226.714456][T24305] FAULT_INJECTION: forcing a failure. [ 1226.714456][T24305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1226.728167][T24305] CPU: 0 UID: 0 PID: 24305 Comm: syz.2.5977 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 1226.728193][T24305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1226.728204][T24305] Call Trace: [ 1226.728211][T24305] [ 1226.728219][T24305] dump_stack_lvl+0x16c/0x1f0 [ 1226.728249][T24305] should_fail_ex+0x512/0x640 [ 1226.728277][T24305] _copy_from_user+0x2e/0xd0 [ 1226.728304][T24305] video_usercopy+0x723/0x1440 [ 1226.728705][T24305] ? __pfx___video_do_ioctl+0x10/0x10 [ 1226.728729][T24305] ? __pfx_video_usercopy+0x10/0x10 [ 1226.728762][T24305] ? hook_file_ioctl_common+0x145/0x410 [ 1226.728790][T24305] v4l2_ioctl+0x1bd/0x250 [ 1226.728811][T24305] ? fput+0x11/0xf0 [ 1226.728834][T24305] v4l2_compat_ioctl32+0x214/0x2c0 [ 1226.728856][T24305] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 1226.728878][T24305] __ia32_compat_sys_ioctl+0x24c/0x360 [ 1226.728907][T24305] __do_fast_syscall_32+0x73/0x120 [ 1226.728936][T24305] do_fast_syscall_32+0x32/0x80 [ 1226.728962][T24305] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1226.728985][T24305] RIP: 0023:0xf70de579 [ 1226.729000][T24305] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1226.729017][T24305] RSP: 002b:00000000f50ce55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1226.729035][T24305] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c040565f [ 1226.729047][T24305] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1226.729066][T24305] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1226.729077][T24305] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1226.729088][T24305] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1226.729111][T24305] [ 1226.888297][T23305] plantronics 0003:047F:FFFF.0039: No inputs registered, leaving [ 1226.994132][T23305] plantronics 0003:047F:FFFF.0039: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1227.007894][T24307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5978'. [ 1227.032046][T24307] bridge_slave_1: left allmulticast mode [ 1227.034847][T24307] bridge_slave_1: left promiscuous mode [ 1227.038185][T24307] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.057324][T24307] bridge_slave_0: left allmulticast mode [ 1227.090750][T24307] bridge_slave_0: left promiscuous mode [ 1227.094116][T24307] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.198877][T24310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1227.207222][T24310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1227.256496][T23305] usb 9-1: USB disconnect, device number 81 [ 1229.477629][T24334] 9pnet_virtio: no channels available for device ./file0/file0 [ 1230.127014][T24339] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5988'. [ 1230.601401][ T40] audit: type=1326 audit(1747211692.147:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24341 comm="syz.2.5989" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x0 [ 1230.887094][T24351] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5990'. [ 1231.141950][T23305] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1231.316848][T23305] usb 10-1: Using ep0 maxpacket: 32 [ 1231.334110][T23305] usb 10-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 1231.338241][T23305] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.341520][T23305] usb 10-1: Product: syz [ 1231.343533][T23305] usb 10-1: Manufacturer: syz [ 1231.345842][T23305] usb 10-1: SerialNumber: syz [ 1231.361615][T23305] usb 10-1: config 0 descriptor?? [ 1231.407741][T23305] as10x_usb: device has been detected [ 1231.411281][T23305] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1231.439887][T23305] usb 10-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1231.503181][T24355] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5992'. [ 1231.505117][T23305] as10x_usb: error during firmware upload part1 [ 1231.542765][T23305] Registered device Abilis Systems DVB-Titan [ 1231.572740][T24355] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5992'. [ 1231.615498][T24358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5993'. [ 1231.648533][T24358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5993'. [ 1231.668594][ T9907] usb 10-1: USB disconnect, device number 11 [ 1231.716002][ T9907] Unregistered device Abilis Systems DVB-Titan [ 1231.717835][ T9907] as10x_usb: device has been disconnected [ 1232.808293][T24369] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5995'. [ 1232.899036][T24370] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5995'. [ 1233.173747][T24372] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5996'. [ 1233.217109][T24372] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5996'. [ 1233.393964][T24376] bridge_slave_0: left allmulticast mode [ 1233.422123][T24376] bridge_slave_0: left promiscuous mode [ 1233.426225][T24376] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.485387][T24376] bridge_slave_1: left allmulticast mode [ 1233.506427][T24376] bridge_slave_1: left promiscuous mode [ 1233.510510][T24376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.536303][T24376] bond0: (slave bond_slave_0): Releasing backup interface [ 1233.591599][T24376] bond0: (slave bond_slave_1): Releasing backup interface [ 1233.730058][T24376] team0: Port device team_slave_0 removed [ 1233.822302][T24383] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5998'. [ 1233.890450][T24376] team0: Port device team_slave_1 removed [ 1234.036417][T24376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1234.045819][T24376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1234.089258][T24376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1234.092254][T24376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1234.188141][T24377] team0: Mode changed to "broadcast" [ 1234.245920][T24379] tipc: Started in network mode [ 1234.266030][T24379] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1234.270938][T24379] tipc: Enabled bearer , priority 0 [ 1234.275080][T24378] vlan0: entered promiscuous mode [ 1234.319442][T19674] tipc: Resetting bearer [ 1234.608545][T24398] overlayfs: failed to resolve './file1': -2 [ 1234.609235][T24396] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6003'. [ 1234.647367][T24396] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6003'. [ 1234.742313][T15821] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1234.881746][ C0] vkms_vblank_simulate: vblank timer overrun [ 1234.948463][T15821] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1234.958544][T15821] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1234.961145][ T40] audit: type=1326 audit(1747211696.527:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24399 comm="syz.4.6002" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 1234.983178][T15821] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1234.983222][T15821] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1234.983237][T15821] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.993203][T15821] usb 10-1: config 0 descriptor?? [ 1235.026934][ C0] vkms_vblank_simulate: vblank timer overrun [ 1235.031413][ T40] audit: type=1326 audit(1747211696.527:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24399 comm="syz.4.6002" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 1235.031473][ T40] audit: type=1326 audit(1747211696.537:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24399 comm="syz.4.6002" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 1235.031521][ T40] audit: type=1326 audit(1747211696.537:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24399 comm="syz.4.6002" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 1235.031569][ T40] audit: type=1326 audit(1747211696.537:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24399 comm="syz.4.6002" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 1235.031615][ T40] audit: type=1326 audit(1747211696.537:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24399 comm="syz.4.6002" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 1235.031660][ T40] audit: type=1326 audit(1747211696.537:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24399 comm="syz.4.6002" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 1235.031707][ T40] audit: type=1326 audit(1747211696.537:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24399 comm="syz.4.6002" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 1235.031751][ T40] audit: type=1326 audit(1747211696.537:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24399 comm="syz.4.6002" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 1235.295447][ C0] vkms_vblank_simulate: vblank timer overrun [ 1235.358343][ T10] tipc: Node number set to 11578026 [ 1235.513411][T24406] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1235.702077][T24410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6008'. [ 1235.730682][ C0] vkms_vblank_simulate: vblank timer overrun [ 1235.796559][ C0] vkms_vblank_simulate: vblank timer overrun [ 1235.828062][ C0] vkms_vblank_simulate: vblank timer overrun [ 1235.831243][T24411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6008'. [ 1235.890217][T15821] plantronics 0003:047F:FFFF.003A: No inputs registered, leaving [ 1235.956508][T15821] plantronics 0003:047F:FFFF.003A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1236.013817][ C0] vkms_vblank_simulate: vblank timer overrun [ 1236.168537][ T34] usb 10-1: USB disconnect, device number 12 [ 1236.261573][ C0] vkms_vblank_simulate: vblank timer overrun [ 1236.318751][ C0] vkms_vblank_simulate: vblank timer overrun [ 1236.520736][T24421] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1236.532556][T24421] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1236.576821][T24421] batman_adv: batadv0: Interface activated: ip6gretap1 [ 1236.764770][ C0] vkms_vblank_simulate: vblank timer overrun [ 1237.186705][ T7948] usb 9-1: new full-speed USB device number 82 using dummy_hcd [ 1237.286087][T24429] netlink: 100 bytes leftover after parsing attributes in process `syz.6.6013'. [ 1237.402472][ C0] vkms_vblank_simulate: vblank timer overrun [ 1237.411671][ T7948] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1237.465852][ T7948] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1237.471369][ T7948] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1237.474845][ T7948] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.613741][ C0] vkms_vblank_simulate: vblank timer overrun [ 1237.720750][ T7948] usb 9-1: usb_control_msg returned -32 [ 1237.756091][ T7948] usbtmc 9-1:16.0: can't read capabilities [ 1237.829138][ C0] vkms_vblank_simulate: vblank timer overrun [ 1238.133507][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.225564][ C0] vkms_vblank_simulate: vblank timer overrun [ 1238.262936][T24434] Process accounting resumed [ 1239.180383][T24447] FAULT_INJECTION: forcing a failure. [ 1239.180383][T24447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1239.202143][T24447] CPU: 1 UID: 0 PID: 24447 Comm: syz.5.6018 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 1239.202172][T24447] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1239.202183][T24447] Call Trace: [ 1239.202190][T24447] [ 1239.202211][T24447] dump_stack_lvl+0x16c/0x1f0 [ 1239.202241][T24447] should_fail_ex+0x512/0x640 [ 1239.202269][T24447] _copy_from_user+0x2e/0xd0 [ 1239.202293][T24447] lo_ioctl+0x513/0x28e0 [ 1239.202318][T24447] ? __pfx_stack_trace_save+0x10/0x10 [ 1239.202337][T24447] ? stack_depot_save_flags+0x28/0xa50 [ 1239.202362][T24447] ? __lock_acquire+0xaa4/0x1ba0 [ 1239.202386][T24447] ? kasan_save_stack+0x42/0x60 [ 1239.202405][T24447] ? kasan_save_stack+0x33/0x60 [ 1239.202422][T24447] ? kasan_save_track+0x14/0x30 [ 1239.202438][T24447] ? kasan_save_free_info+0x3b/0x60 [ 1239.202463][T24447] ? __kasan_slab_free+0x51/0x70 [ 1239.202481][T24447] ? kfree+0x2b6/0x4d0 [ 1239.202496][T24447] ? tomoyo_path_number_perm+0x470/0x580 [ 1239.202515][T24447] ? security_file_ioctl_compat+0x9b/0x240 [ 1239.202536][T24447] ? __ia32_compat_sys_ioctl+0xc3/0x360 [ 1239.202559][T24447] ? __do_fast_syscall_32+0x73/0x120 [ 1239.202585][T24447] ? do_fast_syscall_32+0x32/0x80 [ 1239.202609][T24447] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1239.202634][T24447] ? __pfx_lo_ioctl+0x10/0x10 [ 1239.202685][T24447] ? kasan_quarantine_put+0x10a/0x240 [ 1239.202704][T24447] ? lockdep_hardirqs_on+0x7c/0x110 [ 1239.202730][T24447] ? find_held_lock+0x2b/0x80 [ 1239.202748][T24447] ? tomoyo_path_number_perm+0x295/0x580 [ 1239.202772][T24447] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1239.202824][T24447] lo_compat_ioctl+0xb9/0x170 [ 1239.202849][T24447] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 1239.202872][T24447] compat_blkdev_ioctl+0x2eb/0x7a0 [ 1239.202892][T24447] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 1239.202910][T24447] ? fput+0x10/0xf0 [ 1239.202933][T24447] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 1239.202955][T24447] __ia32_compat_sys_ioctl+0x24c/0x360 [ 1239.202983][T24447] __do_fast_syscall_32+0x73/0x120 [ 1239.203010][T24447] do_fast_syscall_32+0x32/0x80 [ 1239.203036][T24447] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1239.203058][T24447] RIP: 0023:0xf7f52579 [ 1239.203072][T24447] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1239.203089][T24447] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1239.203105][T24447] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000004c0a [ 1239.203117][T24447] RDX: 0000000080001280 RSI: 0000000000000000 RDI: 0000000000000000 [ 1239.203134][T24447] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1239.203144][T24447] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1239.203154][T24447] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1239.203176][T24447] [ 1239.210341][T24442] ALSA: mixer_oss: invalid OSS volume 'DIG¨TAL1' [ 1239.332233][ C0] vkms_vblank_simulate: vblank timer overrun [ 1239.412718][ C0] vkms_vblank_simulate: vblank timer overrun [ 1239.532134][ C0] vkms_vblank_simulate: vblank timer overrun [ 1239.680469][T24452] FAULT_INJECTION: forcing a failure. [ 1239.680469][T24452] name failslab, interval 1, probability 0, space 0, times 0 [ 1239.707208][T24452] CPU: 3 UID: 0 PID: 24452 Comm: syz.5.6020 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 1239.707238][T24452] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1239.707249][T24452] Call Trace: [ 1239.707257][T24452] [ 1239.707266][T24452] dump_stack_lvl+0x16c/0x1f0 [ 1239.707299][T24452] should_fail_ex+0x512/0x640 [ 1239.707327][T24452] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1239.707353][T24452] should_failslab+0xc2/0x120 [ 1239.707378][T24452] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1239.707400][T24452] ? __d_alloc+0x31/0xaa0 [ 1239.707425][T24452] __d_alloc+0x31/0xaa0 [ 1239.707447][T24452] d_alloc_pseudo+0x1c/0xc0 [ 1239.707472][T24452] alloc_file_pseudo+0xcf/0x230 [ 1239.707497][T24452] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1239.707524][T24452] ? alloc_fd+0x471/0x7d0 [ 1239.707545][T24452] __anon_inode_getfile+0xf7/0x370 [ 1239.707579][T24452] anon_inode_getfile_fmode+0x37/0xa0 [ 1239.707608][T24452] do_signalfd4+0x20f/0x420 [ 1239.707628][T24452] __ia32_compat_sys_signalfd4+0x143/0x1e0 [ 1239.707648][T24452] ? __pfx___ia32_compat_sys_signalfd4+0x10/0x10 [ 1239.707667][T24452] ? syscall_user_dispatch+0x78/0x140 [ 1239.707699][T24452] ? rcu_is_watching+0x12/0xc0 [ 1239.707722][T24452] __do_fast_syscall_32+0x73/0x120 [ 1239.707753][T24452] do_fast_syscall_32+0x32/0x80 [ 1239.707781][T24452] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1239.707805][T24452] RIP: 0023:0xf7f52579 [ 1239.707822][T24452] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1239.707842][T24452] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000147 [ 1239.707862][T24452] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00000000800000c0 [ 1239.707875][T24452] RDX: 0000000000000008 RSI: 0000000000000800 RDI: 0000000000000000 [ 1239.707887][T24452] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1239.707898][T24452] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1239.707908][T24452] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1239.707932][T24452] [ 1239.976543][T23305] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 1240.000200][T15821] usb 9-1: USB disconnect, device number 82 [ 1240.095300][T24456] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6022'. [ 1240.125579][T24458] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6023'. [ 1240.145724][T23305] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1240.150518][T23305] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1240.178530][T24458] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6023'. [ 1240.202233][T23305] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1240.250151][T23305] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1240.258167][T23305] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.297751][ C0] vkms_vblank_simulate: vblank timer overrun [ 1240.342548][T23305] usb 11-1: config 0 descriptor?? [ 1240.437946][T24461] tipc: Resetting bearer [ 1240.781917][T23305] plantronics 0003:047F:FFFF.003B: No inputs registered, leaving [ 1240.792120][T23305] plantronics 0003:047F:FFFF.003B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1241.090274][ T10] usb 11-1: USB disconnect, device number 2 [ 1241.111917][ C0] vkms_vblank_simulate: vblank timer overrun [ 1241.774544][T24481] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6030'. [ 1241.781872][T24480] FAULT_INJECTION: forcing a failure. [ 1241.781872][T24480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1241.795872][T24480] CPU: 3 UID: 0 PID: 24480 Comm: syz.6.6031 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 1241.795898][T24480] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1241.795907][T24480] Call Trace: [ 1241.795914][T24480] [ 1241.795920][T24480] dump_stack_lvl+0x16c/0x1f0 [ 1241.795949][T24480] should_fail_ex+0x512/0x640 [ 1241.795974][T24480] copy_fpstate_to_sigframe+0x878/0xb10 [ 1241.796002][T24480] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 1241.796025][T24480] ? posixtimer_deliver_signal+0xed/0x6a0 [ 1241.796079][T24480] ? posixtimer_deliver_signal+0x1af/0x6a0 [ 1241.796107][T24480] get_sigframe+0x4a8/0x9c0 [ 1241.796132][T24480] ? __pfx_get_sigframe+0x10/0x10 [ 1241.796155][T24480] ? _raw_spin_unlock_irq+0x23/0x50 [ 1241.796176][T24480] ? siginfo_layout+0x177/0x290 [ 1241.796199][T24480] ia32_setup_rt_frame+0xe3/0xb30 [ 1241.796221][T24480] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 1241.796245][T24480] arch_do_signal_or_restart+0x47b/0x7a0 [ 1241.796267][T24480] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1241.796294][T24480] ? ksys_write+0x1b9/0x240 [ 1241.796311][T24480] ? __pfx___ia32_sys_mq_timedreceive_time32+0x10/0x10 [ 1241.796332][T24480] ? rcu_is_watching+0x12/0xc0 [ 1241.796354][T24480] syscall_exit_to_user_mode+0x150/0x2a0 [ 1241.796379][T24480] __do_fast_syscall_32+0x80/0x120 [ 1241.796406][T24480] do_fast_syscall_32+0x32/0x80 [ 1241.796430][T24480] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1241.796450][T24480] RIP: 0023:0xf7f47577 [ 1241.796464][T24480] Code: 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 [ 1241.796479][T24480] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 0000000000000118 [ 1241.796495][T24480] RAX: 0000000000000118 RBX: 0000000000000003 RCX: 0000000000000000 [ 1241.796506][T24480] RDX: 00000000fffffee3 RSI: 0000000002000000 RDI: 0000000000000000 [ 1241.796516][T24480] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1241.796526][T24480] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1241.796536][T24480] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1241.796557][T24480] [ 1242.185520][ C0] vkms_vblank_simulate: vblank timer overrun [ 1242.630069][T24486] netlink: 100 bytes leftover after parsing attributes in process `syz.6.6032'. [ 1242.883227][T24489] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6033'. [ 1242.957631][T24492] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6034'. [ 1243.079340][T24495] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6035'. [ 1243.085597][T24495] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6035'. [ 1243.394922][T24498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6036'. [ 1244.383239][T24509] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1244.599171][T15821] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1244.778857][T15821] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1244.784238][T15821] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1244.790633][T15821] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1244.808231][T15821] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1244.835707][T15821] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.851379][T15821] usb 10-1: config 0 descriptor?? [ 1245.287497][T15821] plantronics 0003:047F:FFFF.003C: No inputs registered, leaving [ 1245.309825][ C0] vkms_vblank_simulate: vblank timer overrun [ 1245.317314][T15821] plantronics 0003:047F:FFFF.003C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1245.442643][T24529] netlink: 'syz.4.6047': attribute type 62 has an invalid length. [ 1245.459040][T24529] ata1.00: invalid multi_count 1 ignored [ 1245.606447][ T34] usb 10-1: USB disconnect, device number 13 [ 1245.635916][ C0] vkms_vblank_simulate: vblank timer overrun [ 1245.940811][ C0] vkms_vblank_simulate: vblank timer overrun [ 1246.027866][ C0] vkms_vblank_simulate: vblank timer overrun [ 1246.125606][ C0] vkms_vblank_simulate: vblank timer overrun [ 1246.217805][ C0] vkms_vblank_simulate: vblank timer overrun [ 1246.317726][ C0] vkms_vblank_simulate: vblank timer overrun [ 1246.342026][T24532] __nla_validate_parse: 3 callbacks suppressed [ 1246.342045][T24532] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6049'. [ 1246.358317][T24532] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6049'. [ 1246.459370][T24536] netlink: 'syz.4.6050': attribute type 18 has an invalid length. [ 1246.665630][ C0] vkms_vblank_simulate: vblank timer overrun [ 1247.936787][ C0] vkms_vblank_simulate: vblank timer overrun [ 1247.984608][T24560] ptrace attach of "/syz-executor exec"[20780] was attempted by "/syz-executor exec"[24560] [ 1248.190558][T24564] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6063'. [ 1248.220011][T24566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6062'. [ 1248.277900][ C0] vkms_vblank_simulate: vblank timer overrun [ 1248.298875][ C0] vkms_vblank_simulate: vblank timer overrun [ 1248.332543][T24567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6062'. [ 1248.371480][ C0] vkms_vblank_simulate: vblank timer overrun [ 1248.433807][ C0] vkms_vblank_simulate: vblank timer overrun [ 1248.496293][ C0] vkms_vblank_simulate: vblank timer overrun [ 1248.498480][T24570] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6064'. [ 1248.939036][T24579] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6066'. [ 1249.458736][T24582] loop2: detected capacity change from 0 to 7 [ 1249.479395][T24582] Dev loop2: unable to read RDB block 7 [ 1249.483563][T24582] loop2: unable to read partition table [ 1249.493280][T24582] loop2: partition table beyond EOD, truncated [ 1249.504615][T24582] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1249.984947][T24593] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6070'. [ 1250.144234][T24590] cdrom: dropping to single frame dma [ 1250.210477][T24596] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6072'. [ 1250.636444][T24600] bond1: entered promiscuous mode [ 1250.641898][T24600] bond1: entered allmulticast mode [ 1250.651536][T24600] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1250.731523][T24605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6075'. [ 1251.213824][ C0] vkms_vblank_simulate: vblank timer overrun [ 1251.317747][ C0] vkms_vblank_simulate: vblank timer overrun [ 1251.349685][ C0] vkms_vblank_simulate: vblank timer overrun [ 1251.521831][ C0] vkms_vblank_simulate: vblank timer overrun [ 1251.581781][ C0] vkms_vblank_simulate: vblank timer overrun [ 1251.617800][ C0] vkms_vblank_simulate: vblank timer overrun [ 1251.649759][ C0] vkms_vblank_simulate: vblank timer overrun [ 1251.668552][T24622] __nla_validate_parse: 2 callbacks suppressed [ 1251.668570][T24622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6081'. [ 1251.697424][ C0] vkms_vblank_simulate: vblank timer overrun [ 1251.750064][ C0] vkms_vblank_simulate: vblank timer overrun [ 1251.824221][T24622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6081'. [ 1251.881696][ C0] vkms_vblank_simulate: vblank timer overrun [ 1251.963797][T24626] netlink: 100 bytes leftover after parsing attributes in process `syz.5.6082'. [ 1252.326408][T24630] trusted_key: encrypted_key: insufficient parameters specified [ 1252.760789][T24634] hub 2-0:1.0: USB hub found [ 1252.763696][T24634] hub 2-0:1.0: 2 ports detected [ 1253.275260][T24643] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 1253.397985][ C0] vkms_vblank_simulate: vblank timer overrun [ 1253.435940][ C0] vkms_vblank_simulate: vblank timer overrun [ 1253.687534][T24649] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6087'. [ 1254.181608][ C0] vkms_vblank_simulate: vblank timer overrun [ 1254.333686][ C0] vkms_vblank_simulate: vblank timer overrun [ 1254.386679][ C0] vkms_vblank_simulate: vblank timer overrun [ 1254.485801][ C0] vkms_vblank_simulate: vblank timer overrun [ 1254.513720][ C0] vkms_vblank_simulate: vblank timer overrun [ 1254.565909][ C0] vkms_vblank_simulate: vblank timer overrun [ 1254.662651][T24655] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6091'. [ 1254.692198][T24655] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6091'. [ 1254.757643][ C0] vkms_vblank_simulate: vblank timer overrun [ 1254.825486][T24658] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6092'. [ 1255.159520][T24660] netlink: 'syz.4.6093': attribute type 1 has an invalid length. [ 1255.262790][T24660] macsec1: entered promiscuous mode [ 1255.267831][T24660] bond1: entered promiscuous mode [ 1255.277833][T24660] macsec1: entered allmulticast mode [ 1255.288409][T24660] bond1: entered allmulticast mode [ 1255.704626][T24667] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1256.541663][T24682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6099'. [ 1256.590114][T24682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6099'. [ 1257.481956][T24687] netlink: 100 bytes leftover after parsing attributes in process `syz.5.6101'. [ 1257.637536][T24690] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6103'. [ 1257.670080][T24690] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6103'. [ 1258.842275][T24714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6110'. [ 1258.853873][T24714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1258.860538][T24714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1258.927958][T24714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1258.931114][T24714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1259.303687][T24720] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6111'. [ 1259.327844][T24720] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6111'. [ 1259.461113][T24724] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6112'. [ 1259.689172][T24731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6116'. [ 1259.713682][T24731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6116'. [ 1260.052332][T24736] FAULT_INJECTION: forcing a failure. [ 1260.052332][T24736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1260.055142][T23305] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1260.066916][T24736] CPU: 2 UID: 0 PID: 24736 Comm: syz.4.6117 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 1260.066946][T24736] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1260.066957][T24736] Call Trace: [ 1260.066965][T24736] [ 1260.066972][T24736] dump_stack_lvl+0x16c/0x1f0 [ 1260.067003][T24736] should_fail_ex+0x512/0x640 [ 1260.067030][T24736] _copy_from_iter+0x2a4/0x15b0 [ 1260.067058][T24736] ? __alloc_skb+0x200/0x380 [ 1260.067078][T24736] ? __pfx__copy_from_iter+0x10/0x10 [ 1260.067105][T24736] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1260.067136][T24736] netlink_sendmsg+0x829/0xdd0 [ 1260.067164][T24736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1260.067189][T24736] ? __import_iovec+0x1c8/0x660 [ 1260.067213][T24736] ____sys_sendmsg+0xa98/0xc70 [ 1260.067242][T24736] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1260.067268][T24736] ? get_compat_msghdr+0x11a/0x170 [ 1260.067303][T24736] ___sys_sendmsg+0x134/0x1d0 [ 1260.067328][T24736] ? __pfx____sys_sendmsg+0x10/0x10 [ 1260.067382][T24736] __sys_sendmsg+0x16d/0x220 [ 1260.067405][T24736] ? __pfx___sys_sendmsg+0x10/0x10 [ 1260.067439][T24736] ? rcu_is_watching+0x12/0xc0 [ 1260.067462][T24736] __do_fast_syscall_32+0x73/0x120 [ 1260.067493][T24736] do_fast_syscall_32+0x32/0x80 [ 1260.067519][T24736] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1260.067541][T24736] RIP: 0023:0xf7f87579 [ 1260.067555][T24736] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1260.067575][T24736] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1260.067596][T24736] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1260.067610][T24736] RDX: 0000000020044050 RSI: 0000000000000000 RDI: 0000000000000000 [ 1260.067624][T24736] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1260.067636][T24736] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1260.067649][T24736] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1260.067676][T24736] [ 1260.306656][T23305] usb 10-1: Using ep0 maxpacket: 16 [ 1260.329469][T23305] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1260.347279][T23305] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1260.365715][T23305] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1260.398827][T23305] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1260.408245][T23305] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.443707][T23305] usb 10-1: config 0 descriptor?? [ 1260.818701][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 1260.818721][ T40] audit: type=1400 audit(1747211722.389:1267): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=24738 comm="syz.6.6119" [ 1261.016591][T24747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6120'. [ 1261.145728][T23305] usbhid 10-1:0.0: can't add hid device: -71 [ 1261.148042][T23305] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1261.153289][T23305] usb 10-1: USB disconnect, device number 14 [ 1263.704256][T24793] orangefs_devreq_open: device cannot be opened in blocking mode [ 1263.762140][T24794] __nla_validate_parse: 5 callbacks suppressed [ 1263.762160][T24794] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6134'. [ 1263.845289][T24797] overlay: Unknown parameter 'subj_user' [ 1263.929867][T24797] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6136'. [ 1263.933269][T24797] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6136'. [ 1264.543449][T24814] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6142'. [ 1264.571500][T24814] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6142'. [ 1264.669886][T21193] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 1264.833767][T21193] usb 9-1: device descriptor read/64, error -71 [ 1265.097676][T21193] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 1265.225220][T21193] usb 9-1: device descriptor read/64, error -71 [ 1265.370582][T21193] usb usb9-port1: attempt power cycle [ 1265.677842][T24824] netlink: 100 bytes leftover after parsing attributes in process `syz.6.6146'. [ 1265.698272][ C0] vkms_vblank_simulate: vblank timer overrun [ 1265.716832][T21193] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 1265.735678][T21193] usb 9-1: device descriptor read/8, error -71 [ 1265.804621][ T69] Bluetooth: hci3: command 0x0406 tx timeout [ 1265.984862][T21193] usb 9-1: new high-speed USB device number 86 using dummy_hcd [ 1266.019902][T21193] usb 9-1: device descriptor read/8, error -71 [ 1266.158261][T21193] usb usb9-port1: unable to enumerate USB device [ 1266.297507][ C0] vkms_vblank_simulate: vblank timer overrun [ 1267.281729][T24843] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6153'. [ 1267.321817][T24843] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6153'. [ 1267.415413][ C0] vkms_vblank_simulate: vblank timer overrun [ 1268.499501][T24857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6160'. [ 1268.558474][T24857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6160'. [ 1268.662716][ C0] vkms_vblank_simulate: vblank timer overrun [ 1268.741465][T24851] overlayfs: failed to decode file handle (len=12, type=251, flags=0, err=-22) [ 1268.797360][ C0] vkms_vblank_simulate: vblank timer overrun [ 1268.878477][ C0] vkms_vblank_simulate: vblank timer overrun [ 1268.946076][T24862] netlink: 100 bytes leftover after parsing attributes in process `syz.5.6155'. [ 1269.125578][ C0] vkms_vblank_simulate: vblank timer overrun [ 1269.632322][ C0] vkms_vblank_simulate: vblank timer overrun [ 1269.821877][T24881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6166'. [ 1269.851019][T24881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6166'. [ 1269.919164][T24883] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6167'. [ 1270.105771][T24888] netlink: 100 bytes leftover after parsing attributes in process `syz.5.6169'. [ 1270.343021][T24890] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6171'. [ 1270.361842][T24890] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6171'. [ 1270.374950][T24892] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1270.379765][T24892] macsec2: entered promiscuous mode [ 1271.362369][ C0] vkms_vblank_simulate: vblank timer overrun [ 1271.433407][ C0] vkms_vblank_simulate: vblank timer overrun [ 1271.646924][ C0] vkms_vblank_simulate: vblank timer overrun [ 1272.214508][ C2] ref_tracker: reference already released. [ 1272.239070][ C2] ref_tracker: allocated in: [ 1272.240986][ C2] netdev_watchdog_up+0x183/0x200 [ 1272.248932][ C2] netif_carrier_on+0xfb/0x120 [ 1272.251852][ C2] e1000_watchdog+0xd13/0x1520 [ 1272.260026][ C2] process_one_work+0x9cc/0x1b70 [ 1272.264259][ C2] worker_thread+0x6c8/0xf10 [ 1272.272224][ C2] kthread+0x3c5/0x780 [ 1272.275171][ C2] ret_from_fork+0x48/0x80 [ 1272.278801][ C2] ret_from_fork_asm+0x1a/0x30 [ 1272.282912][ C2] ref_tracker: freed in: [ 1272.288191][ C2] dev_deactivate_many+0x28d/0xd50 [ 1272.298564][ C2] dev_deactivate+0xf8/0x1c0 [ 1272.304861][ C2] linkwatch_do_dev+0x11e/0x160 [ 1272.310635][ C2] __linkwatch_run_queue+0x2aa/0x8a0 [ 1272.313444][ C2] linkwatch_event+0x8f/0xc0 [ 1272.319727][ C2] process_one_work+0x9cc/0x1b70 [ 1272.321992][ C2] worker_thread+0x6c8/0xf10 [ 1272.324079][ C2] kthread+0x3c5/0x780 [ 1272.339872][ C2] ret_from_fork+0x48/0x80 [ 1272.343961][ C2] ret_from_fork_asm+0x1a/0x30 [ 1272.347955][ C2] ------------[ cut here ]------------ [ 1272.367603][ C2] WARNING: CPU: 2 PID: 19669 at lib/ref_tracker.c:255 ref_tracker_free+0x61a/0x830 [ 1272.378682][ C2] Modules linked in: [ 1272.385464][ C2] CPU: 2 UID: 0 PID: 19669 Comm: kworker/u32:4 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 1272.402170][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1272.411853][ C2] Workqueue: events_unbound toggle_allocation_gate [ 1272.424514][ C2] RIP: 0010:ref_tracker_free+0x61a/0x830 [ 1272.430512][ C2] Code: 00 44 8b 73 18 31 ff 44 89 f6 e8 01 32 bb fc 45 85 f6 0f 85 a6 00 00 00 e8 b3 36 bb fc 48 8b 34 24 48 89 ef e8 57 92 6c 06 90 <0f> 0b 90 bb ea ff ff ff e9 50 fd ff ff e8 94 36 bb fc 4c 8d 6d 44 [ 1272.457573][ C2] RSP: 0018:ffffc90000538a80 EFLAGS: 00010202 [ 1272.460142][ C2] RAX: 0000000000000101 RBX: ffff888027710880 RCX: 0000000000000000 [ 1272.463681][ C2] RDX: 0000000000000102 RSI: ffffffff8dbdc8a7 RDI: 0000000000000001 [ 1272.474509][ C2] RBP: ffff888045028610 R08: 0000000000000001 R09: 0000000000000001 [ 1272.482096][ C2] R10: ffffffff90851e17 R11: 0000000000000000 R12: 1ffff920000a7152 [ 1272.492762][ C2] R13: ffffc90000538ab0 R14: 00000000068a06fd R15: ffff888027710898 [ 1272.497311][ C2] FS: 0000000000000000(0000) GS:ffff8880979ea000(0000) knlGS:0000000000000000 [ 1272.517622][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1272.523714][ C2] CR2: 0000000000000008 CR3: 000000000e180000 CR4: 0000000000352ef0 [ 1272.529709][ C2] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1272.535906][ C2] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1272.540853][ C2] Call Trace: [ 1272.543864][ C2] [ 1272.545685][ C2] ? __pfx_ref_tracker_free+0x10/0x10 [ 1272.548947][ C2] ? register_lock_class+0x41/0x4c0 [ 1272.552159][ C2] ? dev_watchdog+0x1dd/0xa10 [ 1272.558227][ C2] ? call_timer_fn+0x19a/0x620 [ 1272.560354][ C2] ? __run_timers+0x6ef/0x960 [ 1272.563496][ C2] ? run_timer_base+0x114/0x190 [ 1272.566158][ C2] ? run_timer_softirq+0x1a/0x40 [ 1272.570182][ C2] ? handle_softirqs+0x219/0x8e0 [ 1272.573123][ C2] ? __irq_exit_rcu+0x109/0x170 [ 1272.582373][ C2] ? irq_exit_rcu+0x9/0x30 [ 1272.584179][ C2] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1272.586804][ C2] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1272.589672][ C2] ? smp_call_function_many_cond+0x4a5/0x1290 [ 1272.593155][ C2] ? on_each_cpu_cond_mask+0x40/0x90 [ 1272.600511][ C2] ? text_poke_bp_batch+0x657/0x760 [ 1272.602953][ C2] ? text_poke_finish+0x30/0x40 [ 1272.605322][ C2] ? arch_jump_label_transform_apply+0x1c/0x30 [ 1272.607742][ C2] ? jump_label_update+0x376/0x550 [ 1272.635970][ C2] ? dev_watchdog+0x1b2/0xa10 [ 1272.638148][ C2] dev_watchdog+0x1dd/0xa10 [ 1272.640558][ C2] ? __pfx_dev_watchdog+0x10/0x10 [ 1272.643567][ C2] ? __pfx_dev_watchdog+0x10/0x10 [ 1272.663792][ C2] call_timer_fn+0x19a/0x620 [ 1272.667088][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 1272.671183][ C2] ? mark_held_locks+0x49/0x80 [ 1272.674422][ C2] ? __pfx_dev_watchdog+0x10/0x10 [ 1272.685689][ C2] __run_timers+0x6ef/0x960 [ 1272.689001][ C2] ? __pfx___run_timers+0x10/0x10 [ 1272.692221][ C2] run_timer_base+0x114/0x190 [ 1272.695418][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 1272.706556][ C2] run_timer_softirq+0x1a/0x40 [ 1272.710446][ C2] handle_softirqs+0x219/0x8e0 [ 1272.714417][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 1272.732344][ C2] __irq_exit_rcu+0x109/0x170 [ 1272.735566][ C2] irq_exit_rcu+0x9/0x30 [ 1272.738884][ C2] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1272.743311][ C2] [ 1272.745284][ C2] [ 1272.747200][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1272.750963][ C2] RIP: 0010:smp_call_function_many_cond+0x4a5/0x1290 [ 1272.755225][ C2] Code: 89 ee e8 0e 0a 0c 00 85 ed 74 48 48 8b 44 24 20 49 89 c4 83 e0 07 49 c1 ec 03 48 89 c5 4d 01 f4 83 c5 03 e8 ad 0e 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 de 0b 00 00 8b 43 08 31 [ 1272.769548][ C2] RSP: 0018:ffffc90003d6f938 EFLAGS: 00000293 [ 1272.773359][ C2] RAX: 0000000000000000 RBX: ffff88802b241460 RCX: ffffffff81aea199 [ 1272.778755][ C2] RDX: ffff88802adf8000 RSI: ffffffff81aea173 RDI: 0000000000000005 [ 1272.785210][ C2] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 1272.791026][ C2] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed100564828d [ 1272.797857][ C2] R13: 0000000000000001 R14: dffffc0000000000 R15: ffff88802b43b180 [ 1272.802948][ C2] ? smp_call_function_many_cond+0x4c9/0x1290 [ 1272.807407][ C2] ? smp_call_function_many_cond+0x4a3/0x1290 [ 1272.811310][ C2] ? smp_call_function_many_cond+0x4a3/0x1290 [ 1272.815342][ C2] ? __pfx_do_sync_core+0x10/0x10 [ 1272.819387][ C2] on_each_cpu_cond_mask+0x40/0x90 [ 1272.823602][ C2] text_poke_bp_batch+0x657/0x760 [ 1272.828964][ C2] ? __kmalloc_node_track_caller_noprof+0xec/0x510 [ 1272.835568][ C2] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 1272.839160][ C2] ? __jump_label_patch+0x1db/0x400 [ 1272.843068][ C2] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1272.848925][ C2] ? find_held_lock+0x2b/0x80 [ 1272.853212][ C2] text_poke_finish+0x30/0x40 [ 1272.857032][ C2] arch_jump_label_transform_apply+0x1c/0x30 [ 1272.861055][ C2] jump_label_update+0x376/0x550 [ 1272.864247][ C2] static_key_disable_cpuslocked+0x158/0x1c0 [ 1272.868127][ C2] static_key_disable+0x1a/0x20 [ 1272.872283][ C2] toggle_allocation_gate+0x145/0x280 [ 1272.877314][ C2] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1272.883021][ C2] ? rcu_is_watching+0x12/0xc0 [ 1272.888819][ C2] process_one_work+0x9cc/0x1b70 [ 1272.892513][ C2] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 1272.896655][ C2] ? __pfx_process_one_work+0x10/0x10 [ 1272.900876][ C2] ? assign_work+0x1a0/0x250 [ 1272.903991][ C2] worker_thread+0x6c8/0xf10 [ 1272.908871][ C2] ? __pfx_worker_thread+0x10/0x10 [ 1272.913878][ C2] kthread+0x3c5/0x780 [ 1272.917730][ C2] ? __pfx_kthread+0x10/0x10 [ 1272.921543][ C2] ? __pfx_kthread+0x10/0x10 [ 1272.926257][ C2] ? __pfx_kthread+0x10/0x10 [ 1272.931093][ C2] ? __pfx_kthread+0x10/0x10 [ 1272.935007][ C2] ? rcu_is_watching+0x12/0xc0 [ 1272.938263][ C2] ? __pfx_kthread+0x10/0x10 [ 1272.938356][T24918] netlink: 100 bytes leftover after parsing attributes in process `syz.6.6179'. [ 1272.942454][ C2] ret_from_fork+0x48/0x80 [ 1272.958239][ C2] ? __pfx_kthread+0x10/0x10 [ 1272.962922][ C2] ret_from_fork_asm+0x1a/0x30 [ 1272.966783][ C2] [ 1272.968455][ C2] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1272.973090][ C2] CPU: 2 UID: 0 PID: 19669 Comm: kworker/u32:4 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 1272.982162][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1272.992207][ C2] Workqueue: events_unbound toggle_allocation_gate [ 1272.998439][ C2] Call Trace: [ 1273.001789][ C2] [ 1273.004106][ C2] dump_stack_lvl+0x3d/0x1f0 [ 1273.007541][ C2] panic+0x71c/0x800 [ 1273.009519][ C2] ? __pfx_panic+0x10/0x10 [ 1273.011763][ C2] ? show_trace_log_lvl+0x29b/0x3e0 [ 1273.014121][ C2] ? check_panic_on_warn+0x1f/0xb0 [ 1273.017062][ C2] ? ref_tracker_free+0x61a/0x830 [ 1273.019833][ C2] check_panic_on_warn+0xab/0xb0 [ 1273.023013][ C2] __warn+0xf6/0x3c0 [ 1273.025915][ C2] ? ref_tracker_free+0x61a/0x830 [ 1273.029767][ C2] report_bug+0x3c3/0x580 [ 1273.032474][ C2] ? ref_tracker_free+0x61a/0x830 [ 1273.035682][ C2] handle_bug+0x184/0x210 [ 1273.040522][ C2] exc_invalid_op+0x17/0x50 [ 1273.042643][ C2] asm_exc_invalid_op+0x1a/0x20 [ 1273.044829][ C2] RIP: 0010:ref_tracker_free+0x61a/0x830 [ 1273.047650][ C2] Code: 00 44 8b 73 18 31 ff 44 89 f6 e8 01 32 bb fc 45 85 f6 0f 85 a6 00 00 00 e8 b3 36 bb fc 48 8b 34 24 48 89 ef e8 57 92 6c 06 90 <0f> 0b 90 bb ea ff ff ff e9 50 fd ff ff e8 94 36 bb fc 4c 8d 6d 44 [ 1273.059990][ C2] RSP: 0018:ffffc90000538a80 EFLAGS: 00010202 [ 1273.064170][ C2] RAX: 0000000000000101 RBX: ffff888027710880 RCX: 0000000000000000 [ 1273.069140][ C2] RDX: 0000000000000102 RSI: ffffffff8dbdc8a7 RDI: 0000000000000001 [ 1273.074903][ C2] RBP: ffff888045028610 R08: 0000000000000001 R09: 0000000000000001 [ 1273.079858][ C2] R10: ffffffff90851e17 R11: 0000000000000000 R12: 1ffff920000a7152 [ 1273.084820][ C2] R13: ffffc90000538ab0 R14: 00000000068a06fd R15: ffff888027710898 [ 1273.090979][ C2] ? __pfx_ref_tracker_free+0x10/0x10 [ 1273.094464][ C2] ? register_lock_class+0x41/0x4c0 [ 1273.098181][ C2] ? dev_watchdog+0x1dd/0xa10 [ 1273.101573][ C2] ? call_timer_fn+0x19a/0x620 [ 1273.104641][ C2] ? __run_timers+0x6ef/0x960 [ 1273.107660][ C2] ? run_timer_base+0x114/0x190 [ 1273.110869][ C2] ? run_timer_softirq+0x1a/0x40 [ 1273.114972][ C2] ? handle_softirqs+0x219/0x8e0 [ 1273.118203][ C2] ? __irq_exit_rcu+0x109/0x170 [ 1273.121163][ C2] ? irq_exit_rcu+0x9/0x30 [ 1273.124110][ C2] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1273.128715][ C2] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1273.132634][ C2] ? smp_call_function_many_cond+0x4a5/0x1290 [ 1273.137596][ C2] ? on_each_cpu_cond_mask+0x40/0x90 [ 1273.142344][ C2] ? text_poke_bp_batch+0x657/0x760 [ 1273.145931][ C2] ? text_poke_finish+0x30/0x40 [ 1273.151619][ C2] ? arch_jump_label_transform_apply+0x1c/0x30 [ 1273.157900][ C2] ? jump_label_update+0x376/0x550 [ 1273.161259][ C2] ? dev_watchdog+0x1b2/0xa10 [ 1273.164255][ C2] dev_watchdog+0x1dd/0xa10 [ 1273.167808][ C2] ? __pfx_dev_watchdog+0x10/0x10 [ 1273.171155][ C2] ? __pfx_dev_watchdog+0x10/0x10 [ 1273.174326][ C2] call_timer_fn+0x19a/0x620 [ 1273.177642][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 1273.181326][ C2] ? mark_held_locks+0x49/0x80 [ 1273.183314][ C2] ? __pfx_dev_watchdog+0x10/0x10 [ 1273.185368][ C2] __run_timers+0x6ef/0x960 [ 1273.187936][ C2] ? __pfx___run_timers+0x10/0x10 [ 1273.190946][ C2] run_timer_base+0x114/0x190 [ 1273.194268][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 1273.200172][ C2] run_timer_softirq+0x1a/0x40 [ 1273.202990][ C2] handle_softirqs+0x219/0x8e0 [ 1273.206678][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 1273.210433][ C2] __irq_exit_rcu+0x109/0x170 [ 1273.213554][ C2] irq_exit_rcu+0x9/0x30 [ 1273.216861][ C2] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1273.221112][ C2] [ 1273.223481][ C2] [ 1273.225415][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1273.229382][ C2] RIP: 0010:smp_call_function_many_cond+0x4a5/0x1290 [ 1273.233577][ C2] Code: 89 ee e8 0e 0a 0c 00 85 ed 74 48 48 8b 44 24 20 49 89 c4 83 e0 07 49 c1 ec 03 48 89 c5 4d 01 f4 83 c5 03 e8 ad 0e 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 de 0b 00 00 8b 43 08 31 [ 1273.247787][ C2] RSP: 0018:ffffc90003d6f938 EFLAGS: 00000293 [ 1273.252500][ C2] RAX: 0000000000000000 RBX: ffff88802b241460 RCX: ffffffff81aea199 [ 1273.258640][ C2] RDX: ffff88802adf8000 RSI: ffffffff81aea173 RDI: 0000000000000005 [ 1273.264662][ C2] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 1273.269903][ C2] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed100564828d [ 1273.273011][ C2] R13: 0000000000000001 R14: dffffc0000000000 R15: ffff88802b43b180 [ 1273.278501][ C2] ? smp_call_function_many_cond+0x4c9/0x1290 [ 1273.283811][ C2] ? smp_call_function_many_cond+0x4a3/0x1290 [ 1273.288989][ C2] ? smp_call_function_many_cond+0x4a3/0x1290 [ 1273.293129][ C2] ? __pfx_do_sync_core+0x10/0x10 [ 1273.297401][ C2] on_each_cpu_cond_mask+0x40/0x90 [ 1273.307816][ C2] text_poke_bp_batch+0x657/0x760 [ 1273.310282][ C2] ? __kmalloc_node_track_caller_noprof+0xec/0x510 [ 1273.314380][ C2] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 1273.327948][ C2] ? __jump_label_patch+0x1db/0x400 [ 1273.330905][ C2] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1273.334266][ C2] ? find_held_lock+0x2b/0x80 [ 1273.343502][ C2] text_poke_finish+0x30/0x40 [ 1273.346587][ C2] arch_jump_label_transform_apply+0x1c/0x30 [ 1273.350441][ C2] jump_label_update+0x376/0x550 [ 1273.354751][ C2] static_key_disable_cpuslocked+0x158/0x1c0 [ 1273.368104][ C2] static_key_disable+0x1a/0x20 [ 1273.370885][ C2] toggle_allocation_gate+0x145/0x280 [ 1273.374190][ C2] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1273.385413][ C2] ? rcu_is_watching+0x12/0xc0 [ 1273.387793][ C2] process_one_work+0x9cc/0x1b70 [ 1273.390460][ C2] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 1273.395743][ C2] ? __pfx_process_one_work+0x10/0x10 [ 1273.399835][ C2] ? assign_work+0x1a0/0x250 [ 1273.402702][ C2] worker_thread+0x6c8/0xf10 [ 1273.405675][ C2] ? __pfx_worker_thread+0x10/0x10 [ 1273.408866][ C2] kthread+0x3c5/0x780 [ 1273.411280][ C2] ? __pfx_kthread+0x10/0x10 [ 1273.414843][ C2] ? __pfx_kthread+0x10/0x10 [ 1273.418417][ C2] ? __pfx_kthread+0x10/0x10 [ 1273.421261][ C2] ? __pfx_kthread+0x10/0x10 [ 1273.424852][ C2] ? rcu_is_watching+0x12/0xc0 [ 1273.428291][ C2] ? __pfx_kthread+0x10/0x10 [ 1273.431585][ C2] ret_from_fork+0x48/0x80 [ 1273.434752][ C2] ? __pfx_kthread+0x10/0x10 [ 1273.437631][ C2] ret_from_fork_asm+0x1a/0x30 [ 1273.440617][ C2] [ 1273.451123][ C2] Kernel Offset: disabled [ 1273.455349][ C2] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:35:34 Registers: info registers vcpu 0 CPU#0 RAX=000000000134bf45 RBX=0000000000000000 RCX=ffffffff8b6973e9 RDX=0000000000000000 RSI=ffffffff8dbdc8a7 RDI=ffffffff8bf472e0 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000001 R9 =ffffed10056465bd R10=ffff88802b232deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90851e10 R15=0000000000000000 RIP=ffffffff8b695c7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977ea000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7327cc0 CR3=000000001ff29000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080080783 RBX=000000000000006a RCX=ffffc9003760a000 RDX=0000000000080000 RSI=ffffffff86994243 RDI=0000000000000005 RBP=0000000000005200 RSP=ffffc9000744f8c8 R8 =0000000000000005 R9 =0000000000000002 R10=0000000000000005 R11=0000000000000000 R12=ffffed1008a0525a R13=ffff8880450292d0 R14=ffffc900073a53a8 R15=ffffed1008a0525d RIP=ffffffff86994273 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880978ea000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002d6f9ff8 CR3=0000000050552000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000011400000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000000d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854c3af5 RDI=ffffffff9ade1c40 RBP=ffffffff9ade1c00 RSP=ffffc900005383e0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000000d R14=ffffffff9ade1c00 R15=ffffffff854c3a90 RIP=ffffffff854c3b1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979ea000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000008 CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000011400000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffff88806cbd0000 RCX=ffffc9000c3c1000 RDX=1ffff1100d97a0c8 RSI=ffffffff81844bca RDI=ffff88806cbd0640 RBP=0000000000000000 RSP=ffffc900076577c8 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc900076578f8 R11=0000000000000000 R12=0000000000000002 R13=ffff88802b131e30 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81844be2 RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097aea000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5044c80 CR3=00000000798e3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 965197c0afe15c3e 207e4d79d04e9c84 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 008bb19afa767487 b2a03710220a2597 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 28e0aeb4a1902c52 5f40ffbfbad04e2a ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2ed5b81102d2a457 6b4a2edb5db463ad ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002300 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 71cf0000a9210000 000001f0030358b7 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 439d774087160000 a98000009ac50000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 99fac0e403034b76 cc373c6a0eb12a64 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 03035b0000000036 e3ee0000030343e9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d79633cb04ec0f19 b3ed3e15ca34c6be ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c738b1c1645de52 896e150d987945c1 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000